Accepted linux 5.18.14-1~bpo11+1 (source) into bullseye-backports, bullseye-backports

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 Jul 2022 16:10:03 +0200
Source: linux
Architecture: source
Version: 5.18.14-1~bpo11+1
Distribution: bullseye-backports
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 825141 910010 973378 989079 1012054 1012288 1012655 1012794 1012880 1013255 1013895 1015240 1015808
Changes:
 linux (5.18.14-1~bpo11+1) bullseye-backports; urgency=medium
 .
   * Rebuild for bullseye-backports:
     - Change ABI number to 0.deb11.3
 .
 linux (5.18.14-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.6
     - Revert "drm/amd/display: Fix DCN3 B0 DP Alt Mapping" (regression in 5.16)
     - [arm64] dts: imx8mm-beacon: Enable RTS-CTS on UART3
     - [arm64] dts: imx8mn-beacon: Enable RTS-CTS on UART3
     - io_uring: reinstate the inflight tracking (CVE-2022-1976)
     - [arm64] ASoC: qcom: lpass-platform: Update VMA access permissions in mmap
       callback
     - drm/amd/display: Read Golden Settings Table from VBIOS
     - drm/amdgpu: Resolve RAS GFX error count issue after cold boot on Arcturus
     - [amd64] drm/amdkfd: Use mmget_not_zero in MMU notifier
     - [x86] ASoC: Intel: cirrus-common: fix incorrect channel mapping
     - [armel,armhf] ASoC: cs42l51: Correct minimum value for SX volume control
     - [amd64] drm/amdkfd: add pinned BOs to kfd_bo_list
     - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
     - quota: Prevent memory allocation recursion while holding dq_lock
     - [armhf] ASoC: es8328: Fix event generation for deemphasis control
     - [x86] ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()
     - [x86] ALSA: hda: MTL: add HD Audio PCI ID and HDMI codec vendor ID
     - [x86] Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to
       dmi_use_low_level_irq
     - [x86] scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
     - scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
     - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
     - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd
       completion
     - scsi: mpt3sas: Fix out-of-bounds compiler warning
     - scsi: ipr: Fix missing/incorrect resource cleanup in error case
     - scsi: pmcraid: Fix missing resource cleanup in error case
     - ALSA: hda/realtek - Add HW8326 support
     - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration
       failed
     - ipv6: Fix signed integer overflow in __ip6_append_data
     - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
     - random: credit cpu and bootloader seeds by default
     - [x86] platform/x86/intel: pmc: Support Intel Raptorlake P
     - [x86] platform/x86/intel: hid: Add Surface Go to VGBS allow list
     - staging: r8188eu: fix rtw_alloc_hwxmits error detection for now
       (regression in 5.18.4) (Closes: #1013895)
     - staging: r8188eu: Fix warning of array overflow in ioctl_linux.c
       (regression in 5.15)
     - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
     - pNFS: Avoid a live lock condition in pnfs_update_layout() (regression in
       5.14)
     - sunrpc: set cl_max_connect when cloning an rpc_clnt (regression in 5.15)
     - i40e: Fix adding ADQ filter to TC0
     - i40e: Fix calculating the number of queue pairs
     - i40e: Fix call trace in setup_tx_descriptors
     - iavf: Fix issue with MAC address of VF shown as zero (regression in 5.18)
     - [x86,arm64] Drivers: hv: vmbus: Release cpu lock in error case
     - [riscv64] dts: microchip: re-add pdma to mpfs device tree (regression in
       5.18)
     - io_uring: fix races with file table unregister
     - io_uring: fix races with buffer table unregister
     - [x86] drm/i915/reset: Fix error_state_read ptr + offset use
     - [arm64] net: hns3: set port base vlan tbl_sta to false before removing
       old vlan (regression in 5.18)
     - [arm64] net: hns3: don't push link state to VF if unalive
     - [arm64] net: hns3: restore tm priority/qset to default settings when tc
       disabled
     - [arm64] net: hns3: fix PF rss size initialization bug (regression in
       5.17)
     - [arm64] net: hns3: fix tm port shapping of fibre port is incorrect after
       driver initialization
     - ice: Fix PTP TX timestamp offset calculation
     - ice: Sync VLAN filtering features for DVM
     - ice: Fix queue config fail handling
     - ice: Fix memory corruption in VF driver
     - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg
     - [arm64] ftrace: fix branch range checks
     - [arm64] ftrace: consistently handle PLTs.
     - init: Initialize noop_backing_dev_info early (regression in 5.18.4)
     - block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
     - [x86] ftrace: Remove OBJECT_FILES_NON_STANDARD usage
     - [arm64,armhf] irqchip/gic-v3: Fix error handling in
       gic_populate_ppi_partitions
     - sched: Fix balance_push() vs __sched_setscheduler()
     - i2c: designware: Use standard optional ref clock implementation
     - [x86] mei: hbm: drop capability response on early shutdown
     - [x86] mei: me: add raptor lake point S DID
     - [x86] comedi: vmk80xx: fix expression for tx buffer size
     - USB: serial: option: add support for Cinterion MV31 with new baseline
     - USB: serial: io_ti: add Agilent E5805A support
     - [arm64] mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer
     - [arm64,armhf] usb: dwc2: Fix memory leak in dwc2_hcd_init
     - [arm64,armhf] usb: dwc3: gadget: Fix IN endpoint max packet size
       allocation
     - [arm64,armhf] usb: dwc3: pci: Restore line lost in merge conflict
       resolution (regression in 5.18)
     - usb: gadget: u_ether: fix regression in setting fixed MAC address
       (regression in 5.16)
     - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io()
     - usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io()
     - tty: n_gsm: Debug output allocation must use GFP_ATOMIC (regression in
       5.18.3)
     - serial: 8250: Store to lsr_save_flags after lsr read
     - [arm64] bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
     - md/raid5-ppl: Fix argument order in bio_alloc_bioset() (regression in
       5.18)
     - dm: fix race in dm_start_io_acct (regression in 5.18)
     - dm mirror log: round up region bitmap size to BITS_PER_LONG
     - drm/amdgpu: Fix GTT size reporting in amdgpu_ioctl (regression in 5.18)
     - drm/amd/display: Cap OLED brightness per max frame-average luminance
     - audit: free module name (regression in 5.16)
     - fs: account for group membership
     - selinux: free contexts previously transferred in selinux_add_opt()
       (regression in 5.18)
     - ext4: fix super block checksum incorrect after mount
     - ext4: fix bug_on ext4_mb_use_inode_pa
     - ext4: make variable "count" signed
     - ext4: add reserved GDT blocks check
     - [arm64] KVM: arm64: Always start with clearing SVE flag on load
       (regression in 5.17)
     - [arm64] KVM: arm64: Don't read a HW interrupt pending state in user
       context (regression in 5.17)
     - netfs: Fix gcc-12 warning by embedding vfs inode in netfs_i_context
     - [x86] drm/i915/uc: remove accidental static from a local variable
       (regression in 5.17)
     - bpf: Use safer kvmalloc_array() where possible
     - dm: fix bio_set allocation
     - [arm64] clk: imx8mp: fix usb_root_clk parent
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.7
     - [s390x] mm: use non-quiescing sske for KVM switch to keyed guest
     - zonefs: fix zonefs_iomap_begin() for reads
     - [x86] boot: Wrap literal addresses in absolute_pointer()
     - fsnotify: consistent behavior for parent not watching children
     - bpf: Fix calling global functions from BPF_PROG_TYPE_EXT programs
       (regression in 5.17)
     - io_uring: use original request task for inflight tracking
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.8
     - random: schedule mix_interrupt_randomness() less often
     - random: quiet urandom warning ratelimit suppression message
     - [x86] ALSA: memalloc: Drop x86-specific hack for WC allocations
     - ALSA: hda/via: Fix missing beep setup
     - [x86] ALSA: hda: Fix discovery of i915 graphics PCI device (regression in
       5.18)
     - ALSA: hda/conexant: Fix missing beep setup
     - [x86] ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop
     - ALSA: hda/realtek - ALC897 headset MIC no sound
     - [x86] ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly
     - [x86] ALSA: hda/realtek: Add quirk for Clevo PD70PNT
     - [x86] ALSA: hda/realtek: Add quirk for Clevo NS50PU
     - net: openvswitch: fix parsing of nw_proto for IPv6 fragments
     - ipv4: ping: fix bind address validity check (regression in 5.17)
     - 9p: Fix refcounting during full path walks for fid lookups
     - 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl
     - 9p: fix fid refcount leak in v9fs_vfs_get_link
     - 9p: fix EBADF errors in cached mode (regression in 5.16)
     - btrfs: fix hang during unmount when block group reclaim task is running
       (regression in 5.13)
     - btrfs: prevent remounting to v1 space cache for subpage mount
     - btrfs: add error messages to all unrecognized mount options
     - [powerpc*] scsi: ibmvfc: Store vhost pointer during subcrq allocation
     - [powerpc*] scsi: ibmvfc: Allocate/free queue resource only during probe/
       remove
     - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing
     - xen/gntdev: Avoid blocking in unmap_grant_pages()
     - dm era: commit metadata in postsuspend after worker stops
     - dm: do not return early from dm_io_complete if BLK_STS_AGAIN without
       polling (regression in 5.18)
     - dm mirror log: clear log bits up to BITS_PER_LONG boundary
     - tracing/kprobes: Check whether get_kretprobe() returns NULL in
       kretprobe_dispatcher()
     - filemap: Handle sibling entries in filemap_get_read_batch()
     - mm/slub: add missing TID updates on slab deactivation
     - [x86] drm/i915: Implement w/a 22010492432 for adl-s
     - amd/display/dc: Fix COLOR_ENCODING and COLOR_RANGE doing nothing for
       DCN20+
     - drm/amd/display: Fix typo in override_lane_settings
     - USB: serial: pl2303: add support for more HXN (G) types
     - USB: serial: option: add Telit LE910Cx 0x1250 composition
     - USB: serial: option: add Quectel EM05-G modem
     - USB: serial: option: add Quectel RM500K module support
     - [arm64] drm/msm: Ensure mmap offset is initialized
     - [arm64] drm/msm: Fix double pm_runtime_disable() call
     - netfilter: use get_random_u32 instead of prandom
     - scsi: scsi_debug: Fix zone transition to full condition
     - [arm64] drm/msm: Switch ordering of runpm put vs devfreq_idle (regression
       in 5.15)
     - scsi: iscsi: Exclude zero from the endpoint ID range (regression in 5.18)
     - xsk: Fix generic transmit when completion queue reservation fails
     - [arm64] drm/msm: use for_each_sgtable_sg to iterate over scatterlist
     - bpf: Fix request_sock leak in sk lookup helpers
     - [arm64,armhf] drm/sun4i: Fix crash during suspend after component bind
       failure
     - [amd64] bpf, x86: Fix tail call count offset calculation on bpf2bpf call
     - [x86,arm64] scsi: storvsc: Correct reporting of Hyper-V I/O size limits
     - phy: aquantia: Fix AN when higher speeds than 1G are not advertised
     - net: fix data-race in dev_isalive()
     - veth: Add updating of trans_start
     - tipc: fix use-after-free Read in tipc_named_reinit
     - block: disable the elevator int del_gendisk
     - rethook: Reject getting a rethook if RCU is not watching
     - igb: fix a use-after-free issue in igb_clean_tx_ring
     - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
     - ethtool: Fix get module eeprom fallback
     - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
     - [arm64] drm/msm/dp: check core_initialized before disable interrupts at
       dp_display_unbind() (regression in 5.18.3)
     - [arm64] drm/msm/dp: force link training for display resolution change
     - net: phy: at803x: fix NULL pointer dereference on AR9331 PHY (regression
       in 5.18)
     - perf arm-spe: Don't set data source if it's not a memory operation
     - erspan: do not assume transport header is always set
     - net/tls: fix tls_sk_proto_close executed repeatedly
     - netfilter: nf_dup_netdev: do not push mac header a second time
     - netfilter: nf_dup_netdev: add and use recursion counter
     - xen-blkfront: Handle NULL gendisk (regression in 5.14)
     - afs: Fix dynamic root getattr (regression in 5.18)
     - block: pop cached rq before potentially blocking rq_qos_throttle()
       (regression in 5.17)
     - ice: ignore protocol field in GTP offload
     - ice: Fix switchdev rules book keeping
     - ice: ethtool: advertise 1000M speeds properly
     - ice: ethtool: Prohibit improper channel config for DCB
     - io_uring: fail links when poll fails (regression in 5.17)
     - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips
     - regmap-irq: Fix offset/index mismatch in read_sub_irq_data()
     - drm/amd: Revert "drm/amd/display: keep eDP Vdd on when eDP stream is
       already enabled" (regression in 5.18)
     - igb: Make DMA faster when CPU is active on the PCIe link
     - virtio_net: fix xdp_rxq_info bug after suspend/resume
     - Revert "net/tls: fix tls_sk_proto_close executed repeatedly"
     - sock: redo the psock vs ULP protection check
     - nvme: move the Samsung X5 quirk entry to the core quirks
     - gpio: winbond: Fix error code in winbond_gpio_get()
     - [s390x] cpumf: Handle events cycles and instructions identical
     - filemap: Fix serialization adding transparent huge pages to page cache
       (regression in 5.18)
     - [x86] KVM: SEV: Init target VMCBs in sev_migrate_from
     - iio: mma8452: fix probe fail when device tree compatible is used.
     - io_uring: fix req->apoll_events (regression in 5.18)
     - io_uring: fix wrong arm_poll error handling (regression in 5.17)
     - vmcore: convert copy_oldmem_page() to take an iov_iter
     - [s390x] crash: add missing iterator advance in copy_oldmem_page()
     - [s390x] crash: make copy_oldmem_page() return number of bytes copied
     - xhci: turn off port power in shutdown
     - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI
     - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI
     - usb: gadget: uvc: fix list double add in uvcg_video_pump (regression in
       5.16)
     - usb: gadget: Fix non-unique driver names in raw-gadget driver
     - USB: gadget: Fix double-free bug in raw_gadget driver
     - [arm64,armhf] usb: chipidea: udc: check request status before setting
       device address
     - btrfs: fix race between reflinking and ordered extent completion
     - btrfs: fix deadlock with fsync+fiemap+transaction commit
     - f2fs: attach inline_data after setting compression (regression in 5.18.3)
     - f2fs: fix iostat related lock protection (regression in 5.17)
     - f2fs: do not count ENOENT for error case (regression in 5.18.4)
     - iio:accel:kxcjk-1013: rearrange iio trigger get and register
     - iio:accel:bma180: rearrange iio trigger get and register
     - iio:accel:mxc4005: rearrange iio trigger get and register
     - iio: accel: mma8452: ignore the return value of reset operation
     - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()
     - iio: trigger: sysfs: fix use-after-free on remove
     - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value)
     - iio: adc: axp288: Override TS pin bias current for some models
     - [hppa] Fix flush_anon_page on PA8800/PA8900 (regression in 5.18)
     - [hppa] Enable ARCH_HAS_STRICT_MODULE_RWX
     - [powerpc*] Enable execve syscall exit tracepoint
     - [powerpc*] rtas: Allow ibm,platform-dump RTAS call with null buffer
       address
     - [powerpc*] powernv: wire up rng during setup_arch
     - mm/memory-failure: disable unpoison once hw error happens
     - mm: lru_cache_disable: use synchronize_rcu_expedited (regression in 5.18)
     - [armhf] dts: imx6qdl: correct PU regulator ramp delay
     - modpost: fix section mismatch check for exported init/exit sections
     - [arm64] dts: bcm2711-rpi-400: Fix GPIO line names
     - smb3: fix empty netname context on secondary channels (regression in
       5.18.4)
     - perf build-id: Fix caching files with a wrong build ID
     - smb3: use netname when available on secondary channels
     - dma-direct: use the correct size for dma_set_encrypted() (regression in
       5.17)
     - [powerpc*] pseries: wire up rng during setup_arch()
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.9
     - bcache: memset on stack variables in bch_btree_check() and
       bch_sectors_dirty_init()
     - hinic: Replace memcpy() with direct assignment
     - [powerpc*] ftrace: Remove ftrace init tramp once kernel init is complete
     - io_uring: fix not locked access to fixed buf table
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.10
     - drm/amdgpu: fix adev variable used in amdgpu_device_gpu_recover()
       (regression in 5.17)
     - Revert "drm/amdgpu/display: set vblank_disable_immediate for DC"
       (regression in 5.17)
     - drm/amdgpu: To flush tlb for MMHUB of RAVEN series
     - ksmbd: set the range of bytes to zero without extending file size in
       FSCTL_ZERO_DATA
     - ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA
     - ksmbd: use vfs_llseek instead of dereferencing NULL
     - ipv6: take care of disable_policy when restoring routes
     - net: phy: Don't trigger state machine while in suspend
     - [s390x] archrandom: simplify back to earlier design and initialize
       earlier
     - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX
       S40G)
     - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1
     - nvdimm: Fix badblocks clear off-by-one error
     - ceph: wait on async create before checking caps for syncfs
       (regression in 5.18)
     - [hppa] Fix vDSO signal breakage on 32-bit kernel (regression in 5.18)
     - [hppa] unaligned: Fix emulate_ldw() breakage (regression in 5.18)
     - [powerpc*] prom_init: Fix kernel config grep
     - [powerpc*] bpf: Fix use of user_pt_regs in uapi
     - [x86] cpufreq: amd-pstate: Add resume and suspend callbacks
     - dm raid: fix accesses beyond end of raid member array
     - dm raid: fix KASAN warning in raid5_add_disks
     - SUNRPC: Fix READ_PLUS crasher
     - net: rose: fix UAF bugs caused by timer handler (CVE-2022-2318)
     - net: usb: ax88179_178a: Fix packet receiving (regression in 5.17)
     - virtio-net: fix race between ndo_open() and virtio_device_ready()
     - [armhf] net: dsa: bcm_sf2: force pause link settings
     - net: tun: unlink NAPI from device on destruction
     - net: tun: stop NAPI when detaching queues
     - net: fix IFF_TX_SKB_NO_LINEAR definition
     - net: dp83822: disable false carrier interrupt
     - net: dp83822: disable rx error interrupt
     - RDMA/qedr: Fix reporting QP timeout attribute
     - RDMA/cm: Fix memory leak in ib_cm_insert_listen
     - linux/dim: Fix divide by 0 in RDMA DIM
     - net: usb: asix: do not force pause frames support
     - usbnet: fix memory allocation in helpers
     - mptcp: fix race on unaccepted mptcp sockets (regression in 5.17)
     - mptcp: fix conflict with <netinet/in.h> (regression in 5.16)
     - [armhf] hwmon: (occ) Prevent power cap command overwriting poll response
     - NFS: restore module put when manager exits. (regression in 5.18)
     - NFSD: restore EINVAL error translation in nfsd_commit() (regression in
       5.17)
     - NFSv4: Add an fattr allocation to _nfs4_discover_trunking()
       (regression in 5.18.3)
     - vfs: fix copy_file_range() regression in cross-fs copies
     - caif_virtio: fix race between virtio_device_ready() and ndo_open()
     - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio
     - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events
     - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch()
     - vdpa/mlx5: Update Control VQ callback information
     - netfilter: nft_dynset: restore set element counter when failing to update
     - net/sched: act_api: Notify user space if any actions were flushed before
       error
     - net: asix: fix "can't send until first packet is send" issue
     - net: bonding: fix possible NULL deref in rlb code
     - net: phy: ax88772a: fix lost pause advertisement configuration
     - net: bonding: fix use-after-free after 802.3ad slave unbind
     - [arm64] net: dsa: felix: fix race between reading PSFP stats and port
       stats
     - [powerpc] memhotplug: Add add_pages override for PPC (regression in 5.18)
     - [x86] platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO
       resource (regression in 5.18)
     - [x86] platform/x86: ideapad-laptop: Add Ideapad 5 15ITL05 to
       ideapad_dytc_v4_allow_table[]
     - tipc: move bc link creation back to tipc_node_create
     - epic100: fix use after free on rmmod
     - tcp: add a missing nf_reset_ct() in 3WHS handling
     - nvmet-tcp: fix regression in data_digest calculation (regression in 5.12)
     - ACPI: video: Change how we determine if brightness key-presses are handled
     - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
     - fanotify: refine the validation checks on non-dir inode mask (regression
       in 5.18)
     - nvmet: add a clear_ids attribute for passthru targets
     - ipv6/sit: fix ipip6_tunnel_get_prl return value
     - ipv6: fix lockdep splat in in6_dump_addrs() (regression in 5.13)
     - net: tun: avoid disabling NAPI twice
     - [arm64] drm/msm/dpu: Increment vsync_cnt before waking up userspace
       (regression in 5.16)
     - [x86] platform/x86: ideapad-laptop: Add allow_v4_dytc module parameter
     - [x86] drm/i915/gem: add missing else
     - [x86] drm/i915/dgfx: Disable d3cold at gfx root port
     - [arm64] drm/msm/gem: Fix error return on fence id alloc fail (regression
       in 5.15)
     - [x86] platform/x86: panasonic-laptop: revert "Resolve hotkey double
       trigger bug"
     - [x86] platform/x86: panasonic-laptop: don't report duplicate brightness
       key-presses
     - [x86] platform/x86: panasonic-laptop: filter out duplicate volume up/down
       /mute keypresses
     - drm/fourcc: fix integer type usage in uapi header
     - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add()
       fails
     - xen/blkfront: fix leaking data in shared pages (CVE-2022-26365)
     - xen/netfront: fix leaking data in shared pages (CVE-2022-33740)
     - xen/netfront: force data bouncing when backend is untrusted
       (CVE-2022-33741)
     - xen/blkfront: force data bouncing when backend is untrusted
       (CVE-2022-33742)
     - xen-netfront: restore __skb_queue_tail() positioning in
       xennet_get_responses() (CVE-2022-33743)
     - [arm64,armhf] xen/arm: Fix race in RB-tree based P2M accounting
       (CVE-2022-33744)
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.11
     - io_uring: fix provided buffer import (regression in 5.18)
     - ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD
     - [x86] ALSA: hda/realtek: Add quirk for Clevo L140PU
     - can: bcm: use call_rcu() instead of costly synchronize_rcu()
     - can: gs_usb: gs_usb_open/close(): fix memory leak
     - can: kvaser_usb: replace run-time checks with struct
       kvaser_usb_driver_info
     - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression
       (regression in 5.16)
     - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits
     - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne
     - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals
     - usbnet: fix memory leak in error case
     - net: rose: fix UAF bug caused by rose_t0timer_expiry
     - netfilter: nft_set_pipapo: release elements in clone from abort path
     - netfilter: nf_tables: stricter validation of element data
       (CVE-2022-34918)
     - [x86] iommu/vt-d: Fix PCI bus rescan device hot add
     - [x86] iommu/vt-d: Fix RID2PASID setup/teardown failure
     - fbdev: Fix potential buffer overflow with silly screen sizes
       (CVE-2021-33655):
       + fbmem: Check virtual screen sizes in fb_set_var()
       + fbcon: Disallow setting font bigger than screen size
       + fbcon: Prevent that screen size is smaller than font size
     - PM: runtime: Redefine pm_runtime_release_supplier()
     - PM: runtime: Fix supplier device management during consumer probe
     - memregion: Fix memregion_free() fallback definition
     - fscache: Fix invalidation/lookup race (regression in 5.17)
     - fscache: Fix if condition in fscache_wait_on_volume_collision()
     - [powerpc*] powernv: delay rng platform device creation until later in
       boot
     - [armhf] pinctrl: sunxi: a83t: Fix NAND function name for some pins
     - srcu: Tighten cleanup_srcu_struct() GP checks
     - ASoC: rt711: Add endianness flag in snd_soc_component_driver
     - ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver
     - ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect
     - ASoC: SOF: ipc3-topology: Move and correct size checks in
       sof_ipc3_control_load_bytes()
     - [x86] ASoC: SOF: Intel: hda: Fix compressed stream position tracking
     - [arm64] dts: qcom: sm8450: fix interconnects property of UFS node
     - [arm64] dts: qcom: msm8994: Fix CPU6/7 reg values
     - [arm64] dts: qcom: sdm845: use dispcc AHB clock for mdss node
     - [arm64] dts: imx8mp-evk: correct mmc pad settings
     - [arm64] dts: imx8mp-evk: correct the uart2 pinctl value
     - [arm64] dts: imx8mp-evk: correct gpio-led pad settings
     - [arm64] dts: imx8mp-evk: correct vbus pad settings
     - [arm64] dts: imx8mp-evk: correct eqos pad settings
     - [arm64] dts: imx8mp-evk: correct I2C5 pad settings
     - [arm64] dts: imx8mp-evk: correct I2C1 pad settings
     - [arm64] dts: imx8mp-evk: correct I2C3 pad settings
     - [arm64] dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings
     - [arm64] dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings
     - [arm64] dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings
     - [arm64,armhf] pinctrl: sunxi: sunxi_pconf_set: use correct offset
     - [arm64] dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo
     - xsk: Clear page contiguity bit when unmapping pool
     - i2c: piix4: Fix a memory leak in the EFCH MMIO support
     - i40e: Fix dropped jumbo frames statistics
     - i40e: Fix VF's MAC Address change on VM
     - [armhf] dts: stm32: add missing usbh clock and fix clk order on stm32mp15
     - ACPI: CPPC: Check _OSC for flexible address space
     - ACPI: bus: Set CPPC _OSC bits for all and when CPPC_LIB is supported
     - ACPI: CPPC: Only probe for _CPC if CPPC v2 is acked (regressions in
       5.13, 5.18)
     - [x86] ACPI: CPPC: Don't require _OSC if X86_FEATURE_CPPC is supported
     - net/mlx5e: Fix matchall police parameters validation
     - mptcp: Avoid acquiring PM lock for subflow priority changes
     - mptcp: Acquire the subflow socket lock before modifying MP_PRIO flags
     - mptcp: fix local endpoint accounting
     - r8169: fix accessing unset transport header
     - net/sched: act_api: Add extack to offload_act_setup() callback
     - net/sched: act_police: Add extack messages for offload failure
     - net/sched: act_police: allow 'continue' action offload
     - [arm64] dmaengine: imx-sdma: Allow imx8m for imx7 FW revs
     - [arm64,armhf] dmaengine: imx-sdma: only restart cyclic channel when
       enabled (regression in 5.18)
     - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
       (Closes: #1015240, regression in 5.18)
     - misc: rtsx_usb: use separate command and response buffers
     - misc: rtsx_usb: set return value in rsp_buf alloc err path
     - ida: don't use BUG_ON() for debugging
     - [arm64,armhf] dmaengine: pl330: Fix lockdep warning about non-static key
     - [armhf] dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
     - [arm64] dmaengine: qcom: bam_dma: fix runtime PM underflow
     - [armhf] dmaengine: ti: Add missing put_device in
       ti_dra7_xbar_route_allocate
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.12
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13
     - USB: serial: ftdi_sio: add Belimo device ids
     - usb: typec: add missing uevent when partner support PD
     - [arm64,armhf] usb: dwc3: gadget: Fix event pending check
     - gpio: sim: fix the chip_name configfs item
     - [armhf] tty: serial: samsung_tty: set dma burst_size to 1
     - [x86] xen: Use clear_bss() for Xen PV guests
     - [x86] ALSA: hda - Add fixup for Dell Latitidue E5430
     - [x86] ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model
     - [x86] ALSA: hda/realtek: Fix headset mic for Acer SF313-51
     - [x86] ALSA: hda/realtek - Fix headset mic problem for a HP machine with
       alc671
     - [x86] ALSA: hda/realtek: fix mute/micmute LEDs for HP machines
     - [x86] ALSA: hda/realtek - Fix headset mic problem for a HP machine with
       alc221
     - [x86] ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
     - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
     - fix race between exit_itimers() and /proc/pid/timers
     - mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages
     - mm: sparsemem: fix missing higher order allocation splitting (regression
       in 5.18)
     - mm: split huge PUD on wp_huge_pud fallback
     - tracing/histograms: Fix memory leak problem
     - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale
       pointer
     - ip: fix dflt addr selection for connected nexthop
     - [armhf] 9213/1: Print message about disabled Spectre workarounds only
       once
     - [armel,armhf] 9214/1: alignment: advance IT state after emulating Thumb
       instruction
     - wifi: mac80211: fix queue selection for mesh/OCB interfaces
     - cgroup: Use separate src/dst nodes when preloading css_sets for migration
     - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and
       inline extents
     - btrfs: zoned: fix a leaked bioc in read_zone_info
     - [arm64,armhf] drm/panfrost: Put mapping instead of shmem obj on
       panfrost_mmu_map_fault_addr() error
     - [arm64,armhf] drm/panfrost: Fix shrinker list corruption by madvise IOCTL
     - fs/remap: constrain dedupe of EOF blocks
     - nilfs2: fix incorrect masking of permission flags for symlinks
     - Revert "evm: Fix memleak in init_desc"
     - reset: Fix devm bulk optional exclusive control getter
     - [arm64] dts: ls1028a: Update SFP node to include clock
     - [armhf] dts: imx6qdl-ts7970: Fix ngpio typo and count
     - [riscv64] dts: microchip: hook up the mpfs' l2cache
     - [armhf] 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out
       of idle
     - [armel,armhf] 9210/1: Mark the FDT_FIXED sections as shareable
     - net/mlx5e: Fix enabling sriov while tc nic rules are offloaded
       (regression in 5.14)
     - net/mlx5e: CT: Use own workqueue instead of mlx5e priv (regression in
       5.18)
     - net/mlx5e: Fix capability check for updating vnic env counters
     - net/mlx5e: Ring the TX doorbell on DMA errors
     - drm/amdgpu: keep fbdev buffers pinned during suspend (regression in 5.17)
     - drm/amdgpu/display: disable prefer_shadow for generic fb helpers
       (regression in 5.17)
     - [x86] drm/i915: fix a possible refcount leak in
       intel_dp_add_mst_connector()
     - [x86] drm/i915/guc: ADL-N should use the same GuC FW as ADL-S
     - ima: Fix a potential integer overflow in ima_appraise_measurement
     - [arm64,armhf] ASoC: sgtl5000: Fix noise on shutdown/remove
     - [x86] ASoC: Intel: Skylake: Correct the ssp rate discovery in
       skl_get_ssp_clks()
     - [x86] ASoC: Intel: Skylake: Correct the handling of fmt_config flexible
       array
     - netfilter: ecache: move to separate structure
     - netfilter: conntrack: split inner loop of list dumping to own function
     - netfilter: ecache: use dedicated list for event redelivery
     - netfilter: conntrack: include ecache dying list in dumps
     - netfilter: conntrack: remove the percpu dying list
     - netfilter: conntrack: fix crash due to confirmed bit load reordering
       (regression in 5.17)
     - sysctl: Fix data races in proc_dointvec().
     - sysctl: Fix data races in proc_douintvec().
     - sysctl: Fix data races in proc_dointvec_minmax().
     - sysctl: Fix data races in proc_douintvec_minmax().
     - sysctl: Fix data races in proc_doulongvec_minmax().
     - sysctl: Fix data races in proc_dointvec_jiffies().
     - tcp: Fix a data-race around sysctl_tcp_max_orphans.
     - inetpeer: Fix data-races around sysctl.
     - net: Fix data-races around sysctl_mem.
     - cipso: Fix data-races around sysctl.
     - icmp: Fix data-races around sysctl.
     - ipv4: Fix a data-race around sysctl_fib_sync_mem.
     - [armhf] dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero
     - netfilter: nf_log: incorrect offset to network header
     - nfp: fix issue of skb segments exceeds descriptor limitation
     - vlan: fix memory leak in vlan_newlink() (regression in 5.17)
     - netfilter: nf_tables: replace BUG_ON by element length check
     - [riscv64] KVM: Fix SRCU deadlock caused by
       kvm_riscv_check_vcpu_requests()
     - [x86] drm/i915/gvt: IS_ERR() vs NULL bug in
       intel_gvt_update_reg_whitelist()
     - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE
     - mptcp: fix subflow traversal at disconnect time (regression in 5.17)
     - NFSD: Decode NFSv4 birth time attribute (regression in 5.18)
     - lockd: set fl_owner when unlocking files
     - lockd: fix nlm_close_files (regression in 5.15)
     - ice: handle E822 generic device ID in PLDM header
     - ice: change devlink code to read NVM in blocks
     - [x86] drm/i915/ttm: fix sg_table construction (regression in 5.15)
     - [x86] drm/i915/gt: Serialize GRDOM access between multiple engine resets
     - [x86] drm/i915/gt: Serialize TLB invalidates with GT resets
     - bnxt_en: reclaim max resources if sriov enable fails
     - bnxt_en: Fix bnxt_reinit_after_abort() code path
     - bnxt_en: fix livepatch query
     - bnxt_en: Fix bnxt_refclk_read()
     - sysctl: Fix data-races in proc_dou8vec_minmax().
     - sysctl: Fix data-races in proc_dointvec_ms_jiffies().
     - tcp: Fix a data-race around sysctl_max_tw_buckets.
     - icmp: Fix a data-race around sysctl_icmp_echo_ignore_all.
     - icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
     - icmp: Fix a data-race around sysctl_icmp_echo_ignore_broadcasts.
     - icmp: Fix a data-race around sysctl_icmp_ignore_bogus_error_responses.
     - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
     - icmp: Fix a data-race around sysctl_icmp_ratelimit.
     - icmp: Fix a data-race around sysctl_icmp_ratemask.
     - raw: Fix a data-race around sysctl_raw_l3mdev_accept.
     - tcp: Fix data-races around sysctl_tcp_ecn.
     - tcp: Fix a data-race around sysctl_tcp_ecn_fallback.
     - ipv4: Fix data-races around sysctl_ip_dynaddr.
     - nexthop: Fix data-races around nexthop_compat_mode.
     - [amd64] ima: force signature verification when CONFIG_KEXEC_SIG is
       configured
     - drm/amd/display: Ignore First MST Sideband Message Return Error
     - [amd64] drm/amdkfd: correct the MEC atomic support firmware checking for
       GC 10.3.7
     - drm/amd/display: Only use depth 36 bpp linebuffers on DCN display
       engines. (regression in 5.14)
     - drm/amd/pm: Prevent divide by zero
     - drm/amd/display: Ensure valid event timestamp for cursor-only commits
     - smb3: workaround negprot bug in some Samba servers
     - sfc: fix use after free when disabling sriov
     - netfs: do not unlock and put the folio twice
     - seg6: fix skb checksum evaluation in SRH encapsulation/insertion
     - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors
     - seg6: bpf: fix skb checksum in bpf_push_seg6_encap()
     - sfc: fix kernel panic when creating VF
     - net: atlantic: remove deep parameter on suspend/resume functions
     - net: atlantic: remove aq_nic_deinit() when resume (regression in 5.18)
     - [x86] KVM: x86: Fully initialize 'struct kvm_lapic_irq' in
       kvm_pv_kick_cpu_op()
     - net/tls: Check for errors in tls_device_init
     - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE
     - [arm64] tee: tee_get_drvdata(): fix description of return value
     - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
     - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
     - scsi: megaraid: Clear READ queue map's nr_queues (regression in 5.13)
     - scsi: ufs: core: Drop loglevel of WriteBoost message (regression in 5.13)
     - nvme: fix block device naming collision (regression in 5.18)
     - ksmbd: use SOCK_NONBLOCK type for kernel_accept()
     - [x86] platform/x86: intel/pmc: Add Alder Lake N support to PMC core
       driver
     - virtio_mmio: Add missing PM calls to freeze/restore
     - virtio_mmio: Restore guest page size on resume
     - netfilter: nf_tables: avoid skb access on nf_stolen
     - netfilter: br_netfilter: do not skip all hooks with 0 priority
     - [arm64] scsi: hisi_sas: Limit max hw sectors for v3 HW
     - [powerpc*] cpufreq: pmac32-cpufreq: Fix refcount leak bug
     - [x86] platform/x86: thinkpad-acpi: profile capabilities as integer
     - [x86] platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms
     - [x86] platform/x86: hp-wmi: Ignore Sanitization Mode event
     - firmware: sysfb: Make sysfb_create_simplefb() return a pdev pointer
     - firmware: sysfb: Add sysfb_disable() helper function
     - fbdev: Disable sysfb device registration when removing conflicting FBs
     - net: tipc: fix possible refcount leak in tipc_sk_create()
     - nvme-tcp: always fail a request when sending it failed
     - nvme: fix regression when disconnect a recovering ctrl
     - net: sfp: fix memory leak in sfp_probe()
     - ASoC: ops: Fix off by one in range control validation
     - [armhf] pinctrl: aspeed: Fix potential NULL dereference in
       aspeed_pinmux_set_mux()
     - ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove
     - ASoC: rt711-sdca-sdw: fix calibrate mutex initialization
     - [x86] ASoC: Intel: sof_sdw: handle errors on card registration
     - ASoC: rt711: fix calibrate mutex initialization
     - ASoC: rt7*-sdw: harden jack_detect_handler
     - ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe
     - [x86] ASoC: SOF: Intel: hda-dsp: Expose hda_dsp_core_power_up()
     - [x86] ASoC: SOF: Intel: hda-loader: Make sure that the fw load sequence
       is followed
     - [x86] ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow
     - [x86] ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem
     - ASoC: wm_adsp: Fix event for preloader
     - ASoC: cs35l41: Correct some control names
     - ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error
     - ASoC: dapm: Initialise kcontrol data for mux/demux controls
     - ASoC: cs35l41: Add ASP TX3/4 source to register patch
     - [amd64] Clear .brk area at early boot
     - [armhf] dts: stm32: use the correct clock source for CEC on stm32mp151
     - Revert "can: xilinx_can: Limit CANFD brp to 2"
     - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
     - ALSA: usb-audio: Add quirk for Fiero SC-01
     - ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0)
     - nvme-pci: phison e16 has bogus namespace ids
     - nvme: use struct group for generic command dwords
     - signal handling: don't use BUG_ON() for debugging
     - ACPI: video: Fix acpi_video_handles_brightness_key_presses()
     - vt: fix memory overlapping when deleting chars in the buffer
     - [s390x] ap: fix error handling in __verify_queue_reservations()
     - [x86] ACPI: CPPC: Fix enabling CPPC on AMD systems with shared memory
     - serial: 8250: fix return error code in serial8250_request_std_resource()
     - power: supply: core: Fix boundary conditions in interpolation
       (regression in 5.17)
     - [armhf] serial: stm32: Clear prev values before setting RTS delays
     - [arm*] serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle
     - serial: 8250: Fix PM usage_count for console handover
     - [arm64] serial: mvebu-uart: correctly report configured baudrate value
     - [x86] pat: Fix x86_has_pat_wp()
     - [i386] drm/i915/ttm: fix 32b build
     - drm/aperture: Run fbdev removal before internal helpers
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.14
     - [amd64] Preparation for mitigating RETbleed:
       + x86/traps: Use pt_regs directly in fixup_bad_iret()
       + x86/entry: Switch the stack after error_entry() returns
       + x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry()
       + x86/entry: Don't call error_entry() for XENPV
       + x86/entry: Remove skip_r11rcx
     - [amd64] Add mitigations for RETbleed on AMD/Hygon (CVE-2022-29900) and
       Intel (CVE-2022-29901) processors:
       + x86/kvm/vmx: Make noinstr clean
       + x86/cpufeatures: Move RETPOLINE flags to word 11
       + x86/retpoline: Cleanup some #ifdefery
       + x86/retpoline: Swizzle retpoline thunk
       + x86/retpoline: Use -mfunction-return
       + x86: Undo return-thunk damage
       + x86,objtool: Create .return_sites
       + objtool: skip non-text sections when adding return-thunk sites
       + x86,static_call: Use alternative RET encoding
       + x86/ftrace: Use alternative RET encoding
       + x86/bpf: Use alternative RET encoding
       + x86/kvm: Fix SETcc emulation for return thunks
       + x86/vsyscall_emu/64: Don't use RET in vsyscall emulation
       + x86/sev: Avoid using __x86_return_thunk
       + x86: Use return-thunk in asm code
       + x86/entry: Avoid very early RET
       + objtool: Treat .text.__x86.* as noinstr
       + x86: Add magic AMD return-thunk
       + x86/bugs: Report AMD retbleed vulnerability
       + x86/bugs: Add AMD retbleed= boot parameter
       + x86/bugs: Enable STIBP for JMP2RET
       + x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
       + x86/entry: Add kernel IBRS implementation
       + x86/bugs: Optimize SPEC_CTRL MSR writes
       + x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
       + x86/bugs: Split spectre_v2_select_mitigation() and
         spectre_v2_user_select_mitigation()
       + x86/bugs: Report Intel retbleed vulnerability
       + intel_idle: Disable IBRS during long idle
       + objtool: Update Retpoline validation
       + x86/xen: Rename SYS* entry points
       + x86/xen: Add UNTRAIN_RET
       + x86/bugs: Add retbleed=ibpb
       + x86/bugs: Do IBPB fallback check only once
       + objtool: Add entry UNRET validation
       + x86/cpu/amd: Add Spectral Chicken
       + x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
       + x86/speculation: Fix firmware entry SPEC_CTRL handling
       + x86/speculation: Fix SPEC_CTRL write on SMT state change
       + x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
       + x86/speculation: Remove x86_spec_ctrl_mask
       + objtool: Re-add UNWIND_HINT_{SAVE_RESTORE}
       + KVM: VMX: Flatten __vmx_vcpu_run()
       + KVM: VMX: Convert launched argument to flags
       + KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
       + KVM: VMX: Fix IBRS handling after vmexit
       + x86/speculation: Fill RSB on vmexit for IBRS
       + KVM: VMX: Prevent RSB underflow before vmenter
       + x86/common: Stamp out the stepping madness
       + x86/cpu/amd: Enumerate BTC_NO
       + x86/retbleed: Add fine grained Kconfig knobs
       + x86/bugs: Add Cannon lake to RETBleed affected CPU list
       + x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry
       + x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
       + x86/kexec: Disable RET on kexec
       + x86/speculation: Disable RRSBA behavior
       + x86/static_call: Serialize __static_call_fixup() properly
       + x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit
       + x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
       + efi/x86: use naked RET on mixed mode call wrapper
       + x86/kvm: fix FASTOP_SIZE when return thunks are enabled
       + KVM: emulate: do not adjust size of fastop and setcc subroutines
       + tools arch x86: Sync the msr-index.h copy with the kernel sources
       + tools headers cpufeatures: Sync with the kernel sources
       + x86/bugs: Remove apostrophe typo
       + um: Add missing apply_returns()
 .
   [ John Paul Adrian Glaubitz ]
   * [ia64] Disable CONFIG_HARDENED_USERCOPY which is currently broken
 .
   [ Ben Hutchings ]
   * [arm64] pinctrl: Re-enable PINCTRL_MSM (regression in 5.14)
   * lintian: Update overrides for lintian 2.115
   * [rt] Update to 5.18-rt11:
     - Revert "softirq: Check preemption after reenabling interrupts"
   * Bump ABI to 3
   * Disable SECURITY_LOCKDOWN_LSM and MODULE_SIG where we don't sign code
     (Closes: #825141)
   * tools/bpf, tools/perf: Update for init_disassemble_info() API change in
     binutils 2.38.50
   * tools/perf: Fix "unused parameter" warning introduced by "tools/perf:
     pmu-events: Fix reproducibility"
   * [amd64,arm64,armhf] wireguard: Clear keys after suspend despite
     CONFIG_ANDROID=y
   * d/salsa-ci.yml: Sync build-script with upstream
   * d/salsa-ci.yml: Handle APT sources in debian.sources as well as
     sources.list
   * d/tests: Remove obsolete dependencies of python test
   * d/tests: Add kbuild test that builds a trivial OOT module
   * linux-kbuild: Add missing pahole-version.sh script
   * [amd64] ata: Enable PATA_LEGACY (Closes: #910010)
   * udeb: Add essiv to crypto-modules (Closes: #973378)
   * udeb: Add SCSI device handlers to multipath-modules (Closes: #989079)
   * linux-source: Update Recommends to include all dependencies for deb-pkg
     target
   * [x86] speculation: Make all RETbleed mitigations depend on X86_64
 .
   [ Vincent Blut ]
   * [armhf] drivers/crypto/caam: Enable CRYPTO_DEV_FSL_CAAM as module
     (Closes: #1013255)
   * drivers/net/wireless/mediatek/mt76/mt7921: Enable MT7921U as module
     (Closes: #1015808)
 .
 linux (5.18.5-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.3
     - binfmt_flat: do not stop relocating GOT entries prematurely on riscv
     - parisc: fix a crash with multicore scheduler
     - parisc/stifb: Implement fb_is_primary_device()
     - parisc/stifb: Keep track of hardware path of graphics card
     - RISC-V: Mark IORESOURCE_EXCLUSIVE for reserved mem instead of
       IORESOURCE_BUSY
     - riscv: Initialize thread pointer before calling C functions
     - riscv: Fix irq_work when SMP is disabled
     - riscv: Wire up memfd_secret in UAPI header
     - riscv: Move alternative length validation into subsection
     - ALSA: hda/realtek - Add new type for ALC245
     - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop
     - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
     - ALSA: usb-audio: Cancel pending work at closing a MIDI substream
     - USB: serial: pl2303: fix type detection for odd device
     - USB: serial: option: add Quectel BG95 modem
     - USB: new quirk for Dell Gen 2 devices
     - usb: isp1760: Fix out-of-bounds array access
     - usb: dwc3: gadget: Move null pinter check to proper place
     - usb: core: hcd: Add support for deferring roothub registration
     - fs/ntfs3: provide block_invalidate_folio to fix memory leak
     - fs/ntfs3: Update valid size if -EIOCBQUEUED
     - fs/ntfs3: Fix fiemap + fix shrink file size (to remove preallocated space)
     - fs/ntfs3: Keep preallocated only if option prealloc enabled
     - fs/ntfs3: Check new size for limits
     - fs/ntfs3: In function ntfs_set_acl_ex do not change inode->i_mode if
       called from function ntfs_init_acl
     - fs/ntfs3: Fix some memory leaks in an error handling path of
       'log_replay()'
     - fs/ntfs3: Update i_ctime when xattr is added
     - fs/ntfs3: Restore ntfs_xattr_get_acl and ntfs_xattr_set_acl functions
     - cifs: don't call cifs_dfs_query_info_nonascii_quirk() if nodfs was set
     - cifs: fix ntlmssp on old servers
     - cifs: fix potential double free during failed mount
     - cifs: when extending a file with falloc we should make files not-sparse
     - xhci: Set HCD flag to defer primary roothub registration
     - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI
     - platform/x86: intel-hid: fix _DSM function index handling
     - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails
     - perf/x86/intel: Fix event constraints for ICL
     - x86/kexec: fix memory leak of elf header buffer
     - x86/sgx: Set active memcg prior to shmem allocation
     - kthread: Don't allocate kthread_struct for init and umh
     - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
     - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
     - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
     - btrfs: add "0x" prefix for unsupported optional features
     - btrfs: return correct error number for __extent_writepage_io()
     - btrfs: repair super block num_devices automatically
     - btrfs: fix the error handling for submit_extent_page() for
       btrfs_do_readpage()
     - btrfs: fix deadlock between concurrent dio writes when low on free data
       space
     - btrfs: zoned: properly finish block group on metadata write
     - btrfs: zoned: zone finish unused block group
     - btrfs: zoned: finish block group when there are no more allocatable bytes
       left
     - btrfs: zoned: fix comparison of alloc_offset vs meta_write_pointer
     - iommu/vt-d: Add RPLS to quirk list to skip TE disabling
     - drm/selftests: fix a shift-out-of-bounds bug
     - drm/vmwgfx: validate the screen formats
     - ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()
     - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
     - selftests/bpf: Fix vfs_link kprobe definition
     - selftests/bpf: Fix parsing of prog types in UAPI hdr for bpftool sync
     - ath11k: Change max no of active probe SSID and BSSID to fw capability
     - selftests/bpf: Fix file descriptor leak in load_kallsyms()
     - rtw89: ser: fix CAM leaks occurring in L2 reset
     - rtw89: fix misconfiguration on hw_scan channel time
     - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
     - b43legacy: Fix assigning negative value to unsigned variable
     - b43: Fix assigning negative value to unsigned variable
     - ipw2x00: Fix potential NULL dereference in libipw_xmit()
     - ipv6: fix locking issues with loops over idev->addr_list
     - fbcon: Consistently protect deferred_takeover with console_lock()
     - x86/platform/uv: Update TSC sync state for UV5
     - ACPICA: Avoid cache flush inside virtual machines
     - libbpf: Fix a bug with checking bpf_probe_read_kernel() support in old
       kernels
     - mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs
       output)
     - drm/komeda: return early if drm_universal_plane_init() fails.
     - drm/amd/display: Disabling Z10 on DCN31
     - rcu-tasks: Fix race in schedule and flush work
     - rcu-tasks: Handle sparse cpu_possible_mask in rcu_tasks_invoke_cbs()
     - rcu: Make TASKS_RUDE_RCU select IRQ_WORK
     - sfc: ef10: Fix assigning negative value to unsigned variable
     - ALSA: jack: Access input_dev under mutex
     - rtw88: fix incorrect frequency reported
     - rtw88: 8821c: fix debugfs rssi value
     - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA
       direction
     - tools/power turbostat: fix ICX DRAM power numbers
     - tcp: consume incoming skb leading to a reset
     - loop: implement ->free_disk
     - scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg()
     - scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock
     - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and
       PLOGI
     - scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT
     - scsi: lpfc: Fix call trace observed during I/O with CMF enabled
     - cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode
     - drm/amdgpu/pm: fix the null pointer while the smu is disabled
     - drm/amd/pm: fix double free in si_parse_power_table()
     - ASoC: rsnd: care default case on rsnd_ssiu_busif_err_status_clear()
     - ASoC: rsnd: care return value from rsnd_node_fixed_index()
     - net: macb: In ZynqMP initialization make SGMII phy configuration optional
     - ath9k: fix QCA9561 PA bias level
     - media: Revert "media: dw9768: activate runtime PM and turn off device"
     - media: i2c: dw9714: Disable the regulator when the driver fails to probe
     - media: venus: hfi: avoid null dereference in deinit
     - media: venus: do not queue internal buffers from previous sequence
     - media: pci: cx23885: Fix the error handling in cx23885_initdev()
     - media: cx25821: Fix the warning when removing the module
     - md/bitmap: don't set sb values if can't pass sanity check
     - mmc: jz4740: Apply DMA engine limits to maximum segment size
     - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit
     - scsi: megaraid: Fix error check return value of register_chrdev()
     - drm/amdgpu/sdma: Fix incorrect calculations of the wptr of the doorbells
     - scsi: ufs: Use pm_runtime_resume_and_get() instead of
       pm_runtime_get_sync()
     - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()
     - ath11k: disable spectral scan during spectral deinit
     - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408
     - drm/plane: Move range check for format_count earlier
     - drm/amdkfd: Fix circular lock dependency warning
     - drm/amd/pm: fix the compile warning
     - ath10k: skip ath10k_halt during suspend for driver state RESTARTING
     - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
     - drm: msm: fix error check return value of irq_of_parse_and_map()
     - drm/msm/dpu: Clean up CRC debug logs
     - xtensa: move trace_hardirqs_off call back to entry.S
     - ath11k: fix warning of not found station for bssid in message
     - scsi: target: tcmu: Fix possible data corruption
     - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
     - net/mlx5: use kvfree() for kvzalloc() in mlx5_ct_fs_smfs_matcher_create
     - net/mlx5: fs, delete the FTE when there are no rules attached to it
     - ASoC: dapm: Don't fold register value changes into notifications
     - ASoC: SOF: ipc3-topology: Correct get_control_data for non bytes payload
     - mlxsw: spectrum_dcb: Do not warn about priority changes
     - mlxsw: Treat LLDP packets as control
     - drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init
     - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
     - regulator: mt6315: Enforce regulator-compatible, not name
     - ice: always check VF VSI pointer values
     - HID: bigben: fix slab-out-of-bounds Write in bigben_probe
     - drm/tegra: gem: Do not try to dereference ERR_PTR()
     - of: Support more than one crash kernel regions for kexec -s
     - ASoC: tscs454: Add endianness flag in snd_soc_component_driver
     - net/mlx5: Increase FW pre-init timeout for health recovery
     - ASoC: Intel: sof_ssp_amp: fix no DMIC BE Link on Chromebooks
     - scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW
     - scsi: lpfc: Inhibit aborts if external loopback plug is inserted
     - scsi: lpfc: Alter FPIN stat accounting logic
     - net: remove two BUG() from skb_checksum_help()
     - s390/preempt: disable __preempt_count_add() optimization for
       PROFILE_ALL_BRANCHES
     - perf/amd/ibs: Cascade pmu init functions' return value
     - sched/core: Avoid obvious double update_rq_clock warning
     - spi: stm32-qspi: Fix wait_cmd timeout in APM mode
     - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
     - fs: hold writers when changing mount's idmapping
     - ASoC: SOF: amd: add missing platform_device_unregister in acp_pci_rn_probe
     - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
     - ipmi:ssif: Check for NULL msg when handling events and messages
     - ipmi: Add an intializer for ipmi_smi_msg struct
     - ipmi: Fix pr_fmt to avoid compilation issues
     - kunit: bail out of test filtering logic quicker if OOM
     - rtlwifi: Use pr_warn instead of WARN_ONCE
     - mt76: mt7915: accept rx frames with non-standard VHT MCS10-11
     - mt76: mt7921: accept rx frames with non-standard VHT MCS10-11
     - mt76: fix encap offload ethernet type check
     - media: rga: fix possible memory leak in rga_probe
     - media: coda: limit frame interval enumeration to supported encoder frame
       sizes
     - media: hantro: HEVC: unconditionnaly set pps_{cb/cr}_qp_offset values
     - media: ccs-core.c: fix failure to call clk_disable_unprepare
     - media: imon: reorganize serialization
     - media: cec-adap.c: fix is_configuring state
     - usbnet: Run unregister_netdev() before unbind() again
     - Bluetooth: HCI: Add HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN quirk
     - Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN for QCA
     - Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ERR_DATA_REPORTING for QCA
     - bnxt_en: Configure ptp filters during bnxt open
     - media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko
     - openrisc: start CPU timer early in boot
     - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
     - ASoC: rt5645: Fix errorenous cleanup order
     - nbd: Fix hung on disconnect request if socket is closed before
     - drm/amd/pm: update smartshift powerboost calc for smu12
     - drm/amd/pm: update smartshift powerboost calc for smu13
     - drm/amdgpu: Move mutex_init(&smu->message_lock) to smu_early_init()
     - btrfs: fix anon_dev leak in create_subvol()
     - kunit: tool: make parser stop overwriting status of suites w/ no_tests
     - net: phy: micrel: Allow probing without .driver_data
     - media: exynos4-is: Fix compile warning
     - media: hantro: Stop using H.264 parameter pic_num
     - rtw89: cfo: check mac_id to avoid out-of-bounds
     - of/fdt: Ignore disabled memory nodes
     - blk-throttle: Set BIO_THROTTLED when bio has been throttled
     - ASoC: max98357a: remove dependency on GPIOLIB
     - ASoC: rt1015p: remove dependency on GPIOLIB
     - ACPI: CPPC: Assume no transition latency if no PCCT
     - nvme: set non-mdts limits in nvme_scan_work
     - can: mcp251xfd: silence clang's -Wunaligned-access warning
     - x86/microcode: Add explicit CPU vendor dependency
     - net: ipa: ignore endianness if there is no header
     - selftests/bpf: Add missing trampoline program type to trampoline_count
       test
     - m68k: atari: Make Atari ROM port I/O write macros return void
     - hwmon: (pmbus) Add get_voltage/set_voltage ops
     - rxrpc: Return an error to sendmsg if call failed
     - rxrpc, afs: Fix selection of abort codes
     - afs: Adjust ACK interpretation to try and cope with NAT
     - eth: tg3: silence the GCC 12 array-bounds warning
     - char: tpm: cr50_i2c: Suppress duplicated error message in .remove()
     - selftests/bpf: fix btf_dump/btf_dump due to recent clang change
     - gfs2: use i_lock spin_lock for inode qadata
     - linux/types.h: reinstate "__bitwise__" macro for user space use
     - scsi: target: tcmu: Avoid holding XArray lock when calling lock_page
     - kunit: fix executor OOM error handling logic on non-UML
     - IB/rdmavt: add missing locks in rvt_ruc_loopback
     - PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited
     - ARM: dts: ox820: align interrupt controller node name with dtschema
     - ARM: dts: socfpga: align interrupt controller node name with dtschema
     - ARM: dts: s5pv210: align DMA channels with dtschema
     - ASoC: amd: Add driver data to acp6x machine driver
     - arm64: dts: qcom: msm8994: Fix the cont_splash_mem address
     - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count
     - PM / devfreq: rk3399_dmc: Disable edev on remove()
     - crypto: ccree - use fine grained DMA mapping dir
     - crypto: qat - fix off-by-one error in PFVF debug print
     - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc
     - fs: jfs: fix possible NULL pointer dereference in dbFree()
     - arm64: dts: qcom: sdm845-xiaomi-beryllium: fix typo in panel's
       vddio-supply property
     - ALSA: usb-audio: Add quirk bits for enabling/disabling generic implicit fb
     - ALSA: usb-audio: Move generic implicit fb quirk entries into quirks.c
     - ARM: OMAP1: clock: Fix UART rate reporting algorithm
     - powerpc/fadump: Fix fadump to work with a different endian capture kernel
     - fat: add ratelimit to fat*_ent_bread()
     - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in
       sh_pfc_map_resources()
     - ARM: versatile: Add missing of_node_put in dcscb_init
     - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
     - arm64: dts: qcom: sc7280-idp: Configure CTS pin to bias-bus-hold for
       bluetooth
     - arm64: dts: qcom: sc7280-qcard: Configure CTS pin to bias-bus-hold for
       bluetooth
     - ARM: hisi: Add missing of_node_put after of_find_compatible_node
     - cpufreq: Avoid unnecessary frequency updates due to mismatch
     - PCI: microchip: Add missing chained_irq_enter()/exit() calls
     - powerpc/rtas: Keep MSR[RI] set when calling RTAS
     - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
     - PCI: cadence: Clear FLR in device capabilities register
     - KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting
     - alpha: fix alloc_zeroed_user_highpage_movable()
     - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
     - cifs: return ENOENT for DFS lookup_cache_entry()
     - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr
     - powerpc/xics: fix refcount leak in icp_opal_init()
     - powerpc/powernv: fix missing of_node_put in uv_init()
     - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
     - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
     - fanotify: fix incorrect fmode_t casts
     - smb3: check for null tcon
     - RDMA/hfi1: Prevent panic when SDMA is disabled
     - cifs: do not use tcpStatus after negotiate completes
     - Input: gpio-keys - cancel delayed work only in case of GPIO
     - drm: fix EDID struct for old ARM OABI format
     - drm/bridge_connector: enable HPD by default if supported
     - drm/selftests: missing error code in igt_buddy_alloc_smoke()
     - drm/omap: fix NULL but dereferenced coccicheck error
     - dt-bindings: display: sitronix, st7735r: Fix backlight in example
     - drm/bridge: anx7625: check the return on anx7625_aux_trans
     - drm: ssd130x: Fix COM scan direction register mask
     - drm: ssd130x: Always apply segment remap setting
     - drm/solomon: Make DRM_SSD130X depends on MMU
     - drm/format-helper: Rename drm_fb_xrgb8888_to_mono_reversed()
     - drm/format-helper: Fix XRGB888 to monochrome conversion
     - drm/ssd130x: Fix rectangle updates
     - drm/ssd130x: Reduce temporary buffer sizes
     - fbdev: defio: fix the pagelist corruption
     - drm/vmwgfx: Fix an invalid read
     - ath11k: acquire ab->base_lock in unassign when finding the peer by addr
     - drm: bridge: it66121: Fix the register page length
     - drm/bridge: it6505: Fix build error
     - ath9k: fix ar9003_get_eepmisc
     - drm/edid: fix invalid EDID extension block filtering
     - drm/bridge: anx7625: add missing destroy_workqueue() in
       anx7625_i2c_probe()
     - drm/bridge: adv7511: clean up CEC adapter when probe fails
     - drm: bridge: icn6211: Fix register layout
     - drm: bridge: icn6211: Fix HFP_HSW_HBP_HI and HFP_MIN handling
     - mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
     - spi: qcom-qspi: Add minItems to interconnect-names
     - ASoC: codecs: Fix error handling in power domain init and exit handlers
     - ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t
     - ASoC: SOF: ipc3-topology: Set scontrol->priv to NULL after freeing it
     - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
     - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
     - docs: driver-api/thermal/intel_dptf: Use copyright symbol
     - x86/delay: Fix the wrong asm constraint in delay_loop()
     - drm/mediatek: Add vblank register/unregister callback functions
     - drm/mediatek: Fix DPI component detection for MT8192
     - drm/vc4: kms: Take old state core clock rate into account
     - drm/vc4: hvs: Fix frame count register readout
     - drm/mediatek: Fix mtk_cec_mask()
     - drm/amd/amdgpu: Only reserve vram for firmware with vega9 MS_HYPERV host.
     - drm/vc4: hvs: Reset muxes at probe time
     - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
     - drm/vc4: txp: Force alpha to be 0xff if it's disabled
     - libbpf: Don't error out on CO-RE relos for overriden weak subprogs
     - x86/PCI: Fix ALi M1487 (IBC) PIRQ router link value interpretation
     - mptcp: optimize release_cb for the common case
     - mptcp: reset the packet scheduler on incoming MP_PRIO
     - mptcp: reset the packet scheduler on PRIO change
     - nl80211: show SSID for P2P_GO interfaces
     - drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
     - drm: mali-dp: potential dereference of null pointer
     - drm/amd/amdgpu: Fix asm/hypervisor.h build error.
     - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
     - scftorture: Fix distribution of short handler delays
     - net: ethernet: ti: am65-cpsw: Fix build error without PHYLINK
     - net: dsa: mt7530: 1G can also support 1000BASE-X link mode
     - ixp4xx_eth: fix error check return value of platform_get_irq()
     - NFC: NULL out the dev->rfkill to prevent UAF
     - cpufreq: governor: Use kobject release() method to free dbs_data
     - efi: Allow to enable EFI runtime services by default on RT
     - efi: Add missing prototype for efi_capsule_setup_info
     - device property: Allow error pointer to be passed to fwnode APIs
     - drm/amd/amdgpu: Remove static from variable in RLCG Reg RW
     - net: dsa: qca8k: correctly handle mdio read error
     - target: remove an incorrect unmap zeroes data deduction
     - drbd: remove assign_p_sizes_qlim
     - drbd: use bdev based limit helpers in drbd_send_sizes
     - drbd: use bdev_alignment_offset instead of queue_alignment_offset
     - drbd: fix duplicate array initializer
     - EDAC/dmc520: Don't print an error for each unconfigured interrupt line
     - bpf: Move rcu lock management out of BPF_PROG_RUN routines
     - drm/bridge: anx7625: Use uint8 for lane-swing arrays
     - mtd: rawnand: denali: Use managed device resources
     - HID: hid-led: fix maximum brightness for Dream Cheeky
     - HID: elan: Fix potential double free in elan_input_configured
     - drm/bridge: Fix error handling in analogix_dp_probe
     - regulator: da9121: Fix uninit-value in da9121_assign_chip_model()
     - drm/mediatek: dpi: Use mt8183 output formats for mt8192
     - signal: Deliver SIGTRAP on perf event asynchronously if blocked
     - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
     - sched/psi: report zeroes for CPU full at the system level
     - spi: img-spfi: Fix pm_runtime_get_sync() error checking
     - drm/bridge: Fix it6505 Kconfig DRM_DP_AUX_BUS dependency
     - cpufreq: Fix possible race in cpufreq online error path
     - printk: add missing memory barrier to wake_up_klogd()
     - printk: wake waiters for safe and NMI contexts
     - ath9k_htc: fix potential out of bounds access with invalid
       rxstatus->rs_keyix
     - media: i2c: max9286: fix kernel oops when removing module
     - media: amphion: fix decoder's interlaced field
     - media: hantro: Implement support for encoder commands
     - media: hantro: Empty encoder capture buffers by default
     - media: imx: imx-mipi-csis: Rename csi_state to mipi_csis_device
     - media: imx: imx-mipi-csis: Fix active format initialization on source pad
     - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01
     - ALSA: pcm: Check for null pointer of pointer substream before
       dereferencing it
     - mtdblock: warn if opened on NAND
     - inotify: show inotify mask flags in proc fdinfo
     - fsnotify: fix wrong lockdep annotations
     - spi: rockchip: fix missing error on unsupported SPI_CS_HIGH
     - of: overlay: do not break notify on NOTIFY_{OK|STOP}
     - selftests/damon: add damon to selftests root Makefile
     - drm/msm: properly add and remove internal bridges
     - drm/msm/dpu: adjust display_v_end for eDP and DP
     - scsi: iscsi: Fix harmless double shift bug
     - scsi: ufs: qcom: Fix ufs_qcom_resume()
     - scsi: ufs: core: Exclude UECxx from SFR dump list
     - drm/v3d: Fix null pointer dereference of pointer perfmon
     - selftests/resctrl: Fix null pointer dereference on open failed
     - libbpf: Fix logic for finding matching program for CO-RE relocation
     - mtd: spi-nor: core: Check written SR value in
       spi_nor_write_16bit_sr_and_check()
     - x86/pm: Fix false positive kmemleak report in msr_build_context()
     - mtd: rawnand: cadence: fix possible null-ptr-deref in
       cadence_nand_dt_probe()
     - mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()
     - x86/speculation: Add missing prototype for unpriv_ebpf_notify()
     - ASoC: rk3328: fix disabling mclk on pclk probe failure
     - perf tools: Add missing headers needed by util/data.h
     - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory
       free during pm runtime resume
     - drm/msm/dp: stop event kernel thread when DP unbind
     - drm/msm/dp: fix error check return value of irq_of_parse_and_map()
     - drm/msm/dp: reset DP controller before transmit phy test pattern
     - drm/msm/dp: do not stop transmitting phy test pattern during DP phy
       compliance test
     - drm/msm/dsi: fix error checks and return values for DSI xmit functions
     - drm/msm/hdmi: check return value after calling
       platform_get_resource_byname()
     - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
     - drm/msm: add missing include to msm_drv.c
     - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H
     - drm/bridge: it6505: Send DPCD SET_POWER to downstream
     - drm/msm: Fix null pointer dereferences without iommu
     - kunit: fix debugfs code to use enum kunit_status, not bool
     - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
     - spi: cadence-quadspi: fix Direct Access Mode disable for SoCFPGA
     - perf tools: Use Python devtools for version autodetection rather than
       runtime
     - virtio_blk: fix the discard_granularity and discard_alignment queue limits
     - nl80211: don't hold RTNL in color change request
     - x86: Fix return value of __setup handlers
     - irqchip/exiu: Fix acknowledgment of edge triggered interrupts
     - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
     - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value
     - x86/mm: Cleanup the control_va_addr_alignment() __setup handler
     - arm64: fix types in copy_highpage()
     - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
     - wl1251: dynamically allocate memory used for DMA
     - linkage: Fix issue with missing symbol size
     - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init()
     - drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during
       drm uninit
     - drm/msm/dsi: fix address for second DSI PHY on SDM660
     - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop()
     - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is
       detected
     - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is
       detected
     - drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
     - media: uvcvideo: Fix missing check to determine if element is found in
       list
     - arm64: stackleak: fix current_top_of_stack()
     - iomap: iomap_write_failed fix
     - spi: spi-fsl-qspi: check return value after calling
       platform_get_resource_byname()
     - selftests/bpf: Prevent skeleton generation race
     - Revert "cpufreq: Fix possible race in cpufreq online error path"
     - regulator: qcom_smd: Fix up PM8950 regulator configuration
     - samples: bpf: Don't fail for a missing VMLINUX_BTF when VMLINUX_H is
       provided
     - perf/amd/ibs: Use interrupt regs ip for stack unwinding
     - ath11k: Don't check arvif->is_started before sending management frames
     - scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()
     - scsi: lpfc: Fix dmabuf ptr assignment in lpfc_ct_reject_event()
     - wilc1000: fix crash observed in AP mode with cfg80211_register_netdevice()
     - HID: amd_sfh: Modify the bus name
     - HID: amd_sfh: Modify the hid name
     - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
     - ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe
     - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
     - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
     - PM: EM: Decrement policy counter
     - dma-direct: don't fail on highmem CMA pages in dma_direct_alloc_pages
     - ASoC: samsung: Fix refcount leak in aries_audio_probe
     - block: Fix the bio.bi_opf comment
     - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir
     - scripts/faddr2line: Fix overlapping text section failures
     - media: aspeed: Fix an error handling path in aspeed_video_probe()
     - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe
     - mt76: mt7915: fix DBDC default band selection on MT7915D
     - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter
     - mt76: mt7915: fix unbounded shift in mt7915_mcu_beacon_mbss
     - mt76: mt7921: Fix the error handling path of mt7921_pci_probe()
     - mt76: mt7915: fix possible uninitialized pointer dereference in
       mt7986_wmac_gpio_setup
     - mt76: mt7915: fix possible NULL pointer dereference in
       mt7915_mac_fill_rx_vector
     - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set
     - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate
     - mt76: fix antenna config missing in 6G cap
     - mt76: mt7921: fix kernel crash at mt7921_pci_remove
     - mt76: do not attempt to reorder received 802.3 packets without agg session
     - mt76: fix tx status related use-after-free race on station removal
     - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev
     - media: st-delta: Fix PM disable depth imbalance in delta_probe
     - media: atmel: atmel-isc: Fix PM disable depth imbalance in atmel_isc_probe
     - media: i2c: rdacm2x: properly set subdev entity function
     - media: exynos4-is: Change clk_disable to clk_disable_unprepare
     - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
     - media: make RADIO_ADAPTERS tristate
     - media: vsp1: Fix offset calculation for plane cropping
     - media: atmel: atmel-sama5d2-isc: fix wrong mask in YUYV format check
     - media: hantro: HEVC: Fix tile info buffer value computation
     - Bluetooth: mt7921s: Fix the incorrect pointer check
     - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
     - Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring
     - Bluetooth: use hdev lock for accept_list and reject_list in conn req
     - Bluetooth: protect le accept and resolv lists with hdev->lock
     - Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
     - Bluetooth: btmtksdio: fix possible FW initialization failure
     - Bluetooth: btmtksdio: fix the reset takes too long
     - media: mediatek: vcodec: Fix v4l2 compliance decoder cmd test fail
     - io_uring: avoid io-wq -EAGAIN looping for !IOPOLL
     - io_uring: only wake when the correct events are set
     - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
     - irqchip/gic-v3: Refactor ISB + EOIR at ack time
     - irqchip/gic-v3: Fix priority mask handling
     - nvme: set dma alignment to dword
     - m68k: math-emu: Fix dependencies of math emulation support
     - net: annotate races around sk->sk_bound_dev_if
     - sctp: read sk->sk_bound_dev_if once in sctp_rcv()
     - net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init
     - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*
     - kselftest/arm64: bti: force static linking
     - media: ov7670: remove ov7670_power_off from ov7670_remove
     - media: i2c: ov2640: Depend on V4L2_ASYNC
     - media: i2c: ov5648: fix wrong pointer passed to IS_ERR() and PTR_ERR()
     - media: rkvdec: h264: Fix dpb_valid implementation
     - media: rkvdec: h264: Fix bit depth wrap in pps packet
     - regulator: scmi: Fix refcount leak in scmi_regulator_probe
     - blk-cgroup: always terminate io.stat lines
     - erofs: fix buffer copy overflow of ztailpacking feature
     - net/mlx5e: Correct the calculation of max channels for rep
     - ext4: reject the 'commit' option on ext2 filesystems
     - drm/msm/dsi: don't powerup at modeset time for parade-ps8640
     - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
     - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
     - x86/sev: Annotate stack change in the #VC handler
     - drm/msm: don't free the IRQ if it was not requested
     - selftests/bpf: Add missed ima_setup.sh in Makefile
     - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path
     - drm/i915: Fix CFI violation with show_dynamic_id()
     - thermal/drivers/bcm2711: Don't clamp temperature at zero
     - thermal/drivers/broadcom: Fix potential NULL dereference in
       sr_thermal_probe
     - thermal/core: Fix memory leak in __thermal_cooling_device_register()
     - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe
     - bfq: Relax waker detection for shared queues
     - bfq: Allow current waker to defend against a tentative one
     - ASoC: codecs: lpass: Fix passing zero to 'PTR_ERR'
     - ASoC: wm2000: fix missing clk_disable_unprepare() on error in
       wm2000_anc_transition()
     - cpuidle: psci: Fix regression leading to no genpd governor
     - cpuidle: riscv-sbi: Fix code to allow a genpd governor to be used
     - platform/x86: intel_cht_int33fe: Set driver data
     - PM: domains: Fix initialization of genpd's next_wakeup
     - net: macb: Fix PTP one step sync support
     - scsi: hisi_sas: Fix rescan after deleting a disk
     - scsi: hisi_sas: Fix memory ordering in hisi_sas_task_deliver()
     - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
     - bonding: fix missed rcu protection
     - ASoC: max98090: Move check for invalid values before casting in
       max98090_put_enab_tlv()
     - perf parse-events: Support different format of the topdown event name
     - net: stmmac: fix out-of-bounds access in a selftest
     - amt: fix gateway mode stuck
     - amt: fix memory leak for advertisement message
     - hv_netvsc: Fix potential dereference of NULL pointer
     - hwmon: (dimmtemp) Fix bitmap handling
     - hwmon: (pmbus) Check PEC support before reading other registers
     - rxrpc: Fix locking issue
     - rxrpc: Fix listen() setting the bar too high for the prealloc rings
     - rxrpc: Don't try to resend the request if we're receiving the reply
     - rxrpc: Fix overlapping ACK accounting
     - rxrpc: Don't let ack.previousPacket regress
     - rxrpc: Fix decision on when to generate an IDLE ACK
     - hinic: Avoid some over memory allocation
     - dpaa2-eth: retrieve the virtual address before dma_unmap
     - dpaa2-eth: use the correct software annotation field
     - dpaa2-eth: unmap the SGT buffer before accessing its contents
     - net: dsa: restrict SMSC_LAN9303_I2C kconfig
     - net/smc: postpone sk_refcnt increment in connect()
     - net/smc: fix listen processing for SMC-Rv2
     - dma-direct: don't over-decrypt memory
     - Bluetooth: hci_conn: Fix hci_connect_le_sync
     - Revert "net/smc: fix listen processing for SMC-Rv2"
     - media: lirc: revert removal of unused feature flags
     - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
     - arm64: dts: mt8192: Fix nor_flash status disable typo
     - PCI/ACPI: Allow D3 only if Root Port can signal and wake from D3
     - memory: samsung: exynos5422-dmc: Avoid some over memory allocation
     - ARM: dts: BCM5301X: Update pin controller node name
     - ARM: dts: suniv: F1C100: fix watchdog compatible
     - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
     - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
     - arm64: defconfig: reenable SM_DISPCC_8250
     - PCI: cadence: Fix find_first_zero_bit() limit
     - PCI: rockchip: Fix find_first_zero_bit() limit
     - PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup()
     - PCI: dwc: Fix setting error return on MSI DMA mapping failure
     - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks
     - arm64: dts: qcom: sc7280: Fix sar1_irq_odl node name
     - arm64: dts: qcom: sc7280-herobrine: Drop outputs on fpmcu pins
     - soc: qcom: llcc: Add MODULE_DEVICE_TABLE()
     - cxl/pci: Add debug for DVSEC range init failures
     - cxl/pci: Make cxl_dvsec_ranges() failure not fatal to cxl_pci
     - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
     - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault
     - arm64: dts: juno: Fix SCMI power domain IDs for ETF and CS funnel
     - crypto: qat - set CIPHER capability for DH895XCC
     - crypto: qat - set COMPRESSION capability for DH895XCC
     - platform/chrome: cros_ec: fix error handling in cros_ec_register()
     - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing
     - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls
     - can: xilinx_can: mark bit timing constants as const
     - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96
     - dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible
     - ARM: dts: qcom: sdx55: remove wrong unit address from RPMH RSC clocks
     - arm64: dts: qcom: sm8450: Fix missing iommus for qup
     - arm64: dts: qcom: sm8450: Fix missing iommus for qup1
     - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
     - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
     - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
     - ARM: dts: bcm2835-rpi-b: Fix GPIO line names
     - misc: ocxl: fix possible double free in ocxl_file_register_afu
     - hwrng: cn10k - Optimize cn10k_rng_read()
     - hwrng: cn10k - Make check_rng_health() return an error code
     - crypto: marvell/cesa - ECB does not IV
     - gpiolib: of: Introduce hook for missing gpio-ranges
     - pinctrl: bcm2835: implement hook for missing gpio-ranges
     - drm/msm: simplify gpu_busy callback
     - drm/msm: return the average load over the polling period
     - arm: mediatek: select arch timer for mt7629
     - pinctrl/rockchip: support deferring other gpio params
     - pinctrl: mediatek: mt8195: enable driver on mtk platforms
     - arm64: dts: qcom: qrb5165-rb5: Fix can-clock node name
     - Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero
     - powerpc/fadump: fix PT_LOAD segment for boot memory area
     - mfd: ipaq-micro: Fix error check return value of platform_get_irq()
     - scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
     - soc: bcm: Check for NULL return of devm_kzalloc()
     - arm64: dts: ti: k3-am64-mcu: remove incorrect UART base clock rates
     - ASoC: sh: rz-ssi: Propagate error codes returned from
       platform_get_irq_byname()
     - ASoC: sh: rz-ssi: Release the DMA channels in rz_ssi_probe() error path
     - firmware: arm_scmi: Fix list protocols enumeration in the base protocol
     - nvdimm: Fix firmware activation deadlock scenarios
     - nvdimm: Allow overwrite in the presence of disabled dimms
     - pinctrl: mvebu: Fix irq_of_parse_and_map() return value
     - crypto: ccp - Fix the INIT_EX data file open failure
     - drivers/base/node.c: fix compaction sysfs file leak
     - dax: fix cache flush on PMD-mapped pages
     - drivers/base/memory: fix an unlikely reference counting issue in
       __add_memory_block()
     - firmware: arm_ffa: Fix uuid parameter to ffa_partition_probe
     - firmware: arm_ffa: Remove incorrect assignment of driver_data
     - ocfs2: fix mounting crash if journal is not alloced
     - list: fix a data-race around ep->rdllist
     - drm/msm/dpu: fix error check return value of irq_of_parse_and_map()
     - powerpc/8xx: export 'cpm_setbrg' for modules
     - pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins
     - pinctrl: renesas: r8a779f0: Fix GPIO function on I2C-capable pins
     - pinctrl: renesas: core: Fix possible null-ptr-deref in
       sh_pfc_map_resources()
     - powerpc/idle: Fix return value of __setup() handler
     - powerpc/4xx/cpm: Fix return value of __setup() handler
     - RDMA/hns: Add the detection for CMDQ status in the device initialization
       process
     - arm64: dts: marvell: espressobin-ultra: fix SPI-NOR config
     - arm64: dts: marvell: espressobin-ultra: enable front USB3 port
     - ASoC: atmel-pdmic: Remove endianness flag on pdmic component
     - ASoC: atmel-classd: Remove endianness flag on class d component
     - proc: fix dentry/inode overinstantiating under /proc/${pid}/net
     - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
     - PCI: imx6: Fix PERST# start-up sequence
     - PCI: mediatek-gen3: Assert resets to ensure expected init state
     - module.h: simplify MODULE_IMPORT_NS
     - module: fix [e_shstrndx].sh_size=0 OOB access
     - tty: fix deadlock caused by calling printk() under tty_port->lock
     - crypto: sun8i-ss - rework handling of IV
     - crypto: sun8i-ss - handle zero sized sg
     - crypto: cryptd - Protect per-CPU resource by disabling BH.
     - ARM: dts: at91: sama7g5: remove interrupt-parent from gic node
     - ARM: dts: lan966x: swap dma channels for crypto node
     - hugetlbfs: fix hugetlbfs_statfs() locking
     - x86/mce: relocate set{clear}_mce_nospec() functions
     - mce: fix set_mce_nospec to always unmap the whole page
     - Input: sparcspkr - fix refcount leak in bbc_beep_probe
     - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits
     - KVM: PPC: Book3S HV: Fix vcore_blocked tracepoint
     - PCI: microchip: Fix potential race in interrupt handling
     - cxl/mem: Drop mem_enabled check from wait_for_media()
     - hwrng: omap3-rom - fix using wrong clk_disable() in
       omap_rom_rng_runtime_resume()
     - perf evlist: Keep topdown counters in weak group
     - perf stat: Always keep perf metrics topdown events in a group
     - mailbox: pcc: Fix an invalid-load caught by the address sanitizer
     - powerpc/64: Only WARN if __pa()/__va() called with bad addresses
     - powerpc/powernv: Get L1D flush requirements from device-tree
     - powerpc/powernv: Get STF barrier requirements from device-tree
     - powerpc/perf: Fix the threshold compare group constraint for power10
     - powerpc/perf: Fix the threshold compare group constraint for power9
     - macintosh: via-pmu and via-cuda need RTC_LIB
     - powerpc/xive: Fix refcount leak in xive_spapr_init
     - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
     - powerpc/papr_scm: Fix leaking nvdimm_events_map elements
     - powerpc/fsl_book3e: Don't set rodata RO too early
     - gpio: sim: Use correct order for the parameters of devm_kcalloc()
     - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
     - nfsd: destroy percpu stats counters after reply cache shutdown
     - mailbox: forward the hrtimer if not queued and under a lock
     - RDMA/rxe: Fix an error handling path in rxe_get_mcg()
     - RDMA/hfi1: Prevent use of lock before it is initialized
     - pinctrl: apple: Use a raw spinlock for the regmap
     - KVM: LAPIC: Drop pending LAPIC timer injection when canceling the timer
     - Input: stmfts - do not leave device disabled in stmfts_input_open
     - OPP: call of_node_put() on error path in _bandwidth_supported()
     - dmaengine: ti: k3-psil-am62: Update PSIL thread for saul.
     - f2fs: fix to do sanity check on inline_dots inode
     - f2fs: fix dereference of stale list iterator after loop body
     - riscv: Fixup difference with defconfig
     - iommu/amd: Enable swiotlb in all cases
     - iommu/amd: Do not call sleep while holding spinlock
     - iommu/mediatek: Fix 2 HW sharing pgtable issue
     - iommu/mediatek: Add list_del in mtk_iommu_remove
     - iommu/mediatek: Remove clk_disable in mtk_iommu_remove
     - iommu/mediatek: Add mutex for m4u_group and m4u_dom in data
     - i2c: at91: use dma safe buffers
     - cpufreq: mediatek: Use module_init and add module_exit
     - cpufreq: mediatek: Unregister platform device on exit
     - iommu/arm-smmu-v3-sva: Fix mm use-after-free
     - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon
     - iommu/mediatek: Fix NULL pointer dereference when printing dev_name
     - i2c: at91: Initialize dma_buf in at91_twi_xfer()
     - dmaengine: idxd: Fix the error handling path in idxd_cdev_register()
     - NFS: Do not report EINTR/ERESTARTSYS as mapping errors
     - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS
     - NFS: Don't report ENOSPC write errors twice
     - NFS: Do not report flush errors in nfs_write_end()
     - NFS: Don't report errors from nfs_pageio_complete() more than once
     - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
     - NFS: Further fixes to the writeback error handling
     - NFS: Pass i_size to fscache_unuse_cookie() when a file is released
     - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
     - dmaengine: stm32-mdma: remove GISR1 register
     - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler()
     - iommu/amd: Increase timeout waiting for GA log enablement
     - i2c: npcm: Fix timeout calculation
     - i2c: npcm: Correct register access width
     - i2c: npcm: Handle spurious interrupts
     - i2c: rcar: fix PM ref counts in probe error paths
     - tracing: Reset the function filter after completing trampoline/graph
       selftest
     - RISC-V: Split out the XIP fixups into their own file
     - RISC-V: Fix the XIP build
     - MIPS: RALINK: Define pci_remap_iospace under CONFIG_PCI_DRIVERS_GENERIC
     - perf build: Fix btf__load_from_kernel_by_id() feature check
     - perf c2c: Use stdio interface if slang is not supported
     - rtla: Avoid record NULL pointer dereference
     - rtla: Don't overwrite existing directory mode
     - rtla: Minor grammar fix for rtla README
     - rtla: Fix __set_sched_attr error message
     - rtla: Remove procps-ng dependency
     - tracing/timerlat: Notify IRQ new max latency only if stop tracing is set
     - perf jevents: Fix event syntax error caused by ExtSel
     - video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup
     - NFSv4: Fix free of uninitialized nfs4_label on referral lookup.
     - NFSv4.1 mark qualified async operations as MOVEABLE tasks
     - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
     - f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
     - f2fs: fix to clear dirty inode in f2fs_evict_inode()
     - f2fs: fix deadloop in foreground GC
     - f2fs: don't need inode lock for system hidden quota
     - f2fs: fix to do sanity check on total_data_blocks
     - f2fs: don't use casefolded comparison for "." and ".."
     - f2fs: fix fallocate to use file_modified to update permissions
       consistently
     - f2fs: fix to do sanity check for inline inode
     - objtool: Fix objtool regression on x32 systems
     - objtool: Fix symbol creation
     - wifi: mac80211: fix use-after-free in chanctx code
     - iwlwifi: fw: init SAR GEO table only if data is present
     - iwlwifi: mvm: fix assert 1F04 upon reconfig
     - iwlwifi: mei: clear the sap data header before sending
     - iwlwifi: mei: fix potential NULL-ptr deref
     - ipmi:ipmb: Fix refcount leak in ipmi_ipmb_probe
     - fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped
       pages
     - efi: Do not import certificates from UEFI Secure Boot for T2 Macs
     - bfq: Avoid false marking of bic as stably merged
     - bfq: Avoid merging queues with different parents
     - bfq: Split shared queues on move between cgroups
     - bfq: Update cgroup information before merging bio
     - bfq: Drop pointless unlock-lock pair
     - bfq: Remove pointless bfq_init_rq() calls
     - bfq: Track whether bfq_group is still online
     - bfq: Get rid of __bio_blkcg() usage
     - bfq: Make sure bfqg for which we are queueing requests is online
     - ext4: mark group as trimmed only if it was fully scanned
     - ext4: fix use-after-free in ext4_rename_dir_prepare
     - ext4: fix journal_ioprio mount option handling
     - ext4: fix race condition between ext4_write and ext4_convert_inline_data
     - ext4: fix warning in ext4_handle_inode_extension
     - ext4: fix memory leak in parse_apply_sb_mount_options()
     - ext4: fix bug_on in ext4_writepages
     - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
     - ext4: fix bug_on in __es_tree_search
     - ext4: verify dir block before splitting it
     - ext4: avoid cycles in directory h-tree
     - ACPI: property: Release subnode properties with data nodes
     - tty: goldfish: Introduce gf_ioread32()/gf_iowrite32()
     - tracing: Have event format check not flag %p* on __get_dynamic_array()
     - tracing: Fix potential double free in create_var_ref()
     - tracing: Fix return value of trace_pid_write()
     - tracing: Initialize integer variable to prevent garbage return value
     - drm/amdgpu: add beige goby PCI ID
     - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
     - PCI: qcom: Fix pipe clock imbalance
     - PCI: qcom: Fix runtime PM imbalance on probe errors
     - PCI: qcom: Fix unbalanced PHY init on probe errors
     - staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()
     - block: Fix potential deadlock in blk_ia_range_sysfs_show()
     - mm, compaction: fast_find_migrateblock() should return pfn in the target
       zone
     - s390/perf: obtain sie_block from the right address
     - s390/stp: clock_delta should be signed
     - dlm: fix plock invalid read
     - dlm: uninitialized variable on error in dlm_listen_for_all()
     - dlm: fix wake_up() calls for pending remove
     - dlm: fix missing lkb refcount handling
     - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
     - scsi: dc395x: Fix a missing check on list iterator
     - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
     - landlock: Add clang-format exceptions
     - landlock: Format with clang-format
     - selftests/landlock: Add clang-format exceptions
     - selftests/landlock: Normalize array assignment
     - selftests/landlock: Format with clang-format
     - samples/landlock: Add clang-format exceptions
     - samples/landlock: Format with clang-format
     - landlock: Fix landlock_add_rule(2) documentation
     - selftests/landlock: Make tests build with old libc
     - selftests/landlock: Extend tests for minimal valid attribute size
     - selftests/landlock: Add tests for unknown access rights
     - selftests/landlock: Extend access right tests to directories
     - selftests/landlock: Fully test file rename with "remove" access
     - selftests/landlock: Add tests for O_PATH
     - landlock: Change landlock_add_rule(2) argument check ordering
     - landlock: Change landlock_restrict_self(2) check ordering
     - selftests/landlock: Test landlock_create_ruleset(2) argument check
       ordering
     - landlock: Define access_mask_t to enforce a consistent access mask size
     - landlock: Reduce the maximum number of layers to 16
     - landlock: Create find_rule() from unmask_layers()
     - landlock: Fix same-layer rule unions
     - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
     - drm/nouveau/subdev/bus: Ratelimit logging for fault errors
     - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
     - drm/nouveau/clk: Fix an incorrect NULL check on list iterator
     - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator
     - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
     - drm/i915/dsi: fix VBT send packet port selection for ICL+
     - md: fix an incorrect NULL check in does_sb_need_changing
     - md: fix an incorrect NULL check in md_reload_sb
     - mtd: cfi_cmdset_0002: Move and rename
       chip_check/chip_ready/chip_good_for_write
     - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
     - media: coda: Fix reported H264 profile
     - media: coda: Add more H264 levels for CODA960
     - ima: remove the IMA_TEMPLATE Kconfig option
     - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13
       bug
     - lib/string_helpers: fix not adding strarray to device's resource list
     - RDMA/hfi1: Fix potential integer multiplication overflow errors
     - mmc: core: Allows to override the timeout value for ioctl() path
     - csky: patch_text: Fixup last cpu should be master
     - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375,
       A38x, A39x
     - irqchip: irq-xtensa-mx: fix initial IRQ affinity
     - thermal: devfreq_cooling: use local ops instead of global ops
     - mt76: fix use-after-free by removing a non-RCU wcid pointer
     - cfg80211: declare MODULE_FIRMWARE for regulatory.db
     - mac80211: upgrade passive scan to active scan on DFS channels after beacon
       rx
     - um: virtio_uml: Fix broken device handling in time-travel
     - um: Use asm-generic/dma-mapping.h
     - um: chan_user: Fix winch_tramp() return value
     - um: Fix out-of-bounds read in LDT setup
     - MIPS: IP27: Remove incorrect `cpu_has_fpu' override
     - MIPS: IP30: Remove incorrect `cpu_has_fpu' override
     - kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]
     - ftrace: Clean up hash direct_functions on register failures
     - ksmbd: fix outstanding credits related bugs
     - iommu/msm: Fix an incorrect NULL check on list iterator
     - iommu/dma: Fix iova map result check bug
     - kprobes: Fix build errors with CONFIG_KRETPROBES=n
     - Revert "mm/cma.c: remove redundant cma_mutex lock"
     - mm/page_owner: use strscpy() instead of strlcpy()
     - mm/page_alloc: always attempt to allocate at least one page during bulk
       allocation
     - nodemask.h: fix compilation error with GCC12
     - hugetlb: fix huge_pmd_unshare address update
     - mm/memremap: fix missing call to untrack_pfn() in pagemap_range()
     - xtensa/simdisk: fix proc_read_simdisk()
     - rtl818x: Prevent using not initialized queues
     - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
     - carl9170: tx: fix an incorrect use of list iterator
     - stm: ltdc: fix two incorrect NULL checks on list iterator
     - bcache: improve multithreaded bch_btree_check()
     - bcache: improve multithreaded bch_sectors_dirty_init()
     - bcache: remove incremental dirty sector counting for
       bch_sectors_dirty_init()
     - bcache: avoid journal no-space deadlock by reserving 1 journal bucket
     - serial: pch: don't overwrite xmit->buf[0] by x_char
     - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
     - gma500: fix an incorrect NULL check on list iterator
     - arm64: dts: qcom: ipq8074: fix the sleep clock frequency
     - arm64: tegra: Add missing DFLL reset on Tegra210
     - clk: tegra: Add missing reset deassertion
     - phy: qcom-qmp: fix struct clk leak on probe errors
     - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries
     - ARM: pxa: maybe fix gpio lookup tables
     - ceph: fix decoding of client session messages flags
     - misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl
     - SMB3: EBADF/EIO errors in rename/open caused by race condition in
       smb2_compound_op
     - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
     - dt-bindings: gpio: altera: correct interrupt-cells
     - vdpasim: allow to enable a vq repeatedly
     - blk-iolatency: Fix inflight count imbalances and IO hangs on offline
     - coresight: core: Fix coresight device probe failure issue
     - phy: qcom-qmp: fix reset-controller leak on probe errors
     - net: ipa: fix page free in ipa_endpoint_trans_release()
     - net: ipa: fix page free in ipa_endpoint_replenish_one()
     - media: lirc: add missing exceptions for lirc uapi header file
     - kseltest/cgroup: Make test_stress.sh work if run interactively
     - perf evlist: Extend arch_evsel__must_be_in_group to support hybrid systems
     - Revert "random: use static branch for crng_ready()"
     - staging: r8188eu: delete rtw_wx_read/write32()
     - binder: fix sender_euid type in uapi header
     - RDMA/hns: Remove the num_cqc_timer variable
     - RDMA/rxe: Generate a completion for unsupported/invalid opcode
     - ext4: only allow test_dummy_encryption when supported
     - fs: add two trivial lookup helpers
     - exportfs: support idmapped mounts
     - fs/ntfs3: Fix invalid free in log_replay (CVE-2022-1973)
     - md: Don't set mddev private to NULL in raid0 pers->free
     - md: fix double free of io_acct_set bioset
     - md: bcache: check the return value of kzalloc() in
       detached_dev_do_request()
     - macsec: fix UAF bug for real_dev
     - tty: n_gsm: Fix packet data hex dump output
     - pinctrl/rockchip: support setting input-enable param
     - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4
     - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
     - staging: greybus: codecs: fix type confusion of list iterator variable
     - iio: adc: ad7124: Remove shift from scan_type
     - soundwire: qcom: fix an error message in swrm_wait_for_frame_gen_enabled()
     - remoteproc: mediatek: Fix side effect of mt8195 sram power on
     - remoteproc: mtk_scp: Fix a potential double free
     - lkdtm/bugs: Check for the NULL pointer after calling kmalloc
     - lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP
     - tty: goldfish: Use tty_port_destroy() to destroy port
     - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe
     - tty: n_tty: Restore EOF push handling behavior
     - serial: 8250_aspeed_vuart: Fix potential NULL dereference in
       aspeed_vuart_probe
     - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id
       and ida_simple_get
     - remoteproc: imx_rproc: Ignore create mem entry for resource table
     - phy: rockchip-inno-usb2: Fix muxed interrupt support
     - staging: r8188eu: fix struct rt_firmware_hdr
     - usb: usbip: fix a refcount leak in stub_probe()
     - usb: usbip: add missing device lock on tweak configuration cmd
     - USB: storage: karma: fix rio_karma_init return
     - usb: musb: Fix missing of_node_put() in omap2430_probe
     - staging: fieldbus: Fix the error handling path in
       anybuss_host_common_probe()
     - pwm: lp3943: Fix duty calculation in case period was clamped
     - pwm: raspberrypi-poe: Fix endianness in firmware struct
     - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
     - usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback
     - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
     - scripts/get_abi: Fix wrong script file name in the help message
     - misc: fastrpc: fix an incorrect NULL check on list iterator
     - firmware: stratix10-svc: fix a missing check on list iterator
     - usb: typec: mux: Check dev_set_name() return value
     - rpmsg: virtio: Fix possible double free in rpmsg_probe()
     - rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev()
     - rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl
     - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check
     - iio: proximity: vl53l0x: Fix return value check of
       wait_for_completion_timeout
     - iio: adc: sc27xx: fix read big scale voltage not right
     - iio: adc: sc27xx: Fine tune the scale calibration values
     - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
     - misc/pvpanic: Convert regular spinlock into trylock on panic path
     - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
     - power: supply: core: Initialize struct to zero
     - power: supply: axp288_fuel_gauge: Fix battery reporting on the One Mix 1
     - power: supply: axp288_fuel_gauge: Drop BIOS version check from "T3 MRD"
       DMI quirk
     - power: supply: ab8500_fg: Allocate wq in probe
     - serial: sifive: Report actual baud base rather than fixed 115200
     - export: fix string handling of namespace in EXPORT_SYMBOL_NS
     - watchdog: rzg2l_wdt: Fix 32bit overflow issue
     - watchdog: rzg2l_wdt: Fix Runtime PM usage
     - watchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context'
     - watchdog: rzg2l_wdt: Fix reset control imbalance
     - soundwire: intel: prevent pm_runtime resume prior to system suspend
     - soundwire: qcom: return error when pm_runtime_get_sync fails
     - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
     - ksmbd: fix reference count leak in smb_check_perm_dacl()
     - extcon: ptn5150: Add queue work sync before driver release
     - dt-bindings: remoteproc: mediatek: Make l1tcm reg exclusive to mt819x
     - soc: rockchip: Fix refcount leak in rockchip_grf_init
     - clocksource/drivers/riscv: Events are stopped during CPU suspend
     - ARM: dts: aspeed: ast2600-evb: Enable RX delay for MAC0/MAC1
     - rtc: mt6397: check return value after calling platform_get_resource()
     - rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe
     - staging: r8188eu: add check for kzalloc
     - serial: meson: acquire port->lock in startup()
     - Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL"
     - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
     - serial: cpm_uart: Fix build error without CONFIG_SERIAL_CPM_CONSOLE
     - serial: uartlite: Fix BRKINT clearing
     - serial: digicolor-usart: Don't allow CS5-6
     - serial: rda-uart: Don't allow CS5-6
     - serial: txx9: Don't allow CS5-6
     - serial: sh-sci: Don't allow CS5-6
     - serial: sifive: Sanitize CSIZE and c_iflag
     - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
     - serial: stm32-usart: Correct CSIZE, bits, and parity
     - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
     - bus: ti-sysc: Fix warnings for unbind for serial
     - driver: base: fix UAF when driver_attach failed
     - driver core: fix deadlock in __device_attach
     - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking
     - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
     - blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
     - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition
     - scsi: sd: Don't call blk_cleanup_disk() in sd_probe()
     - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
     - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
     - amt: fix return value of amt_update_handler()
     - amt: fix possible memory leak in amt_rcv()
     - net: ethernet: ti: am65-cpsw: Fix fwnode passed to phylink_create()
     - net/smc: set ini->smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
     - spi: fsi: Fix spurious timeout
     - drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()
     - net: lan966x: check devm_of_phy_get() for -EDEFER_PROBE
     - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog
     - net: ethernet: mtk_eth_soc: out of bounds read in
       mtk_hwlro_get_fdir_entry()
     - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks
     - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
     - modpost: fix removing numeric suffixes
     - ep93xx: clock: Do not return the address of the freed memory
     - jffs2: fix memory leak in jffs2_do_fill_super
     - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not
       empty
     - ubi: ubi_create_volume: Fix use-after-free when volume creation failed
     - selftests/bpf: fix stacktrace_build_id with missing kprobe/urandom_read
     - bpf: Fix probe read error in ___bpf_prog_run()
     - block: take destination bvec offsets into account in bio_copy_data_iter
     - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed
     - nbd: fix possible overflow on 'first_minor' in nbd_dev_add()
     - riscv: read-only pages should not be writable
     - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct
       smc_wr_tx_pend_priv *"
     - tcp: add accessors to read/set tp->snd_cwnd
     - nfp: only report pause frame configuration for physical device
     - block: use bio_queue_enter instead of blk_queue_enter in bio_poll
     - bonding: NS target should accept link local address
     - sfc: fix considering that all channels have TX queues
     - sfc: fix wrong tx channel offset with efx_separate_tx_channels
     - block: make bioset_exit() fully resilient against being called twice
     - sched/autogroup: Fix sysctl move
     - blk-mq: do not update io_ticks with passthrough requests
     - net: phy: at803x: disable WOL at probe
     - bonding: show NS IPv6 targets in proc master info
     - erofs: fix 'backmost' member of z_erofs_decompress_frontend
     - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
     - virtio: pci: Fix an error handling path in vp_modern_probe()
     - net/mlx5: Don't use already freed action pointer
     - net/mlx5e: TC NIC mode, fix tc chains miss table
     - net/mlx5: CT: Fix header-rewrite re-use for tupels
     - net/mlx5e: Disable softirq in mlx5e_activate_rq to avoid race condition
     - net/mlx5: correct ECE offset in query qp output
     - net/mlx5e: Update netdev features after changing XDP state
     - net: sched: add barrier to fix packet stuck problem for lockless qdisc
     - tcp: tcp_rtx_synack() can be called from process context
     - vdpa: ifcvf: set pci driver data in probe
     - bonding: guard ns_targets by CONFIG_IPV6
     - octeontx2-af: fix error code in is_valid_offset()
     - s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag
     - regulator: mt6315-regulator: fix invalid allowed mode
     - net: ping6: Fix ping -6 with interface name
     - net/sched: act_api: fix error code in tcf_ct_flow_table_fill_tuple_ipv6()
     - gpio: pca953x: use the correct register address to do regcache sync
     - afs: Fix infinite loop found by xfstest generic/676
     - drm/msm/dp: Always clear mask bits to disable interrupts at
       dp_ctrl_reset_irq_ctrl()
     - scsi: sd: Fix potential NULL pointer dereference
     - ax25: Fix ax25 session cleanup problems
     - nfp: remove padding in nfp_nfdk_tx_desc
     - tipc: check attribute length for bearer name
     - driver core: Fix wait_for_device_probe() & deferred_probe_timeout
       interaction
     - perf evsel: Fixes topdown events in a weak group for the hybrid platform
     - perf parse-events: Move slots event for the hybrid platform too
     - perf record: Support sample-read topdown metric group for hybrid platforms
     - perf c2c: Fix sorting in percent_rmt_hitm_cmp()
     - Bluetooth: MGMT: Add conditions for setting HCI_CONN_FLAG_REMOTE_WAKEUP
       (Closes: #1012054)
     - Bluetooth: hci_sync: Fix attempting to suspend with unfiltered passive
       scan (Closes: #1012054)
     - bluetooth: don't use bitmaps for random flag accesses
     - dmaengine: idxd: set DMA_INTERRUPT cap bit
     - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
     - bootconfig: Make the bootconfig.o as a normal object file
     - tracing: Make tp_printk work on syscall tracepoints
     - tracing: Fix sleeping function called from invalid context on RT kernel
     - tracing: Avoid adding tracer option before update_tracer_options
     - i2c: mediatek: Optimize master_xfer() and avoid circular locking
     - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe()
     - iommu/arm-smmu-v3: check return value after calling
       platform_get_resource()
     - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
     - f2fs: avoid infinite loop to flush node pages
     - i2c: cadence: Increase timeout per message if necessary
     - m68knommu: set ZERO_PAGE() to the allocated zeroed page
     - m68knommu: fix undefined reference to `_init_sp'
     - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
     - NFSv4: Don't hold the layoutget locks across multiple RPC calls
     - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1
     - video: fbdev: pxa3xx-gcu: release the resources correctly in
       pxa3xx_gcu_probe/remove()
     - RISC-V: use memcpy for kexec_file mode
     - m68knommu: fix undefined reference to `mach_get_rtc_pll'
     - rtla/Makefile: Properly handle dependencies
     - f2fs: fix to tag gcing flag on page during file defragment
     - xprtrdma: treat all calls not a bcall when bc_serv is NULL
     - drm/bridge: ti-sn65dsi83: Handle dsi_lanes == 0 as invalid
     - drm/panfrost: Job should reference MMU not file_priv
     - powerpc/papr_scm: don't requests stats with '0' sized stats buffer
     - netfilter: nat: really support inet nat without l3 address
     - netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in
       clean_net path
     - netfilter: nf_tables: delete flowtable hooks via transaction list
     - powerpc/kasan: Force thread size increase with KASAN
     - NFSD: Fix potential use-after-free in nfsd_file_put()
     - SUNRPC: Trap RDMA segment overflows
     - netfilter: nf_tables: always initialize flowtable hook list in transaction
     - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
     - netfilter: nf_tables: release new hooks on unsupported flowtable flags
     - netfilter: nf_tables: memleak flow rule from commit path
     - netfilter: nf_tables: bail out early if hardware offload is not supported
     - amt: fix wrong usage of pskb_may_pull()
     - amt: fix possible null-ptr-deref in amt_rcv()
     - amt: fix wrong type string definition
     - net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register
     - xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
     - stmmac: intel: Fix an error handling path in intel_eth_pci_probe()
     - af_unix: Fix a data-race in unix_dgram_peer_wake_me().
     - selftests net: fix bpf build error
     - x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
     - bpf, arm64: Clear prog->jited_len along prog->jited
     - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
     - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
     - xsk: Fix handling of invalid descriptors in XSK TX batching API
     - drm/amdgpu: fix limiting AV1 to the first instance on VCN3
     - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
     - net: mdio: unexport __init-annotated mdio_bus_init()
     - net: xfrm: unexport __init-annotated xfrm4_protocol_init()
     - net: ipv6: unexport __init-annotated seg6_hmac_init()
     - net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules
     - net/mlx5: Lag, filter non compatible devices
     - net/mlx5: Fix mlx5_get_next_dev() peer device matching
     - net/mlx5: Rearm the FW tracer after each tracer event
     - net/mlx5: fs, fail conflicting actions
     - ip_gre: test csum_start instead of transport header
     - net: altera: Fix refcount leak in altera_tse_mdio_create
     - net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete
     - net: dsa: realtek: rtl8365mb: fix GMII caps for ports with internal PHY
     - tcp: use alloc_large_system_hash() to allocate table_perturb
     - drm: imx: fix compiler warning with gcc-12
     - nfp: flower: restructure flow-key for gre+vlan combination
     - net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
     - iov_iter: Fix iter_xarray_get_pages{,_alloc}()
     - iio: dummy: iio_simple_dummy: check the return value of kstrdup()
     - staging: rtl8712: fix a potential memory leak in r871xu_drv_init()
     - iio: st_sensors: Add a local lock for protecting odr
     - lkdtm/usercopy: Expand size of "out of frame" object
     - drivers: staging: rtl8723bs: Fix deadlock in
       rtw_surveydone_event_callback()
     - drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle()
     - drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle
     - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
     - tty: Fix a possible resource leak in icom_probe
     - thunderbolt: Use different lane for second DisplayPort tunnel
     - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
     - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
     - USB: host: isp116x: check return value after calling
       platform_get_resource()
     - drivers: tty: serial: Fix deadlock in sa1100_set_termios()
     - drivers: usb: host: Fix deadlock in oxu_bus_suspend()
     - USB: hcd-pci: Fully suspend across freeze/thaw cycle
     - char: xillybus: fix a refcount leak in cleanup_dev()
     - sysrq: do not omit current cpu when showing backtrace of all active CPUs
     - usb: dwc2: gadget: don't reset gadget's driver->bus
     - usb: dwc3: host: Stop setting the ACPI companion
     - usb: dwc3: gadget: Only End Transfer for ep0 data phase
     - soundwire: qcom: adjust autoenumeration timeout
     - misc: rtsx: set NULL intfdata when probe fails
     - extcon: Fix extcon_get_extcon_dev() error handling
     - extcon: Modify extcon device to be created after driver data is set
     - clocksource/drivers/sp804: Avoid error on multiple instances
     - staging: rtl8712: fix uninit-value in usb_read8() and friends
     - staging: rtl8712: fix uninit-value in r871xu_drv_init()
     - serial: msm_serial: disable interrupts in __msm_console_write()
     - kernfs: Separate kernfs_pr_cont_buf and rename_lock.
     - watchdog: wdat_wdt: Stop watchdog when rebooting the system
     - ksmbd: smbd: fix connection dropped issue
     - md: protect md_unregister_thread from reentrancy
     - ASoC: SOF: amd: Fixed Build error
     - scsi: myrb: Fix up null pointer access on myrb_cleanup()
     - ASoC: rt5640: Do not manipulate pin "Platform Clock" if the "Platform
       Clock" is not in the DAPM
     - Revert "net: af_key: add check for pfkey_broadcast in function
       pfkey_process"
     - ceph: allow ceph.dir.rctime xattr to be updatable
     - ceph: flush the mdlog for filesystem sync
     - ceph: fix possible deadlock when holding Fwb to get inline_data
     - net, neigh: Set lower cap for neigh_managed_work rearming
     - drm/amd/display: Check if modulo is 0 before dividing.
     - drm/amd/display: Check zero planes for OTG disable W/A on clock change
     - drm/radeon: fix a possible null pointer dereference
     - drm/amd/pm: fix a potential gpu_metrics_table memory leak
     - drm/amd/pm: Fix missing thermal throttler status
     - drm/amd/pm: correct the metrics version for SMU 11.0.11/12/13
     - um: line: Use separate IRQs per line
     - modpost: fix undefined behavior of is_arm_mapping_symbol()
     - objtool: Mark __ubsan_handle_builtin_unreachable() as noreturn
     - x86/cpu: Elide KCSAN for cpu_has() and friends
     - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds
     - nbd: call genl_unregister_family() first in nbd_cleanup()
     - nbd: fix race between nbd_alloc_config() and module removal
     - nbd: fix io hung while disconnecting device
     - Revert "PCI: brcmstb: Do not turn off WOL regulators on suspend"
     - Revert "PCI: brcmstb: Add control of subdevice voltage regulators"
     - Revert "PCI: brcmstb: Add mechanism to turn on subdev regulators"
     - Revert "PCI: brcmstb: Split brcm_pcie_setup() into two funcs"
     - cifs: fix potential deadlock in direct reclaim
     - s390/gmap: voluntarily schedule during key setting
     - cifs: version operations for smb20 unneeded when legacy support disabled
     - drm/amd/pm: use bitmap_{from,to}_arr32 where appropriate
     - nodemask: Fix return values to be unsigned
     - scsi: lpfc: Correct BDE type for XMIT_SEQ64_WQE in lpfc_ct_reject_event()
     - vringh: Fix loop descriptors check in the indirect cases
     - platform/x86: barco-p50-gpio: Add check for platform_driver_register
     - scripts/gdb: change kernel config dumping method
     - platform/x86: hp-wmi: Resolve WMI query failures on some devices
     - platform/x86: hp-wmi: Use zero insize parameter only when supported
     - ALSA: usb-audio: Skip generic sync EP parse for secondary EP
     - ALSA: usb-audio: Set up (implicit) sync for Saffire 6
     - ALSA: hda/conexant - Fix loopback issue with CX20632
     - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
       Yoga DuetITL 2021
     - ALSA: hda/realtek: Add quirk for HP Dev One
     - cifs: return errors during session setup during reconnects
     - cifs: fix reconnect on smb3 mount types
     - cifs: populate empty hostnames for extra channels
     - scsi: sd: Fix interpretation of VPD B9h length
     - scsi: lpfc: Resolve some cleanup issues following abort path refactoring
     - scsi: lpfc: Resolve some cleanup issues following SLI path refactoring
     - scsi: lpfc: Address NULL pointer dereference after starget_to_rport()
     - KVM: x86/mmu: Check every prev_roots in __kvm_mmu_free_obsolete_roots()
     - KVM: SVM: fix tsc scaling cache logic
     - filemap: Cache the value of vm_flags
     - KEYS: trusted: tpm2: Fix migratable logic
     - libata: fix reading concurrent positioning ranges log
     - libata: fix translation of concurrent positioning ranges
     - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
     - mmc: sdhci-pci-gli: Fix GL9763E runtime PM when the system resumes from
       suspend
     - mmc: block: Fix CQE recovery reset success
     - net: phy: dp83867: retrigger SGMII AN when link change
     - net: openvswitch: fix misuse of the cached connection on tuple changes
     - writeback: Fix inode->i_io_list not be protected by inode->i_lock error
     - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
     - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
     - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION
     - ixgbe: fix bcast packets Rx on VF after promisc removal
     - ixgbe: fix unexpected VLAN Rx in promisc mode on VF
     - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
       (Closes: #1012655)
     - vduse: Fix NULL pointer dereference on sysfs access
     - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
     - mm/huge_memory: Fix xarray node memory leak
     - powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK
     - drm/amdkfd:Fix fw version for 10.3.6
     - drm/bridge: analogix_dp: Support PSR-exit to disable transition
     - drm/atomic: Force bridge self-refresh-exit on CRTC switch
     - drm/amdgpu/jpeg2: Add jpeg vmid update under IB submit
     - drm/amd/display: remove stale config guards
     - drm/amdgpu: update VCN codec support for Yellow Carp
     - virtio-rng: make device ready before making request
     - powerpc/32: Fix overread/overwrite of thread_struct via ptrace
       (CVE-2022-32981)
     - random: avoid checking crng_ready() twice in random_init()
     - random: mark bootloader randomness code as __init
     - random: account for arch randomness in bits
     - md/raid0: Ignore RAID0 layout if the second zone has only one device
     - zonefs: fix handling of explicit_open option on mount
     - iov_iter: fix build issue due to possible type mis-match
     - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT
     - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
     - net/mlx5: E-Switch, pair only capable devices
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.5
     - Documentation: Add documentation for Processor MMIO Stale Data
     - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
     - x86/speculation: Add a common function for MD_CLEAR mitigation update
     - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
     - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
     - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
     - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
     - x86/speculation/srbds: Update SRBDS mitigation selection
     - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
     - KVM: x86/speculation: Disable Fill buffer clear within guests
     - x86/speculation/mmio: Print SMT warning
 .
   [ Ben Hutchings ]
   * d/rules: Fix maintainerclean rule to not remove linux-perf files
   * d/watch: Fix typo in gitmode option
 .
   [ Vincent Blut ]
   * [arm64] drivers/gpu/drm/sun4i: Enable DRM_SUN6I_DSI as module
     (Closes: #1012288)
   * sound/pci/hda: Enable SND_HDA_SCODEC_CS35L41_I2C and
     SND_HDA_SCODEC_CS35L41_SPI as modules (Closes: #1012794)
   * [armhf] drivers/crypto: Enable CRYPTO_DEV_OMAP as module (Closes: #1012880)
 .
   [ Salvatore Bonaccorso ]
   * Bump ABI to 2
   * Drop "sign-file: Convert API usage to support OpenSSL v3"
   * io_uring: reinstate the inflight tracking (CVE-2022-1976)
Checksums-Sha1:
 7ab3b836d372a3e4069704d5c8794351a6c82d53 273925 linux_5.18.14-1~bpo11+1.dsc
 1f0044ecb12dcd7f3f0cb4baf1ce6374805b042c 1340580 linux_5.18.14-1~bpo11+1.debian.tar.xz
 31f502cf750abb260b6eada3407108aec9c577bf 6070 linux_5.18.14-1~bpo11+1_source.buildinfo
Checksums-Sha256:
 5e9627674c7acd9cb2109c0d8fdb0ca313c7ce1e4b9d074d52758c9fca5758e8 273925 linux_5.18.14-1~bpo11+1.dsc
 7e0d0046af4336a3da07cf19341152b6c0a1750af0765c40ea4e158f28eb6647 1340580 linux_5.18.14-1~bpo11+1.debian.tar.xz
 711e8c6a32966937a51c8b02372c880dac255d9e6f595314ae81ddd6da166d91 6070 linux_5.18.14-1~bpo11+1_source.buildinfo
Files:
 b4392aba9c4b919ca77caff25bd6d8e5 273925 kernel optional linux_5.18.14-1~bpo11+1.dsc
 fcddb0ab90009090b256b8083de5962e 1340580 kernel optional linux_5.18.14-1~bpo11+1.debian.tar.xz
 1ba46d7e438aee1f6d4dc84db806641e 6070 kernel optional linux_5.18.14-1~bpo11+1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=hc8q
-----END PGP SIGNATURE-----