Accepted linux 6.5.10-1~bpo12+1 (source) into stable-backports

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Nov 2023 23:05:55 +0000
Source: linux
Architecture: source
Version: 6.5.10-1~bpo12+1
Distribution: bookworm-backports
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 1037142 1050996 1051449 1052063 1052584
Changes:
 linux (6.5.10-1~bpo12+1) bookworm-backports; urgency=medium
 .
   * Rebuild for bookworm-backports:
     - Set ABI to 0.deb12.4
 .
 linux (6.5.10-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.9
     - Bluetooth: hci_event: Ignore NULL link key
     - Bluetooth: Reject connection with the device which has same BD_ADDR
     - Bluetooth: Fix a refcnt underflow problem for hci_conn
     - Bluetooth: vhci: Fix race when opening vhci device
     - Bluetooth: hci_event: Fix coding style
     - Bluetooth: avoid memcmp() out of bounds warning
     - Bluetooth: hci_conn: Fix modifying handle while aborting
     - ice: fix over-shifted variable
     - ice: Fix safe mode when DDP is missing
     - ice: reset first in crash dump kernels
     - net/smc: return the right falback reason when prefix checks fail
     - btrfs: fix stripe length calculation for non-zoned data chunk allocation
     - regmap: fix NULL deref on lookup
     - [x86] KVM: x86: Mask LVTPC when handling a PMI
     - [x86] sev: Disable MMIO emulation from user mode (CVE-2023-46813)
     - [x86] sev: Check IOBM for IOIO exceptions from user-space (CVE-2023-46813)
     - [x86] sev: Check for user-space IOIO pointing to kernel space
       (CVE-2023-46813)
     - [x86] fpu: Allow caller to constrain xfeatures when copying to uabi buffer
     - [x86] KVM: x86/pmu: Truncate counter value to allowed width on write
     - [x86] KVM: x86: Constrain guest-supported xfeatures only at
       KVM_GET_XSAVE{2}
     - [x86] KVM: SVM: add support for Invalid IPI Vector interception
     - [x86] KVM: SVM: refresh AVIC inhibition in svm_leave_nested()
     - audit,io_uring: io_uring openat triggers audit reference count underflow
     - tcp: check mptcp-level constraints for backlog coalescing
     - mptcp: more conservative check for zero probes
     - mm: slab: Do not create kmalloc caches smaller than arch_slab_minalign()
     - Revert "net: wwan: iosm: enable runtime pm support for 7560"
     - netfilter: nft_payload: fix wrong mac header matching
     - io_uring: fix crash with IORING_SETUP_NO_MMAP and invalid SQ ring address
     - [x86] drm/i915: Retry gtt fault when out of fence registers
     - drm/nouveau/disp: fix DP capable DSM connectors
     - drm/edid: add 8 bpc quirk to the BenQ GW2765
     - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
     - ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV
     - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
     - [arm64] ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
     - [arm64] ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
       errors
     - [arm64] ASoC: codecs: wcd938x: drop bogus bind error handling
     - [arm64] ASoC: codecs: wcd938x: fix unbind tear down order
     - [arm64] ASoC: codecs: wcd938x: fix resource leaks on bind errors
     - [arm64] ASoC: codecs: wcd938x: fix regulator leaks on probe errors
     - [arm64] ASoC: codecs: wcd938x: fix runtime PM imbalance on remove
     - qed: fix LL2 RX buffer allocation
     - xfrm: fix a data-race in xfrm_lookup_with_ifid()
     - xfrm6: fix inet6_dev refcount underflow problem
     - xfrm: fix a data-race in xfrm_gen_index()
     - xfrm: interface: use DEV_STATS_INC()
     - net: xfrm: skip policies marked as dead while reinserting policies
     - fprobe: Fix to ensure the number of active retprobes is not zero
     - wifi: cfg80211: use system_unbound_wq for wiphy work
     - net: ipv4: fix return value check in esp_remove_trailer
     - net: ipv6: fix return value check in esp_remove_trailer
     - net: rfkill: gpio: prevent value glitch during probe
     - tcp: fix excessive TLP and RACK timeouts from HZ rounding
     - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single
       skb
     - tcp: Fix listen() warning with v4-mapped-v6 address.
     - docs: fix info about representor identification
     - tun: prevent negative ifindex
     - gve: Do not fully free QPL pages on prefill errors
     - ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
     - net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
     - i40e: prevent crash on probe if hw registers have invalid values
     - net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register()
     - bonding: Return pointer to data after pull on skb
     - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
     - neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
     - netfilter: nft_set_rbtree: .deactivate fails if element has expired
     - netlink: Correct offload_xstats size
     - netfilter: nf_tables: do not refresh timeout when resetting element
     - nf_tables: fix NULL pointer dereference in nft_expr_inner_parse()
     - nf_tables: fix NULL pointer dereference in nft_inner_init()
     - netfilter: nf_tables: do not remove elements if set backend implements
       .abort
     - netfilter: nf_tables: revert do not remove elements if set backend
       implements .abort
     - net: phy: bcm7xxx: Add missing 16nm EPHY statistics
     - net: pktgen: Fix interface flags printing
     - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
     - net: mdio-mux: fix C45 access returning -EIO after API change
     - net: avoid UAF on deleted altname
     - net: fix ifname in netlink ntf during netns move
     - net: check for altname conflicts when changing netdev's netns
     - iio: light: vcnl4000: Don't power on/off chip in config
     - fs-writeback: do not requeue a clean inode having skipped pages
     - btrfs: fix race when refilling delayed refs block reserve
     - btrfs: prevent transaction block reserve underflow when starting
       transaction
     - btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to
       1
     - btrfs: initialize start_slot in btrfs_log_prealloc_extents
     - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
     - overlayfs: set ctime when setting mtime and atime
     - gpio: timberdale: Fix potential deadlock on &tgpio->lock
     - ata: libata-core: Fix compilation warning in ata_dev_config_ncq()
     - ata: libata-eh: Fix compilation warning in ata_eh_link_report()
     - tracing: relax trace_event_eval_update() execution with cond_resched()
     - wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
     - wifi: cfg80211: validate AP phy operation before starting it
     - wifi: iwlwifi: Ensure ack flag is properly cleared.
     - rfkill: sync before userspace visibility/changes
     - HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon
       mouse
     - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
     - Bluetooth: btusb: add shutdown function for QCA6174
     - Bluetooth: Avoid redundant authentication
     - Bluetooth: hci_core: Fix build warnings
     - wifi: cfg80211: Fix 6GHz scan configuration
     - wifi: mac80211: work around Cisco AP 9115 VHT MPDU length
     - wifi: mac80211: allow transmitting EAPOL frames with tainted key
     - wifi: cfg80211: avoid leaking stack data into trace
     - regulator/core: Revert "fix kobject release warning and memory leak in
       regulator_register()"
     - SUNRPC: Fail quickly when server does not recognize TLS
     - SUNRPC/TLS: Lock the lower_xprt during the tls handshake
     - nfs: decrement nrequests counter before releasing the req
     - sky2: Make sure there is at least one frag_addr available
     - ipv4/fib: send notify when delete source address routes
     - drm: panel-orientation-quirks: Add quirk for One Mix 2S
     - btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c
     - btrfs: error out when COWing block using a stale transaction
     - btrfs: error when COWing block from a root that is being deleted
     - btrfs: error out when reallocating block for defrag using a stale
       transaction
     - [x86] platform/x86: touchscreen_dmi: Add info for the BUSH Bush Windows
       tablet
     - drm/amd/pm: add unique_id for gc 11.0.3
     - HID: multitouch: Add required quirk for Synaptics 0xcd7e device
     - HID: nintendo: reinitialize USB Pro Controller after resuming from suspend
     - HID: Add quirk to ignore the touchscreen battery on HP ENVY 15-eu0556ng
     - [x86] platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
     - cpufreq: schedutil: Update next_freq when cpufreq_limits change
     - io-wq: fully initialize wqe before calling
       cpuhp_state_add_instance_nocalls()
     - Bluetooth: hci_sync: Fix not handling ISO_LINK in hci_abort_conn_sync
     - Bluetooth: hci_sync: Introduce PTR_UINT/UINT_PTR macros
     - Bluetooth: ISO: Fix invalid context error
     - Bluetooth: hci_sync: delete CIS in BT_OPEN/CONNECT/BOUND when aborting
     - Bluetooth: hci_sync: always check if connection is alive before deleting
     - net/mlx5: E-switch, register event handler before arming the event
     - net/mlx5: Handle fw tracer change ownership event based on MTRC
     - net/mlx5e: RX, Fix page_pool allocation failure recovery for striding rq
     - net/mlx5e: RX, Fix page_pool allocation failure recovery for legacy rq
     - net/mlx5e: XDP, Fix XDP_REDIRECT mpwqe page fragment leaks on shutdown
     - net/mlx5e: Take RTNL lock before triggering netdev notifiers
     - net/mlx5e: Don't offload internal port if filter device is out device
     - net/mlx5e: Fix VF representors reporting zero counters to "ip -s" command
     - net/tls: split tls_rx_reader_lock
     - tcp: allow again tcp_disconnect() when threads are waiting
     - Bluetooth: hci_event: Fix using memcmp when comparing keys
     - tcp_bpf: properly release resources on error paths
     - dt-bindings: mmc: sdhci-msm: correct minimum number of clocks
     - mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend
     - mmc: core: Fix error propagation for some ioctl commands
     - mmc: core: sdio: hold retuning if sdio in 1-bit mode
     - mmc: core: Capture correct oemid-bits for eMMC cards
     - pinctrl: qcom: lpass-lpi: fix concurrent register updates
     - Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
     - pNFS: Fix a hang in nfs4_evict_inode()
     - pNFS/flexfiles: Check the layout validity in
       ff_layout_mirror_prepare_stats
     - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server
     - ACPI: irq: Fix incorrect return value in acpi_register_gsi()
     - ACPI: bus: Move acpi_arm_init() to the place of after acpi_ghes_init()
     - perf dlfilter: Fix use of addr_location__exit() in dlfilter__object_code()
     - fanotify: limit reporting of event with non-decodeable file handles
     - NFS: Fix potential oops in nfs_inode_remove_request()
     - nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op
     - nvme: sanitize metadata bounce buffer for reads
     - nvme-pci: add BOGUS_NID for Intel 0a54 device
     - nvme-auth: use chap->s2 to indicate bidirectional authentication
     - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
     - USB: serial: option: add entry for Sierra EM9191 with new firmware
     - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
     - [x86] thunderbolt: Call tb_switch_put() once DisplayPort bandwidth request
       is finished
     - perf: Disallow mis-matched inherited group reads (CVE-2023-5717)
     - [s390x] pci: fix iommu bitmap allocation
     - tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols
     - KEYS: asymmetric: Fix sign/verify on pkcs1pad without a hash
     - apple-gmux: Hard Code max brightness for MMIO gmux
     - [s390x] cio: fix a memleak in css_alloc_subchannel
     - [x86] platform/surface: platform_profile: Propagate error if profile
       registration fails
     - [x86] platform/x86: intel-uncore-freq: Conditionally create attribute for
       read frequency
     - [x86] platform/x86: msi-ec: Fix the 3rd config
     - [x86] platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to
       0x2e
     - [x86] platform/x86: asus-wmi: Only map brightness codes when using
       asus-wmi backlight control
     - [x86] platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events
     - gpiolib: acpi: Add missing memset(0) to acpi_get_gpiod_from_data()
     - gpio: vf610: set value before the direction to avoid a glitch
     - gpio: vf610: mask the gpio irq in system suspend and support wakeup
     - drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary
       device
     - [x86] drm/i915/cx0: Only clear/set the Pipe Reset bit of the PHY Lanes
       Owned
     - drm/amdgpu: Fix possible null pointer dereference
     - [powerpc*] mm: Allow ARCH_FORCE_MAX_ORDER up to 12
     - [powerpc*] qspinlock: Fix stale propagated yield_cpu
     - docs: Move rustdoc output, cross-reference it
     - [arm64] phy: qcom-qmp-usb: initialize PCS_USB registers
     - [arm64] phy: qcom-qmp-usb: split PCS_USB init table for sc8280xp and
       sa8775p
     - [arm64] phy: qcom-qmp-combo: Square out 8550 POWER_STATE_CONFIG1
     - [arm64] phy: qcom-qmp-combo: initialize PCS_USB registers
     - efi/unaccepted: Fix soft lockups caused by parallel memory acceptance
     - net: move altnames together with the netdevice
     - Bluetooth: hci_sock: fix slab oob read in create_monitor_event
     - net: rfkill: reduce data->mtx scope in rfkill_fop_open
     - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
     - mptcp: avoid sending RST when closing the initial subflow
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.10
     - smb3: allow controlling length of time directory entries are cached with
       dir leases
     - smb3: allow controlling maximum number of cached directories
     - smb3: do not start laundromat thread when dir leases disabled
     - smb: client: do not start laundromat thread on nohandlecache
     - smb: client: make laundromat a delayed worker
     - smb: client: prevent new fids from being removed by laundromat
     - [arm64] virtio_balloon: Fix endless deflation and inflation on arm64
     - virtio-mmio: fix memory leak of vm_dev
     - virtio-crypto: handle config changed by work queue
     - virtio_pci: fix the common cfg map size
     - vsock/virtio: initialize the_virtio_vsock before using VQs
     - vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE
     - [arm64] dts: qcom: apq8096-db820c: fix missing clock populate
     - [arm64] dts: qcom: msm8996-xiaomi: fix missing clock populate
     - [arm64] dts: rockchip: use codec as clock master on px30-ringneck-haikou
     - [arm64] dts: rockchip: set codec system-clock-fixed on
       px30-ringneck-haikou
     - [arm64] dts: qcom: sa8775p: correct PMIC GPIO label in gpio-ranges
     - [arm64] dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399
     - [arm64] dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards
     - i40e: sync next_to_clean and next_to_process for programming status desc
     - mm: fix vm_brk_flags() to not bail out while holding lock
     - hugetlbfs: clear resv_map pointer if mmap fails
     - mm/page_alloc: correct start page when guard page debug is enabled
     - mm/migrate: fix do_pages_move for compat pointers
     - mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer
     - hugetlbfs: extend hugetlb_vma_lock to private VMAs
     - maple_tree: add GFP_KERNEL to allocations in mas_expected_entries()
     - nfsd: lock_rename() needs both directories to live on the same fs
     - [x86] drm/i915/pmu: Check if pmu is closed before stopping event
     - drm/amd: Disable ASPM for VI w/ all Intel systems
     - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
     - btrfs: remove v0 extent handling
     - btrfs: fix unwritten extent buffer after snapshotting a new subvolume
     - [armhf] clk: ti: Fix missing omap4 mcbsp functional clock and aliases
     - [armhf] clk: ti: Fix missing omap5 mcbsp functional clock and aliases
     - r8169: fix the KCSAN reported data-race in rtl_tx() while reading
       tp->cur_tx
     - r8169: fix the KCSAN reported data-race in rtl_tx while reading
       TxDescArray[entry].opts1
     - r8169: fix the KCSAN reported data race in rtl_rx while reading
       desc->opts1
     - iavf: initialize waitqueues before starting watchdog_task
     - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value
     - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry
     - net: do not leave an empty skb in write queue
     - neighbour: fix various data-races
     - igc: Fix ambiguity in the ethtool advertising
     - net: ethernet: adi: adin1110: Fix uninitialized variable
     - net: ieee802154: adf7242: Fix some potential buffer overflow in
       adf7242_stats_show()
     - net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
     - r8152: Increase USB control msg timeout to 5000ms as per spec
     - r8152: Run the unload routine if we have errors during probe
     - r8152: Cancel hw_phy_work if we have an error in probe
     - r8152: Release firmware if we have an error in probe
     - tcp: fix wrong RTO timeout when received SACK reneging
     - wifi: cfg80211: pass correct pointer to rdev_inform_bss()
     - wifi: cfg80211: fix assoc response warning on failed links
     - wifi: mac80211: don't drop all unprotected public action frames
     - net/handshake: fix file ref count in handshake_nl_accept_doit()
     - gtp: uapi: fix GTPA_MAX
     - gtp: fix fragmentation needed check with gso
     - [x86] drm/i915/perf: Determine context valid in OA reports
     - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR
     - netfilter: flowtable: GC pushes back packets to classic path
     - net/sched: act_ct: additional checks for outdated flows
     - drm/i915/mcr: Hold GT forcewake during steering operations
     - iavf: in iavf_down, disable queues when removing the driver
     - scsi: sd: Introduce manage_shutdown device flag
     - blk-throttle: check for overflow in calculate_bytes_allowed
     - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
       (CVE-2023-46862)
     - iio: afe: rescale: Accept only offset channels
     - iio: exynos-adc: request second interupt only when touchscreen mode is
       used
     - iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds
     - iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale
     - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
     - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
     - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
     - i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
     - i2c: aspeed: Fix i2c bus hang in slave read
     - tracing/kprobes: Fix symbol counting logic by looking at modules as well
     - tracing/kprobes: Fix the description of variable length arguments
     - [arm64] misc: fastrpc: Reset metadata buffer to avoid incorrect free
     - [arm64] misc: fastrpc: Free DMA handles for RPC calls with no arguments
     - [arm64] misc: fastrpc: Clean buffers on remote invocation failures
     - [arm64] misc: fastrpc: Unmap only if buffer is unmapped from DSP
     - [arm64,armhf] nvmem: imx: correct nregs for i.MX6ULL
     - [arm64,armhf] nvmem: imx: correct nregs for i.MX6SLL
     - [arm64,armhf] nvmem: imx: correct nregs for i.MX6UL
     - [x86] tsc: Defer marking TSC unstable to a worker
     - [x86] i8259: Skip probing when ACPI/MADT advertises PCAT compatibility
     - [x86] cpu: Add model number for Intel Arrow Lake mobile processor
     - perf/core: Fix potential NULL deref
     - clk: Sanitize possible_parent_show to Handle Return Value of
       of_clk_get_parent_name
     - [armhf] clk: socfpga: gate: Account for the divider in determine_rate
     - [armhf] clk: stm32: Fix a signedness issue in
       clk_stm32_composite_determine_rate()
     - [x86] platform/x86: Add s2idle quirk for more Lenovo laptops
     - mm/damon/sysfs: check DAMOS regions update progress from
       before_terminate()
 .
   [ Emanuele Rocca ]
   * Disable DEBUG_PREEMPT as it introduces slowdowns up to 20% on certain
     workloads.
 .
   [ Salvatore Bonaccorso ]
   * Bump ABI to 4
   * Do not explicitly unset DEBUG_PREEMPT (not enabled by default since 6.3-rc1)
 .
 linux (6.5.8-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.7
     - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol
     - maple_tree: add mas_is_active() to detect in-tree walks
     - mptcp: Remove unnecessary test for __mptcp_init_sock()
     - mptcp: rename timer related helper to less confusing names
     - mptcp: fix dangling connection hang-up
     - scsi: core: Improve type safety of scsi_rescan_device()
     - scsi: Do not attempt to rescan suspended devices
     - ata: libata-scsi: Fix delayed scsi_rescan_device() execution
     - btrfs: remove btrfs_writepage_endio_finish_ordered
     - btrfs: remove end_extent_writepage
     - btrfs: don't clear uptodate on write errors
     - [arm64] add HWCAP for FEAT_HBC (hinted conditional branches)
     - [arm64] cpufeature: Fix CLRBHB and BC detection
     - net: add sysctl accept_ra_min_rtr_lft
     - net: change accept_ra_min_rtr_lft to affect all RA lifetimes
     - net: release reference to inet6_dev pointer
     - [arm64] iommu/arm-smmu-v3: Avoid constructing invalid range commands
     - maple_tree: reduce resets during store setup
     - maple_tree: add MAS_UNDERFLOW and MAS_OVERFLOW states
     - scsi: zfcp: Fix a double put in zfcp_port_enqueue()
     - [amd64] iommu/vt-d: Avoid memory allocation in iommu_suspend()
     - net: mana: Fix TX CQE error handling
     - mptcp: fix delegated action races
     - mptcp: userspace pm allow creating id 0 subflow
     - Bluetooth: hci_codec: Fix leaking content of local_codecs
     - wifi: brcmfmac: Replace 1-element arrays with flexible arrays
     - Bluetooth: hci_sync: Fix handling of HCI_QUIRK_STRICT_DUPLICATE_FILTER
     - wifi: rtw88: rtw8723d: Fix MAC address offset in EEPROM
     - wifi: mwifiex: Fix tlv_buf_left calculation
     - io_uring: don't allow IORING_SETUP_NO_MMAP rings on highmem pages
     - md/raid5: release batch_last before waiting for another stripe_head
     - PCI/PM: Mark devices disconnected if upstream PCIe link is down on resume
     - PCI: qcom: Fix IPQ8074 enumeration
     - [x86] platform/x86/intel/ifs: release cpus_read_lock()
     - net: replace calls to sock->ops->connect() with kernel_connect()
     - io_uring/kbuf: don't allow registered buffer rings on highmem pages
     - io_uring: ensure io_lockdep_assert_cq_locked() handles disabled rings
     - btrfs: always print transaction aborted messages with an error level
     - net: prevent rewrite of msg_name in sock_sendmsg()
     - [x86] drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval
     - drm/amd: Fix detection of _PR3 on the PCIe root port
     - drm/amd: Fix logic error in sienna_cichlid_update_pcie_parameters()
     - [arm64] Add Cortex-A520 CPU part definition
     - [arm64] errata: Add Cortex-A520 speculative unprivileged load workaround
     - HID: sony: Fix a potential memory leak in sony_probe()
     - wifi: mt76: fix lock dependency problem for wed_lock
     - ubi: Refuse attaching if mtd's erasesize is 0
     - erofs: fix memory leak of LZMA global compressed deduplication
     - wifi: cfg80211/mac80211: hold link BSSes when assoc fails for MLO
       connection
     - iwlwifi: mvm: handle PS changes in vif_cfg_changed
     - wifi: iwlwifi: dbg_ini: fix structure packing
     - wifi: iwlwifi: mvm: Fix a memory corruption issue
     - wifi: cfg80211: fix cqm_config access race
     - wifi: cfg80211: add missing kernel-doc for cqm_rssi_work
     - wifi: mac80211: fix mesh id corruption on 32 bit systems
     - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet
     - HID: nvidia-shield: add LEDS_CLASS dependency
     - erofs: allow empty device tags in flatdev mode
     - [s390x] bpf: Let arch_prepare_bpf_trampoline return program size
     - leds: Drop BUG_ON check for LED_COLOR_ID_MULTI
     - bpf: Fix tr dereferencing
     - bpf: unconditionally reset backtrack_state masks on global func exit
     - regulator: mt6358: split ops for buck and linear range LDO regulators
     - Bluetooth: Delete unused hci_req_prepare_suspend() declaration
     - Bluetooth: Fix hci_link_tx_to RCU lock usage
     - Bluetooth: ISO: Fix handling of listen for unicast
     - drivers/net: process the result of hdlc_open() and add call of
       hdlc_close() in uhdlc_close()
     - wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling
     - [x86] perf/x86/amd/core: Fix overflow reset on hotplug
     - regmap: rbtree: Fix wrong register marked as in-cache when creating new
       node
     - wifi: mac80211: fix potential key use-after-free
     - [x86] perf/x86/amd: Do not WARN() on every IRQ
     - wifi: mac80211: Create resources for disabled links
     - regulator/core: regulator_register: set device->class earlier
     - wifi: iwlwifi: mvm: Fix incorrect usage of scan API
     - scsi: target: core: Fix deadlock due to recursive locking
     - NFSv4: Fix a nfs4_state_manager() race
     - ice: always add legacy 32byte RXDID in supported_rxdids
     - bpf: tcp_read_skb needs to pop skb regardless of seq
     - bpf, sockmap: Do not inc copied_seq when PEEK flag set
     - bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets
     - modpost: add missing else to the "of" check
     - net: stmmac: platform: fix the incorrect parameter
     - net: fix possible store tearing in neigh_periodic_work()
     - neighbour: fix data-races around n->output
     - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
     - ptp: ocp: Fix error handling in ptp_ocp_device_init
     - net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent
     - ovl: move freeing ovl_entry past rcu delay
     - ovl: fetch inode once in ovl_dentry_revalidate_common()
     - ipv6: tcp: add a missing nf_reset_ct() in 3WHS handling
     - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
     - ethtool: plca: fix plca enable data type while parsing the value
     - net: nfc: llcp: Add lock when modifying device list
     - [arm64] net: ethernet: ti: am65-cpsw: Fix error code in
       am65_cpsw_nuss_init_tx_chns()
     - ibmveth: Remove condition to recompute TCP header checksum.
     - netfilter: nft_payload: rebuild vlan header on h_proto access
     - netfilter: handle the connecting collision properly in
       nf_conntrack_proto_sctp
     - selftests: netfilter: Test nf_tables audit logging
     - selftests: netfilter: Extend nft_audit.sh
     - netfilter: nf_tables: Deduplicate nft_register_obj audit logs
     - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure
     - ipv4: Set offload_failed flag in fibmatch results
     - net: stmmac: dwmac-stm32: fix resume on STM32 MCU
     - tipc: fix a potential deadlock on &tx->lock
     - tcp: fix quick-ack counting to count actual ACKs of new data
     - tcp: fix delayed ACKs for MSS boundary condition
     - sctp: update transport state when processing a dupcook packet
     - sctp: update hb timer immediately after users change hb_interval
     - netlink: annotate data-races around sk->sk_err
     - net: mana: Fix the tso_bytes calculation
     - net: mana: Fix oversized sge0 for GSO packets
     - HID: nvidia-shield: Fix a missing led_classdev_unregister() in the probe
       error handling path
     - HID: sony: remove duplicate NULL check before calling usb_free_urb()
     - HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
     - net: lan743x: also select PHYLIB
     - smb: use kernel_connect() and kernel_bind()
     - dm zoned: free dmz->ddev array in dmz_put_zoned_devices
     - RDMA/core: Require admin capabilities to set system parameters
     - of: dynamic: Fix potential memory leak in of_changeset_action()
     - IB/mlx4: Fix the size of a buffer in add_port_entries()
     - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config()
     - gpio: pxa: disable pinctrl calls for MMP_GPIO
     - RDMA/cma: Initialize ib_sa_multicast structure to 0 when join
     - RDMA/cma: Fix truncation compilation warning in make_cma_ports
     - RDMA/bnxt_re: Fix the handling of control path response data
     - RDMA/uverbs: Fix typo of sizeof argument
     - RDMA/srp: Do not call scsi_done() from srp_abort()
     - RDMA/siw: Fix connection failure handling
     - RDMA/mlx5: Fix mkey cache possible deadlock on cleanup
     - RDMA/mlx5: Fix assigning access flags to cache mkeys
     - RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation
     - RDMA/mlx5: Fix NULL string error
     - [x86] sev: Change npages to unsigned long in snp_accept_memory()
     - [x86] sev: Use the GHCB protocol when available for SNP CPUID requests
     - ksmbd: fix race condition between session lookup and expire
     - ksmbd: fix uaf in smb20_oplock_break_ack
     - ksmbd: fix race condition from parallel smb2 lock requests
     - RDMA/mlx5: Remove not-used cache disable flag
     - xen/events: replace evtchn_rwlock with RCU (CVE-2023-34324)
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.8
     - net: stmmac: remove unneeded stmmac_poll_controller
     - RDMA/cxgb4: Check skb value for failure to allocate
     - [arm64] perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7
     - [x86] platform/x86: think-lmi: Fix reference leak
     - [x86] drm/i915: Register engines early to avoid type confusion
     - cpuidle, ACPI: Evaluate LPI arch_flags for broadcast timer
     - drm/amdgpu: Fix a memory leak
     - [x86] platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent
       section mismatch warning
     - media: dt-bindings: imx7-csi: Make power-domains not required for imx8mq
     - drm/amd/display: implement pipe type definition and adding accessors
     - drm/amd/display: apply edge-case DISPCLK WDIVIDER changes to master OTG
       pipes only
     - scsi: Do not rescan devices with a suspended queue
     - ata: pata_parport: fix pata_parport_devchk
     - ata: pata_parport: implement set_devctl
     - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
     - quota: Fix slow quotaoff
     - dm crypt: Fix reqsize in crypt_iv_eboiv_gen
     - [x86] ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM
     - [arm64,armhf] ASoC: hdmi-codec: Fix broken channel map reporting
     - ata: libata-scsi: Disable scsi device manage_system_start_stop
     - net: prevent address rewrite in kernel_bind()
     - [arm64] dts: qcom: sm8150: extend the size of the PDC resource
     - dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description
       for '#interrupt-cells' property
     - irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source
     - KEYS: trusted: Remove redundant static calls usage
     - ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
     - ALSA: usb-audio: Fix microphone sound on Nexigo webcam.
     - ALSA: hda: cs35l41: Cleanup and fix double free in firmware request
     - ALSA: hda/realtek: Change model for Intel RVP board
     - ASoC: SOF: amd: fix for firmware reload failure after playback
     - [arm*] ASoC: simple-card-utils: fixup simple_util_startup() error handling
     - [x86] ASoC: Intel: soc-acpi: fix Dell SKU 0B34
     - [x86] ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL
       match table
     - [arm64] ASoC: fsl_sai: Don't disable bitclock for i.MX8MP
     - [x86] ASoC: Intel: sof_sdw: add support for SKU 0B14
     - [x86] ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table.
     - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED
     - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx
     - ALSA: hda/realtek - ALC287 I2S speaker platform support
     - ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP
     - [riscv64] pinctrl: starfive: jh7110: Fix failure to set irq after
       CONFIG_PM is enabled
     - [arm64] drm/msm/dp: do not reinitialize phy unless retry during link
       training
     - [arm64] drm/msm/dsi: skip the wait for video mode done if not applicable
     - [arm64] drm/msm/dsi: fix irq_of_parse_and_map() error checking
     - [arm64] drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid
       overflow
     - [arm64] drm/msm/dp: Add newlines to debug printks
     - [arm64] drm/msm/dpu: fail dpu_plane_atomic_check() based on mdp clk limits
     - can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior
     - [arm64] dts: mediatek: fix t-phy unit name
     - [arm64] dts: mediatek: mt8195: Set DSU PMU status to fail
     - devlink: Hold devlink lock on health reporter dump get
     - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
     - xen-netback: use default TX queue size for vifs
     - [riscv64] bpf: Sign-extend return values
     - [riscv64] bpf: Track both a0 (RISC-V ABI) and a5 (BPF) return values
     - xdp: Fix zero-size allocation warning in xskq_create()
     - drm/vmwgfx: fix typo of sizeof argument
     - bpf: Fix verifier log for async callback return values
     - net: refine debug info in skb_checksum_help()
     - net: macsec: indicate next pn update when offloading
     - net: phy: mscc: macsec: reject PN update requests
     - net/mlx5e: macsec: use update_pn flag instead of PN comparation
     - ixgbe: fix crash with empty VF macvlan list
     - net/smc: Fix dependency of SMC on ISM
     - net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp
     - [s390x] bpf: Fix clobbering the caller's backchain in the trampoline
     - [s390x] bpf: Fix unwinding past the trampoline
     - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
     - net/smc: Fix pos miscalculation in statistics
     - net: tcp: fix crashes trying to free half-baked MTU probes
     - pinctrl: renesas: rzn1: Enable missing PINMUX
     - af_packet: Fix fortified memcpy() without flex array.
     - nfc: nci: assert requested protocol is valid
     - octeontx2-pf: Fix page pool frag allocation warning
     - workqueue: Override implicit ordered attribute in
       workqueue_apply_unbound_cpumask()
     - [riscv64] signal: fix sigaltstack frame size checking
     - ovl: temporarily disable appending lowedirs
     - [armhf] dmaengine: stm32-mdma: abort resume if no ongoing transfer
     - [armhf] dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA
       chaining
     - [armhf] dmaengine: stm32-dma: fix residue in case of MDMA chaining
     - [armhf] dmaengine: stm32-mdma: use Link Address Register to compute
       residue
     - [armhf] dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is
       set
     - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
     - xhci: track port suspend state correctly in unsuccessful resume cases
     - xhci: Clear EHB bit only at end of interrupt handler
     - xhci: Preserve RsvdP bits in ERSTBA register correctly
     - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
     - usb: dwc3: Soft reset phy on probe for host
     - usb: cdns3: Modify the return value of cdns_set_active () to void when
       CONFIG_PM_SLEEP is disabled
     - usb: hub: Guard against accesses to uninitialized BOS descriptors
     - usb: musb: Get the musb_qh poniter after musb_giveback
     - usb: musb: Modify the "HWVers" register address
     - iio: pressure: bmp280: Fix NULL pointer exception
     - iio: imu: bno055: Fix missing Kconfig dependencies
     - iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data()
     - iio: adc: imx8qxp: Fix address for command buffer registers
     - iio: dac: ad3552r: Correct device IDs
     - iio: admv1013: add mixer_vgate corner cases
     - iio: pressure: dps310: Adjust Timeout Settings
     - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
     - iio: adc: ad7192: Correct reference voltage
     - iio: addac: Kconfig: update ad74413r selections
     - media: subdev: Don't report V4L2_SUBDEV_CAP_STREAMS when the streams API
       is disabled
     - [arm64] dts: mediatek: mt8195-demo: fix the memory size to 8GB
     - [arm64] dts: mediatek: mt8195-demo: update and reorder reserved memory
       regions
     - drm: Do not overrun array in drm_gem_get_pages()
     - drm/atomic-helper: relax unregistered connector check
     - drm/amdgpu: add missing NULL check
     - drm/amd/display: Don't set dpms_off for seamless boot
     - drm/vmwgfx: Keep a gem reference to user bos in surfaces
     - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
     - ACPI: resource: Add TongFang GM6BGEQ, GM6BG5Q and GM6BG0Q to
       irq1_edge_low_force_override[]
     - ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx
     - serial: Reduce spinlocked portion of uart_rs485_config()
     - serial: 8250_omap: Fix errors with no_console_suspend
     - serial: core: Fix checks for tx runtime PM state
     - [arm*] binder: fix memory leaks of spam and pending work
     - ksmbd: not allow to open file if delelete on close bit is set
     - [x86] perf/x86/lbr: Filter vsyscall addresses
     - [x86] cpu: Fix AMD erratum #1485 on Zen4-based CPUs
     - [x86] alternatives: Disable KASAN in apply_alternatives()
     - mcb: remove is_added flag from mcb_device struct
     - [x86] thunderbolt: Workaround an IOMMU fault on certain systems with Intel
       Maple Ridge
     - [x86] thunderbolt: Check that lane 1 is in CL0 before enabling lane
       bonding
     - [x86] thunderbolt: Correct TMU mode initialization from hardware
     - [x86] thunderbolt: Restart XDomain discovery handshake after failure
     - [powerpc*] pseries: Fix STK_PARAM access in the hcall tracing code
     - [powerpc*] 47x: Fix 47x syscall return crash
     - libceph: use kernel_connect()
     - ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
     - ceph: fix type promotion bug on 32bit systems
     - Input: powermate - fix use-after-free in powermate_config_complete
     - Input: psmouse - fix fast_reconnect function for PS/2 mode
     - Input: xpad - add PXN V900 support
     - Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
     - Input: xpad - add HyperX Clutch Gladiate Support
     - Input: goodix - ensure int GPIO is in input for gpio_count == 1 &&
       gpio_int_idx == 0 case
     - mctp: perform route lookups under a RCU read-side lock
     - block: Don't invalidate pagecache for invalid falloc modes
     - nfp: flower: avoid rmmod nfp crash issues
     - can: sja1000: Always restart the Tx queue after an overrun
     - power: supply: qcom_battmgr: fix battery_id type
     - power: supply: qcom_battmgr: fix enable request endianness
     - usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply
       scope
     - cgroup: Remove duplicates in cgroup v1 tasks file
     - dma-buf: add dma_fence_timestamp helper
     - pinctrl: avoid unsafe code pattern in find_pinctrl()
     - scsi: ufs: core: Correct clear TM error log
     - [riscv64] Only consider swbp/ss handlers for correct privileged mode
     - counter: chrdev: fix getting array extensions
     - counter: microchip-tcb-capture: Fix the use of internal GCLK logic
     - coresight: Fix run time warnings while reusing ETR buffer
     - [riscv64] Remove duplicate objcopy flag
     - [riscv64]  Fix wrong use of CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK
     - usb: typec: ucsi: Fix missing link removal
     - usb: typec: altmodes/displayport: Signal hpd low when exiting mode
     - usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails
     - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
     - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
     - usb: cdnsp: Fixes issue with dequeuing not queued requests
     - usb: typec: qcom: Update the logic of regulator enable and disable
     - usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub
     - [x86] Revert "x86/smp: Put CPUs into INIT on shutdown if possible"
     - [amd64] dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq
     - [powerpc*] 8xx: Fix pte_access_permitted() for PAGE_NONE
     - [powerpc*] 64e: Fix wrong test in __ptep_test_and_clear_young()
     - fs: Fix kernel-doc warnings
     - fs: factor out vfs_parse_monolithic_sep() helper
     - ovl: fix regression in parsing of mount options with escaped comma
     - ovl: make use of ->layers safe in rcu pathwalk
     - ovl: fix regression in showing lowerdir mount option
     - ALSA: hda/realtek - Fixed two speaker platform
 .
   [ Salvatore Bonaccorso ]
   * Bump ABI to 3
   * [x86] KVM: SVM: always update the x2avic msr interception (CVE-2023-5090)
   * nvmet-tcp: Fix a possible UAF in queue intialization setup (CVE-2023-5178)
   * Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
     (CVE-2023-31083)
 .
 linux (6.5.6-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.4
     - net/ipv6: SKB symmetric hash should incorporate transport ports
     - drm/virtio: Conditionally allocate virtio_gpu_fence
     - scsi: ufs: core: Add advanced RPMB support where UFSHCI 4.0 does not
       support EHS length in UTRD
     - scsi: qla2xxx: Adjust IOCB resource on qpair create
     - scsi: qla2xxx: Limit TMF to 8 per function
     - scsi: qla2xxx: Fix deletion race condition
     - scsi: qla2xxx: fix inconsistent TMF timeout
     - scsi: qla2xxx: Fix command flush during TMF
     - scsi: qla2xxx: Fix erroneous link up failure
     - scsi: qla2xxx: Turn off noisy message log
     - scsi: qla2xxx: Fix session hang in gnl
     - scsi: qla2xxx: Fix TMF leak through
     - scsi: qla2xxx: Remove unsupported ql2xenabledif option
     - scsi: qla2xxx: Flush mailbox commands on chip reset
     - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit()
     - scsi: qla2xxx: Error code did not return to upper layer
     - scsi: qla2xxx: Fix firmware resource tracking
     - null_blk: fix poll request timeout handling
     - kernfs: fix missing kernfs_iattr_rwsem locking
     - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
     - clk: qcom: camcc-sc7180: fix async resume during probe
     - drm/ast: Fix DRAM init on AST2200
     - ASoC: tegra: Fix SFC conversion for few rates
     - [arm64] tegra: Update AHUB clock parent and rate on Tegra234
     - [arm64] tegra: Update AHUB clock parent and rate
     - clk: qcom: turingcc-qcs404: fix missing resume during probe
     - [arm64] dts: qcom: msm8953-vince: drop duplicated touschreen parent
       interrupt
     - [arm64] dts: renesas: rzg2l: Fix txdv-skew-psec typos
     - send channel sequence number in SMB3 requests after reconnects
     - memcg: drop kmem.limit_in_bytes
     - mm: hugetlb_vmemmap: fix a race between vmemmap pmd split
     - Multi-gen LRU: avoid race in inc_min_seq()
     - cifs: update desired access while requesting for directory lease
     - pinctrl: cherryview: fix address_space_handler() argument
     - dt-bindings: clock: xlnx,versal-clk: drop select:false
     - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
     - clk: imx: pll14xx: align pdiv with reference manual
     - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
     - soc: qcom: qmi_encdec: Restrict string length in decode
     - clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors
     - clk: qcom: dispcc-sm8550: fix runtime PM imbalance on probe errors
     - clk: qcom: lpasscc-sc7280: fix missing resume during probe
     - clk: qcom: q6sstop-qcs404: fix missing resume during probe
     - clk: qcom: mss-sc7180: fix missing resume during probe
     - NFS: Fix a potential data corruption
     - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
     - bus: mhi: host: Skip MHI reset if device is in RDDM
     - kbuild: rpm-pkg: define _arch conditionally
     - kbuild: do not run depmod for 'make modules_sign'
     - kbuild: dummy-tools: make MPROFILE_KERNEL checks work on BE
     - tpm_crb: Fix an error handling path in crb_acpi_add()
     - gfs2: Switch to wait_event in gfs2_logd
     - gfs2: low-memory forced flush fixes
     - tools/mm: fix undefined reference to pthread_once
     - perf trace: Really free the evsel->priv area
     - backlight: lp855x: Initialize PWM state on first brightness change
     - backlight: gpio_backlight: Drop output GPIO direction check for initial
       power state
     - perf parse-events: Separate YYABORT and YYNOMEM cases
     - perf parse-events: Move instances of YYABORT to YYNOMEM
     - perf parse-events: Separate ENOMEM memory handling
     - perf parse-events: Additional error reporting
     - [x86] KVM: SVM: Don't defer NMI unblocking until next exit for SEV-ES
       guests
     - Input: tca6416-keypad - always expect proper IRQ number in i2c client
     - Input: tca6416-keypad - fix interrupt enable disbalance
     - perf annotate bpf: Don't enclose non-debug code with an assert()
     - [x86] virt: Drop unnecessary check on extended CPUID level in
       cpu_has_svm()
     - perf script: Print "cgroup" field on the same line as "comm"
     - perf bpf-filter: Fix sample flag check with ||
     - perf dlfilter: Initialize addr_location before passing it to
       thread__find_symbol_fb()
     - perf dlfilter: Add al_cleanup()
     - perf vendor events: Update the JSON/events descriptions for power10
       platform
     - perf vendor events: Drop some of the JSON/events for power10 platform
     - perf vendor events: Drop STORES_PER_INST metric event for power10 platform
     - perf vendor events: Move JSON/events to appropriate files for power10
       platform
     - perf vendor events: Update metric event names for power10 platform
     - perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
     - perf lock: Don't pass an ERR_PTR() directly to perf_session__delete()
     - [x86] watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
     - perf vendor events arm64: Remove L1D_CACHE_LMISS from AmpereOne list
     - pwm: lpc32xx: Remove handling of PWM channels
     - accel/ivpu: refactor deprecated strncpy
     - perf header: Fix missing PMU caps
     - i3c: master: svc: Describe member 'saved_regs'
     - regulator: tps6287x: Fix n_voltages
     - [x86] drm/i915: mark requests for GuC virtual engines to avoid
       use-after-free
     - blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
     - blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice()
     - netfilter: nf_tables: Audit log setelem reset
     - netfilter: nf_tables: Audit log rule reset
     - smb: propagate error code of extract_sharename()
     - net/sched: fq_pie: avoid stalls in fq_pie_timer()
     - sctp: annotate data-races around sk->sk_wmem_queued
     - ipv4: annotate data-races around fi->fib_dead
     - net: read sk->sk_family once in sk_mc_loop()
     - net: fib: avoid warn splat in flow dissector
     - xsk: Fix xsk_diag use-after-free error during socket cleanup
     - [x86] drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct
       page"
     - [x86] drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn()
     - [x86] drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
     - drm/amd/display: fix mode scaling (RMX_.*)
     - net/handshake: fix null-ptr-deref in handshake_nl_done_doit()
     - net: use sk_forward_alloc_get() in sk_get_meminfo()
     - net: annotate data-races around sk->sk_forward_alloc
     - mptcp: annotate data-races around msk->rmem_fwd_alloc
     - net: annotate data-races around sk->sk_tsflags
     - net: annotate data-races around sk->sk_bind_phc
     - ipv4: ignore dst hint for multipath routes
     - ipv6: ignore dst hint for multipath routes
     - igb: disable virtualization features on 82580
     - gve: fix frag_list chaining
     - veth: Fixing transmit return status for dropped packets
     - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
     - net: phy: micrel: Correct bit assignments for phy_device flags
     - bpf, sockmap: Fix skb refcnt race after locking changes
     - af_unix: Fix msg_controllen test in scm_pidfd_recv() for MSG_CMSG_COMPAT.
     - af_unix: Fix data-races around user->unix_inflight.
     - af_unix: Fix data-race around unix_tot_inflight.
     - af_unix: Fix data-races around sk->sk_shutdown.
     - af_unix: Fix data race around sk->sk_err.
     - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (CVE-2023-4921)
     - kcm: Destroy mutex in kcm_exit_net()
     - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
     - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
     - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
     - [s390x] zcrypt: don't leak memory if dev_set_name() fails
     - regulator: tps6594-regulator: Fix random kernel crash
     - idr: fix param name in idr_alloc_cyclic() doc
     - ip_tunnels: use DEV_STATS_INC()
     - net/mlx5e: Clear mirred devices array if the rule is split
     - net/mlx5: Give esw_offloads_load/unload_rep() "mlx5_" prefix
     - net/mlx5: Rework devlink port alloc/free into init/cleanup
     - net/mlx5: Push devlink port PF/VF init/cleanup calls out of
       devlink_port_register/unregister()
     - mlx5/core: E-Switch, Create ACL FT for eswitch manager in switchdev mode
     - net: phylink: fix sphinx complaint about invalid literal
     - bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in
       kern_sys_bpf().
     - bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check.
     - [s390x] bpf: Pass through tail call counter in trampolines
     - bpf: bpf_sk_storage: Fix invalid wait context lockdep report
     - bpf: bpf_sk_storage: Fix the missing uncharge in sk_omem_alloc
     - netfilter: nftables: exthdr: fix 4-byte stack OOB write
     - netfilter: nfnetlink_osf: avoid OOB read
     - netfilter: nft_set_rbtree: skip sync GC for new elements in this
       transaction
     - netfilter: nf_tables: Unbreak audit log reset
     - net: phy: Provide Module 4 KSZ9477 errata (DS80000754C)
     - [arm64] net: hns3: fix tx timeout issue
     - [arm64] net: hns3: fix byte order conversion issue in
       hclge_dbg_fd_tcam_read()
     - [arm64] net: hns3: fix debugfs concurrency issue between kfree buffer and
       read
     - [arm64] net: hns3: fix invalid mutex between tc qdisc and dcb ets command
       issue
     - [arm64] net: hns3: fix the port information display when sfp is absent
     - [arm64] net: hns3: remove GSO partial feature bit
     - [arm64] net: enetc: distinguish error from valid pointers in
       enetc_fixup_clear_rss_rfs()
     - watchdog: advantech_ec_wdt: fix Kconfig dependencies
     - drm/amd/display: Temporary Disable MST DP Colorspace Property
     - clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL
     - dmaengine: sh: rz-dmac: Fix destination and source data size setting
     - misc: fastrpc: Fix remote heap allocation request
     - misc: fastrpc: Fix incorrect DMA mapping unmap request
     - jbd2: fix checkpoint cleanup performance regression
     - jbd2: check 'jh->b_transaction' before removing it from checkpoint
     - jbd2: correct the end of the journal recovery scan range
     - ext4: fix slab-use-after-free in ext4_es_insert_extent()
     - ext4: add correct group descriptors and reserved GDT blocks to system zone
     - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
     - ext4: drop dio overwrite only flag and associated warning
     - f2fs: get out of a repeat loop when getting a locked data page
     - f2fs: flush inode if atomic file is aborted
     - f2fs: avoid false alarm of circular locking
     - lib: test_scanf: Add explicit type cast to result initialization in
       test_number_prefix()
     - [arm64,armhf] hwspinlock: qcom: add missing regmap config for SFPB MMIO
       implementation
     - memcontrol: ensure memcg acquired by id is properly set up
     - ata: ahci: Add Elkhart Lake AHCI controller
     - ata: pata_falcon: fix IO base selection for Q40
     - ata: sata_gemini: Add missing MODULE_DESCRIPTION
     - ata: pata_ftide010: Add missing MODULE_DESCRIPTION
     - fuse: nlookup missing decrement in fuse_direntplus_link
     - btrfs: zoned: do not zone finish data relocation block group
     - btrfs: fix start transaction qgroup rsv double free
     - btrfs: free qgroup rsv on io failure
     - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
     - btrfs: set page extent mapped after read_folio in relocate_one_page
     - btrfs: zoned: re-enable metadata over-commit for zoned mode
     - btrfs: use the correct superblock to compare fsid in btrfs_validate_super
     - btrfs: scrub: avoid unnecessary extent tree search preparing stripes
     - btrfs: scrub: avoid unnecessary csum tree search preparing stripes
     - btrfs: scrub: fix grouping of read IO
     - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()
     - mtd: rawnand: brcmnand: Fix crash during the panic_write
     - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
     - mtd: spi-nor: Correct flags for Winbond w25q128
     - mtd: rawnand: brcmnand: Fix potential false time out warning
     - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
     - Revert "drm/amd/display: Remove v_startup workaround for dcn3+"
     - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
     - drm/amd/display: limit the v_startup workaround to ASICs older than DCN3.1
     - drm/amd/display: prevent potential division by zero errors
     - [x86] KVM: VMX: Refresh available regs and IDT vectoring info before NMI
       handling
     - [x86] KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical
       ID entry
     - [x86] KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn
     - [x86] KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost
       migration
     - [x86] KVM: nSVM: Check instead of asserting on nested TSC scaling support
     - [x86] KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state
     - [x86] KVM: SVM: Set target pCPU during IRTE update if target vCPU is
       running
     - [x86] KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL
     - perf hists browser: Fix hierarchy mode header
     - perf build: Update build rule for generated files
     - perf test shell stat_bpf_counters: Fix test on Intel
     - perf tools: Handle old data in PERF_RECORD_ATTR
     - perf build: Include generated header files properly
     - perf hists browser: Fix the number of entries for 'e' key
     - drm/amd/display: always switch off ODM before committing more streams
     - drm/amd/display: Remove wait while locked
     - drm/amdgpu: register a dirty framebuffer callback for fbcon
       (Closes: #1037142)
     - bpf: fix bpf_probe_read_kernel prototype mismatch
     - net: ipv4: fix one memleak in __inet_del_ifa()
     - net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule()
     - net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in
       smcr_port_add
     - net: stmmac: fix handling of zero coalescing tx-usecs
     - net: ethernet: mvpp2_main: fix possible OOB write in
       mvpp2_ethtool_get_rxnfc()
     - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in
       mtk_hwlro_get_fdir_all()
     - hsr: Fix uninit-value access in fill_frame_info()
     - net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast
       address
     - net:ethernet:adi:adin1110: Fix forwarding offload
     - r8152: check budget for r8152_poll()
     - kcm: Fix memory leak in error path of kcm_sendmsg()
     - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
     - net: macb: fix sleep inside spinlock
     - veth: Update XDP feature set when bringing up device
     - ipv6: fix ip6_sock_set_addr_preferences() typo
     - tcp: Factorise sk_family-independent comparison in
       inet_bind2_bucket_match(_addr_any).
     - tcp: Fix bind() regression for v4-mapped-v6 wildcard address.
     - tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address.
     - ixgbe: fix timestamp configuration code
     - igb: clean up in all error paths when enabling SR-IOV
     - net: renesas: rswitch: Fix unmasking irq condition
     - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
     - vm: fix move_vma() memory accounting being off
     - drm/amd/display: Fix a bug when searching for insert_above_mpcc
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.5
     - iomap: Fix possible overflow condition in iomap_write_delalloc_scan
     - autofs: fix memory leak of waitqueues in autofs_catatonic_mode
     - btrfs: handle errors properly in update_inline_extent_backref()
     - btrfs: output extra debug info if we failed to find an inline backref
     - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
     - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
     - kernel/fork: beware of __put_task_struct() calling context
     - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to
       _idle()
     - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
     - [x86] amd_nb: Add PCI IDs for AMD Family 1Ah-based models
     - [arm64] perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
     - [s390x] boot: cleanup number of page table levels setup
     - [arm64] perf/imx_ddr: speed up overflow frequency of cycle
     - ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and
       iMac12,2
     - hw_breakpoint: fix single-stepping when using bpf_overflow_handler
     - [x86] ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
     - [arm64] spi: sun6i: add quirk for dual and quad SPI modes support
     - devlink: remove reload failed checks in params get/set callbacks
     - crypto: lrw,xts - Replace strlcpy with strscpy
     - ice: Don't tx before switchdev is fully configured
     - wifi: ath9k: fix fortify warnings
     - wifi: ath9k: fix printk specifier
     - wifi: rtw88: delete timer and free skb queue when unloading
     - wifi: mwifiex: fix fortify warning
     - mt76: mt7921: don't assume adequate headroom for SDIO headers
     - wifi: wil6210: fix fortify warnings
     - net: Use sockaddr_storage for getsockopt(SO_PEERNAME).
     - wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()
     - wifi: ath12k: avoid array overflow of hw mode for preferred_hw_mode
     - net/ipv4: return the real errno instead of -EINVAL
     - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
     - Bluetooth: btusb: Add device 0489:e0f5 as MT7922 device
     - Bluetooth: btusb: Add a new VID/PID 0489/e0f6 for MT7922
     - Bluetooth: btusb: Add new VID/PID 0489/e102 for MT7922
     - Bluetooth: btusb: Add new VID/PID 04ca/3804 for MT7922
     - Bluetooth: Fix hci_suspend_sync crash
     - Bluetooth: btusb: Add support for another MediaTek 7922 VID/PID
     - netlink: convert nlk->flags to atomic flags
     - tpm_tis: Resend command to recover from data transfer errors
     - [arm64] mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
     - alx: fix OOB-read compiler warning
     - wifi: iwlwifi: pcie: avoid a warning in case prepare card failed
     - wifi: mac80211: check S1G action frame size
     - netfilter: ebtables: fix fortify warnings in size_entry_mwt()
     - wifi: cfg80211: reject auth/assoc to AP with our address
     - wifi: cfg80211: ocb: don't leave if not joined
     - wifi: mac80211: check for station first in client probe
     - wifi: mac80211_hwsim: drop short frames
     - Revert "wifi: mac80211_hwsim: check the return value of nla_put_u32"
     - wifi: ath12k: Fix memory leak in rx_desc and tx_desc
     - wifi: ath12k: add check max message length while scanning with extraie
     - Fix nomenclature for USB and PCI wireless devices
     - bpf: Consider non-owning refs trusted
     - bpf: Consider non-owning refs to refcounted nodes RCU protected
     - drm/edid: Add quirk for OSVR HDK 2.0
     - [arm64] dts: qcom: sm6125-pdx201: correct ramoops pmsg-size
     - [arm64] dts: qcom: sm6125-sprout: correct ramoops pmsg-size
     - [arm64] dts: qcom: sm6350: correct ramoops pmsg-size
     - [arm64] dts: qcom: sm8150-kumano: correct ramoops pmsg-size
     - [arm64] dts: qcom: sm8250-edo: correct ramoops pmsg-size
     - drm/amdgpu: Increase soft IH ring size
     - drm/amdgpu: Update ring scheduler info as needed
     - drm/amd/display: Fix underflow issue on 175hz timing
     - [x86] ASoC: SOF: topology: simplify code to prevent static analysis
       warnings
     - [x86] ASoC: Intel: sof_sdw: Update BT offload config for soundwire config
     - [x86] ALSA: hda: intel-dsp-cfg: add LunarLake support
     - drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK
     - drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31
     - drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314
     - drm/amd/display: Use max memclk variable when setting max memclk
     - [arm64] drm/msm/adreno: Use quirk identify hw_apriv
     - [arm64] drm/msm/adreno: Use quirk to identify cached-coherent support
     - io_uring: annotate the struct io_kiocb slab for appropriate user copy
     - [arm64] dts: qcom: sc8280xp-x13s: Add camera activity LED
     - md: raid1: fix potential OOB in raid1_remove_disk()
     - blk-mq: fix tags leak when shrink nr_hw_queues
     - [x86] ASoC: SOF: amd: clear panic mask status when panic occurs
     - [x86] bring back rep movsq for user access on CPUs without ERMS
     - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
     - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
     - ext4: add two helper functions extent_logical_end() and pa_logical_end()
     - ext4: avoid overlapping preallocations due to overflow
     - [arm64] PCI: dwc: Provide deinit callback for i.MX
     - [armel] 9317/1: kexec: Make smp stop calls asynchronous
     - [powerpc*] pseries: fix possible memory leak in ibmebus_bus_init()
     - PCI: vmd: Disable bridge window for domain reset
     - PCI: fu740: Set the number of MSI vectors
     - media: mdp3: Fix resource leaks in of_find_device_by_node
     - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
     - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
     - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
     - media: anysee: fix null-ptr-deref in anysee_master_xfer
     - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
     - media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
     - scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is
       detected
     - media: tuners: qt1010: replace BUG_ON with a regular error
     - media: pci: cx23885: replace BUG with error return
     - usb: cdns3: Put the cdns set active part outside the spin lock
     - usb: typec: intel_pmc_mux: Add new ACPI ID for Lunar Lake IOM device
     - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
     - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
     - serial: cpm_uart: Avoid suspicious locking
     - usb: dwc3: dwc3-octeon: Verify clock divider
     - usb: ehci: add workaround for chipidea PORTSC.PEC bug
     - usb: chipidea: add workaround for chipidea PEC bug
     - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler
       warning
     - kobject: Add sanity check for kset->kobj.ktype in kset_register()
     - [arm64] interconnect: Fix locking for runpm vs reclaim
     - usb: typec: qcom-pmic-typec: register drm_bridge
     - printk: Reduce console_unblank() usage in unsafe scenarios
     - printk: Keep non-panic-CPUs out of console lock
     - printk: Do not take console lock for console_flush_on_panic()
     - printk: Consolidate console deferred printing
     - printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic()
     - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
     - btrfs: introduce struct to consolidate extent buffer write context
     - btrfs: zoned: introduce block group context to btrfs_eb_write_context
     - btrfs: zoned: return int from btrfs_check_meta_write_pointer
     - btrfs: zoned: defer advancing meta write pointer
     - btrfs: zoned: activate metadata block group on write time
     - mtd: spi-nor: spansion: use CLPEF as an alternative to CLSR
     - mtd: spi-nor: spansion: preserve CFR2V[7] when writing MEMLAT
     - btrfs: add a helper to read the superblock metadata_uuid
     - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
     - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
     - drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
     - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
     - md: don't dereference mddev after export_rdev()
     - md: fix warning for holder mismatch from export_rdev()
     - efivarfs: fix statfs() on efivarfs
     - PM: hibernate: Fix the exclusive get block device in test_resume mode
     - [x86] ibt: Suppress spurious ENDBR
     - [x86] ibt: Avoid duplicate ENDBR in __put_user_nocheck*()
     - [riscv64] kexec: Align the kexeced kernel entry
     - [x86] sched: Restore the SD_ASYM_PACKING flag in the DIE domain
     - scsi: target: core: Fix target_cmd_counter leak
     - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
     - panic: Reenable preemption in WARN slowpath
     - ata: libata-core: fetch sense data for successful commands iff CDL enabled
     - [x86] boot/compressed: Reserve more memory for page tables
     - [x86] purgatory: Remove LTO flags
     - blk-mq: prealloc tags when increase tagset nr_hw_queues
     - blk-mq: fix tags UAF when shrinking q->nr_hw_queues
     - md/raid1: fix error: ISO C90 forbids mixed declarations
     - Revert "SUNRPC: Fail faster on bad verifier"
     - attr: block mode changes of symlinks
     - ovl: fix failed copyup of fileattr on a symlink
     - ovl: fix incorrect fdput() on aio completion
     - io_uring/net: fix iter retargeting for selected buf
     - nvme: avoid bogus CRTO values
     - [x86] platform/uv: Use alternate source for socket to node data
     - Revert "firewire: core: obsolete usage of GFP_ATOMIC at building node
       tree"
     - md: Put the right device in md_seq_next
     - drm/amd: Make fence wait in suballocator uninterruptible
     - Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory"
     - dm: don't attempt to queue IO under RCU protection
     - dm: fix a race condition in retrieve_deps
     - btrfs: fix lockdep splat and potential deadlock after failure running
       delayed items
     - btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio
     - btrfs: fix race between finishing block group creation and its item update
     - btrfs: release path before inode lookup during the ino lookup ioctl
     - btrfs: check for BTRFS_FS_ERROR in pending ordered assert
     - tracing/synthetic: Fix order of struct trace_dynamic_info
     - tracing: Have tracing_max_latency inc the trace array ref count
     - tracing: Have event inject files inc the trace array ref count
     - tracing/synthetic: Print out u64 values properly
     - tracing: Increase trace array ref count on enable and filter files
     - tracing: Have current_trace inc the trace array ref count
     - tracing: Have option files inc the trace array ref count
     - selinux: fix handling of empty opts in selinux_fs_context_submount()
       (Closes: #1052584)
     - nfsd: fix change_info in NFSv4 RENAME replies
     - tracefs: Add missing lockdown check to tracefs_create_dir()
     - i2c: aspeed: Reset the i2c controller when timeout occurs
     - ata: libata: disallow dev-initiated LPM transitions to unsupported states
     - ata: libahci: clear pending interrupt status
     - scsi: megaraid_sas: Fix deadlock on firmware crashdump
     - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
     - scsi: pm8001: Setup IRQs on resume
     - Revert "comedi: add HAS_IOPORT dependencies"
     - ext4: fix rec_len verify error
     - drm/radeon: make fence wait in suballocator uninterrruptable
     - [x86] drm/i915: Only check eDP HPD when AUX CH is shared
     - drm/amd/display: Adjust the MST resume flow
     - drm/amd/display: fix the white screen issue when >= 64GB DRAM
     - drm/amd/display: Add DPIA Link Encoder Assignment Fix
     - drm/amd/display: Fix 2nd DPIA encoder Assignment
     - Revert "memcg: drop kmem.limit_in_bytes"
     - drm/amdgpu: fix amdgpu_cs_p1_user_fence
     - [arm64] interconnect: Teach lockdep about icc_bw_lock order
     - [x86] alternatives: Remove faulty optimization
     - [x86] static_call: Fix static-call vs return-thunk
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.6
     - NFS: Fix error handling for O_DIRECT write scheduling
     - NFS: Fix O_DIRECT locking issues
     - NFS: More O_DIRECT accounting fixes for error paths
     - NFS: Use the correct commit info in nfs_join_page_group()
     - NFS: More fixes for nfs_direct_write_reschedule_io()
     - NFS/pNFS: Report EINVAL errors from connect() to the server
     - SUNRPC: Mark the cred for revalidation if the server rejects it
     - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server
     - NFSv4.1: fix pnfs MDS=DS session trunking
     - gfs2: Fix another freeze/thaw hang
     - netfs: Only call folio_start_fscache() one time for each folio
     - btrfs: improve error message after failure to add delayed dir index item
     - btrfs: remove BUG() after failure to insert delayed dir index item
     - ext4: replace the traditional ternary conditional operator with with
       max()/min()
     - ext4: move setting of trimmed bit into ext4_try_to_trim_range()
     - ext4: do not let fstrim block system suspend
     - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
     - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
     - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation
       fails
     - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
     - netfilter: nf_tables: fix memleak when more than 255 elements expired
     - netfilter: nf_tables: disallow rule removal from chain binding
       (CVE-2023-5197)
     - [arm64] ASoC: meson: spdifin: start hw on dai probe
     - netfilter: nf_tables: disallow element removal on anonymous sets
     - bpf: Avoid deadlock when using queue and stack maps from NMI
     - bpf: Avoid dummy bpf_offload_netdev in __bpf_prog_dev_bound_init
     - ALSA: docs: Fix a typo of midi2_ump_probe option for snd-usb-audio
     - ALSA: seq: Avoid delivery of events for disabled UMP groups
     - ASoC: rt5640: Revert "Fix sleep in atomic context"
     - ASoC: rt5640: Fix sleep in atomic context
     - ASoC: rt5640: fix typos
     - ASoC: rt5640: Do not disable/enable IRQ twice on suspend/resume
     - ASoC: rt5640: Enable the IRQ on resume after configuring jack-detect
     - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode
     - bpf: Fix a erroneous check after snprintf()
     - ALSA: hda/realtek: Splitting the UX3402 into two separate models
     - netfilter: conntrack: fix extension size table
     - netfilter: nf_tables: Fix entries val in rule reset audit log
     - uapi: stddef.h: Fix header guard location
     - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
     - [x86] ASoC: SOF: ipc4-topology: fix wrong sizeof argument
     - net/core: Fix ETH_P_1588 flow dissector
     - ALSA: seq: ump: Fix -Wformat-truncation warning
     - ASoC: hdaudio.c: Add missing check for devm_kstrdup
     - [arm64] ASoC: imx-audmix: Fix return error with devm_clk_get()
     - iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set
     - ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was
       successful
     - iavf: add iavf_schedule_aq_request() helper
     - iavf: schedule a request immediately after add/delete vlan
     - i40e: Fix VF VLAN offloading when port VLAN is configured
     - netfilter, bpf: Adjust timeouts of non-confirmed CTs in
       bpf_ct_insert_entry()
     - ionic: fix 16bit math issue when PAGE_SIZE >= 64KB
     - igc: Fix infinite initialization loop with early XDP redirect
     - ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754)
     - scsi: iscsi_tcp: restrict to TCP sockets
     - [powerpc*] perf/hv-24x7: Update domain value check
     - [powerpc*] dexcr: Move HASHCHK trap handler
     - dccp: fix dccp_v4_err()/dccp_v6_err() again
     - [x86] mm, kexec, ima: Use memblock_free_late() from
       ima_free_kexec_buffer()
     - net: hsr: Properly parse HSRv1 supervisor frames.
     - [x86] platform/x86: intel_scu_ipc: Check status after timeout in
       busy_loop()
     - [x86] platform/x86: intel_scu_ipc: Check status upon timeout in
       ipc_wait_for_interrupt()
     - [x86] platform/x86: intel_scu_ipc: Don't override scu in
       intel_scu_ipc_dev_simple_command()
     - [x86] platform/x86: intel_scu_ipc: Fail IPC send if still busy
     - [x86] srso: Fix srso_show_state() side effect
     - [x86] srso: Set CPUID feature bits independently of bug or mitigation
       status
     - [x86] srso: Don't probe microcode in a guest
     - [x86] srso: Fix SBPB enablement for spec_rstack_overflow=off
     - [arm64] net: hns3: add cmdq check for vf periodic service task
     - [arm64] net: hns3: fix GRE checksum offload issue
     - [arm64] net: hns3: only enable unicast promisc when mac table full
     - [arm64] net: hns3: fix fail to delete tc flower rules during reset issue
     - [arm64] net: hns3: add 5ms delay before clear firmware reset irq source
     - net: bridge: use DEV_STATS_INC()
     - team: fix null-ptr-deref when team device type is changed
     - locking/atomic: scripts: fix fallback ifdeffery
     - net: rds: Fix possible NULL-pointer dereference
     - vxlan: Add missing entries to vxlan_get_size()
     - netfilter: nf_tables: disable toggling dormant table state more than once
     - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
       (CVE-2023-42756)
     - net: hinic: Fix warning-hinic_set_vlan_fliter() warn: variable
       dereferenced before check 'hwdev'
     - net/handshake: Fix memory leak in __sock_create() and sock_alloc_file()
     - [x86] i915/pmu: Move execlist stats initialization to execlist specific
       setup
     - drm/virtio: clean out_fence on complete_submit
     - locking/seqlock: Do the lockdep annotation before locking in
       do_write_seqcount_begin_nested()
     - net: ena: Flush XDP packets on error.
     - bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI
     - octeontx2-pf: Do xdp_do_flush() after redirects.
     - igc: Expose tx-usecs coalesce setting to user
     - cxl/region: Match auto-discovered region decoders by HPA range
     - proc: nommu: /proc/<pid>/maps: release mmap read lock
     - proc: nommu: fix empty /proc/<pid>/maps
     - cifs: Fix UAF in cifs_demultiplex_thread()
     - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe()
     - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup()
     - i2c: mux: gpio: Add missing fwnode_handle_put()
     - i2c: xiic: Correct return value check for xiic_reinit()
     - drm/amdgpu: set completion status as preempted for the resubmission
     - drm/amd/display: Update DPG test pattern programming
     - drm/amd/display: fix a regression in blank pixel data caused by coding
       mistake
     - [arm64] dts: qcom: sdm845-db845c: Mark cont splash memory region as
       reserved
     - direct_write_fallback(): on error revert the ->ki_pos update from buffered
       write
     - btrfs: reset destination buffer when read_extent_buffer() gets invalid
       range
     - vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent()
     - [armhf] bus: ti-sysc: Use fsleep() instead of usleep_range() in
       sysc_reset()
     - [armhf] bus: ti-sysc: Fix missing AM35xx SoC matching
     - [arm64] firmware: arm_scmi: Harden perf domain info access
     - [arm64]firmware: arm_scmi: Fixup perf power-cost/microwatt support
     - power: supply: mt6370: Fix missing error code in mt6370_chg_toggle_cfo()
     - clk: sprd: Fix thm_parents incorrect configuration
     - clk: si521xx: Use REGCACHE_FLAT instead of NONE
     - clk: si521xx: Fix regmap write accessor
     - clk: tegra: fix error return case for recalc_rate
     - [armhf] bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart
       wake-up
     - swiotlb: use the calculated number of areas
     - power: supply: ucs1002: fix error code in ucs1002_get_property()
     - power: supply: rt9467: Fix rt9467_run_aicl()
     - power: supply: core: fix use after free in uevent
     - power: supply: rk817: Fix node refcount leak
     - [powerpc*] stacktrace: Fix arch_stack_walk_reliable()
     - [arm64] dts: imx8mp: Fix SDMA2/3 clocks
     - [arm64] dts: imx8mp-beacon-kit: Fix audio_pll2 clock
     - [arm64] soc: imx8m: Enable OCOTP clock for imx8mm before reading registers
     - [arm64] dts: imx8mm-evk: Fix hdmi@3d node
     - [arm64] dts: imx: Add imx8mm-prt8mm.dtb to build
     - [x86] i915/guc: Get runtime pm in busyness worker only if already active
     - gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip
     - i2c: npcm7xx: Fix callback completion ordering
     - NFSD: Fix zero NFSv4 READ results when RQ_SPLICE_OK is not set
     - [x86] reboot: VMCLEAR active VMCSes before emergency reboot
     - ceph: drop messages from MDS when unmounting
     - dma-debug: don't call __dma_entry_alloc_check_leak() under
       free_entries_lock
     - bpf: Annotate bpf_long_memcpy with data_race
     - [x86] ASoC: amd: yc: Add DMI entries to support Victus by HP Gaming Laptop
       15-fb0xxx (8A3E)
     - spi: sun6i: reduce DMA RX transfer width to single byte
     - spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain
     - nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()
     - scsi: qedf: Add synchronization between I/O completions and abort
     - scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock
     - scsi: ufs: core: Poll HCS.UCRDY before issuing a UIC command
     - ring-buffer: Avoid softlockup in ring_buffer_resize()
     - btrfs: assert delayed node locked when removing delayed item
     - ring-buffer: Do not attempt to read past "commit"
     - ata: sata_mv: Fix incorrect string length computation in mv_dump_mem()
     - [x86] efi/x86: Ensure that EFI_RUNTIME_MAP is enabled for kexec
     - [x86] platform/x86: asus-wmi: Support 2023 ROG X16 tablet mode
     - thermal/of: add missing of_node_put()
     - drm/amdgpu: Store CU info from all XCCs for GFX v9.4.3
     - drm/amd/display: Don't check registers, if using AUX BL control
     - drm/amdgpu/soc21: don't remap HDP registers for SR-IOV
     - drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV
     - drm/amdgpu: fallback to old RAS error message for aqua_vanjaram
     - drm/amdgpu: Handle null atom context in VBIOS info ioctl
     - objtool: Fix _THIS_IP_ detection for cold functions
     - nvme-pci: do not set the NUMA node of device if it has none
     - [riscv64] errata: fix T-Head dcache.cva encoding
     - scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command
     - scsi: pm80xx: Avoid leaking tags when processing
       OPC_INB_SET_CONTROLLER_CONFIG command
     - smb3: correct places where ENOTSUPP is used instead of preferred
       EOPNOTSUPP
     - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset()
     - ata: libata-eh: do not thaw the port twice in ata_eh_reset()
     - Add DMI ID for MSI Bravo 15 B7ED
     - spi: nxp-fspi: reset the FLSHxCR1 registers
     - [armhf] spi: stm32: add a delay before SPI disable
     - bpf: Clarify error expectations from bpf_clone_redirect
     - ASoC: rt5640: Only cancel jack-detect work on suspend if active
     - ALSA: hda: intel-sdw-acpi: Use u8 type for link index
     - [x86] ASoC: cs42l42: Ensure a reset pulse meets minimum pulse width.
     - [x86] ASoC: cs42l42: Don't rely on GPIOD_OUT_LOW to set RESET initially
       low
     - [x86] ASoC: cs42l42: Avoid stale SoundWire ATTACH after hard reset
     - firmware: cirrus: cs_dsp: Only log list of algorithms in debug build
     - ASoC: wm_adsp: Fix missing locking in wm_adsp_[read|write]_ctl()
     - ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link
     - [x86] ASoC: SOF: sof-audio: Fix DSP core put imbalance on widget setup
       failure
     - media: vb2: frame_vector.c: replace WARN_ONCE with a comment
     - NFSv4.1: fix zero value filehandle in post open getattr
     - [x86] ASoC: SOF: Intel: MTL: Reduce the DSP init timeout
     - [powerpc*] watchpoints: Disable preemption in thread_change_pc()
     - [powerpc*] watchpoint: Disable pagefaults when getting user instruction
     - [powerpc*] watchpoints: Annotate atomic context in more places
     - [armhf] ncsi: Propagate carrier gain/loss events to the NCSI controller
     - net: hsr: Add __packed to struct hsr_sup_tlv.
     - gfs2: fix glock shrinker ref issues
     - i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low
     - perf build: Define YYNOMEM as YYNOABORT for bison < 3.81
     - iommu/arm-smmu-v3: Fix soft lockup triggered by
       arm_smmu_mm_invalidate_range
     - [x86] sgx: Resolves SECS reclaim vs. page fault for EAUG race
     - [x86] srso: Add SRSO mitigation for Hygon processors
     - [x86] KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway
     - [x86] KVM: SVM: Fix TSC_AUX virtualization setup
     - [x86] KVM: x86/mmu: Open code leaf invalidation from mmu_notifier
     - [x86] KVM: x86/mmu: Do not filter address spaces in
       for_each_tdp_mmu_root_yield_safe()
     - [x86] KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously
     - mptcp: fix bogus receive window shrinkage with multiple subflows
     - mptcp: move __mptcp_error_report in protocol.c
     - mptcp: process pending subflow error on close
     - misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to
       probe (Closes: #1052063)
     - Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux"
     - scsi: core: ata: Do no try to probe for CDL on old drives
     - serial: 8250_port: Check IRQ data before use
     - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
     - crypto: sm2 - Fix crash caused by uninitialized context
     - ALSA: rawmidi: Fix NULL dereference at proc read
     - ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre
       M70q
     - ata: libata-scsi: link ata port and scsi device
     - scsi: sd: Differentiate system and runtime start/stop management
     - scsi: sd: Do not issue commands to suspended disks on shutdown
     - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION
       CODES
     - io_uring/fs: remove sqe->rw_flags checking from LINKAT
     - i2c: i801: unregister tco_pdev in i801_probe() error path
     - [x86] ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG
     - kernel/sched: Modify initial boot task idle setup
     - sched/rt: Fix live lock between select_fallback_rq() and RT push
     - Revert "SUNRPC dont update timeout value on connection reset"
     - NFSv4: Fix a state manager thread deadlock regression
     - ACPI: NFIT: Fix incorrect calculation of idt size
     - timers: Tag (hr)timer softirq as hotplug safe
     - mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are
       specified
     - mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()
     - mm: page_alloc: fix CMA and HIGHATOMIC landing on the wrong buddy list
     - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement
     - cxl/port: Fix cxl_test register enumeration regression
     - cxl/pci: Fix appropriate checking for _OSC while handling CXL RAS
       registers
     - ring-buffer: Fix bytes info in per_cpu buffer stats
     - ring-buffer: Update "shortest_full" in polling
     - btrfs: refresh dir last index during a rewinddir(3) call
     - btrfs: file_remove_privs needs an exclusive lock in direct io write
     - btrfs: set last dir index to the current last index when opening dir
     - btrfs: fix race between reading a directory and adding entries to it
     - btrfs: properly report 0 avail for very full file systems
     - media: uvcvideo: Fix OOB read
     - bpf: Add override check to kprobe multi link attach
     - bpf: Fix BTF_ID symbol generation collision
     - bpf: Fix BTF_ID symbol generation collision in tools/
     - net: thunderbolt: Fix TCPv6 GSO checksum calculation
     - thermal: sysfs: Fix trip_point_hyst_store()
     - fs/smb/client: Reset password pointer to NULL (CVE-2023-5345)
     - tracing/user_events: Align set_bit() address for all archs
     - ata: libata-core: Fix ata_port_request_pm() locking
     - ata: libata-core: Fix port and device removal
     - ata: libata-core: Do not register PM operations for SAS ports
     - ata: libata-sata: increase PMP SRST timeout to 10s
     - [x86] i915: Limit the length of an sg list to the requested length
     - [x86] drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top
     - power: supply: rk817: Add missing module alias
     - power: supply: ab8500: Set typing and props
     - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC
     - drm/amd/display: fix the ability to use lower resolution modes on eDP
     - [arm64] drm/meson: fix memory leak on ->hpd_notify callback
     - rbd: move rbd_dev_refresh() definition
     - rbd: decouple header read-in from updating rbd_dev->header
     - rbd: decouple parent info read-in from updating rbd_dev
     - rbd: take header_rwsem in rbd_dev_refresh() only when updating
     - memcg: drop kmem.limit_in_bytes
     - mm, memcg: reconsider kmem.limit_in_bytes deprecation
     - [x86] ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL
 .
   [ Salvatore Bonaccorso ]
   * Bump ABI to 2
   * [rt] Drop "kernel/fork: beware of __put_task_struct calling context"
     (applied upstream)
   * [rt] Disable RT featureset as not supported in 6.5.y series
 .
   [ Yoann Congal ]
   * [x86] drivers/watchdog: Enable ADVANTECH_EC_WDT as module (Closes: #1051449)
 .
   [ Vincent Blut ]
   * [x86] drivers/platform/x86: Enable SYSTEM76_ACPI as module
     (Closes: #1050996)
 .
   [ Emanuele Rocca ]
   * [arm64] Add qrtr to kernel-image udeb, needed by Lenovo Thinkpad X13s.
Checksums-Sha1:
 84dc978bf2db43234c96e021d09028814ea3c453 308497 linux_6.5.10-1~bpo12+1.dsc
 95ed5c70cc6f0a192c374f6456100c0b200e7a4f 1512272 linux_6.5.10-1~bpo12+1.debian.tar.xz
 04a08383d2c9649bf2f7467283b3e7e8bdb03877 6097 linux_6.5.10-1~bpo12+1_source.buildinfo
Checksums-Sha256:
 e5e000bcb94efd103abf9ea72804c2f28e3c399289a75117965bfde962e83e83 308497 linux_6.5.10-1~bpo12+1.dsc
 1422371a6eacc894f1ba1a95311da36eb4563ca48a1d663cb8c1252085e677e7 1512272 linux_6.5.10-1~bpo12+1.debian.tar.xz
 650eacec44f4173557a91d8d9371c2a8fd67897914432af60f6b67f35e21fc43 6097 linux_6.5.10-1~bpo12+1_source.buildinfo
Files:
 bdb8a710bf86b486670b7be05a063c80 308497 kernel optional linux_6.5.10-1~bpo12+1.dsc
 c09b6d02f111fdb696a1dad32d5fcc60 1512272 kernel optional linux_6.5.10-1~bpo12+1.debian.tar.xz
 3fa66bcaf86d7817a32754692e2cec8b 6097 kernel optional linux_6.5.10-1~bpo12+1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=MNqW
-----END PGP SIGNATURE-----