ceph: fix num_ops off-by-one when crypto allocation fails

fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info

ibmasm: fix heap over-read in ibmasm_send_i2o_message()

x86/shstk: Prevent deadlock during shstk sigreturn

ntfs3: fix integer overflow in run_unpack() volume boundary check

KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN

media: amphion: Fix race between m2m job_abort and device_run

Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

selinux: fix overlayfs mmap() and mprotect() access checks

net: rds: fix MR cleanup on copy error

ceph: only d_add() negative dentries when they are unhashed

md/raid5: fix soft lockup in retry_aligned_read()

md/raid10: fix deadlock with check operation and nowait requests

ALSA: ctxfi: Add fallback to default RSR for S/PDIF

ALSA: caiaq: fix usb_dev refcount leak on probe failure

net: qrtr: ns: Fix use-after-free in driver remove()

ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()

ipmi:ssif: Clean up kthread on errors

RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv

inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails