UPDATE: 6.12.97

[fepitre-bot]

Update to 6.12.97

Details

Changes since previous version:
gregkh/linux@126c7019b34f bpf, arm64: Reject out-of-range B.cond targets
gregkh/linux@d2081d45172e nfsd: fix file change detection in CB_GETATTR
gregkh/linux@d369e5edfaaf nfsd: release layout stid on setlease failure
gregkh/linux@a6e9a4939e35 userfaultfd: gate must_wait writability check on pte_present()
gregkh/linux@fc5e19d609c3 perf: Fix dangling cgroup pointer in cpuctx backport
gregkh/linux@2ce330b8bc31 bcachefs: avoid truncating fiemap extent length
gregkh/linux@ca9e62ac4324 drm/amd: Fix set but not used warnings
gregkh/linux@2b93fe74c90b gpio: rockchip: change the GPIO version judgment logic
gregkh/linux@cdc603ce3118 gpio: rockchip: teardown bugs and resource leaks
gregkh/linux@50c7a6d2bf17 gpio: rockchip: fix generic IRQ chip leak on remove
gregkh/linux@c15ff206ba78 mm/vmalloc: take vmap_purge_lock in shrinker
gregkh/linux@c8542b68ba6e device property: initialize the remaining fields of fwnode_handle in fwnode_init()
gregkh/linux@550511a2470f f2fs: validate orphan inode entry count
gregkh/linux@56038756aae6 f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
gregkh/linux@2a9f9791653b f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
gregkh/linux@44480f7e3f83 f2fs: fix potential deadlock in f2fs_balance_fs()
gregkh/linux@b885c7783c19 f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
gregkh/linux@7dd01f7d0291 f2fs: fix listxattr handling of corrupted xattr entries
gregkh/linux@b5bb2c696e14 fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
gregkh/linux@1adb9eba794a nfsd: add nfsd_file_{get,put} to 'nfs_to' nfsd_localio_operations
gregkh/linux@e29ca51c7435 nfs_common: rename functions that invalidate LOCALIO nfs_clients
gregkh/linux@26ab8a7c2939 NFSv4/flexfiles: Remove cred local variable dependency
gregkh/linux@d1830d0740d7 NFSv4/flexfiles: Add data structure support for striped layouts
gregkh/linux@7779c85028a0 NFSv4/flexfiles: reject zero filehandle version count
gregkh/linux@fb45361ffc48 locking/rtmutex: Make sure we wake anything on the wake_q when we release the lock->wait_lock
gregkh/linux@cf4238c03f68 apparmor: advertise the tcp fast open fix is applied
gregkh/linux@37840413f995 nfsd: move name lookup out of nfsd4_list_rec_dir()
gregkh/linux@e842bb17c126 nfsd: change nfs4_client_to_reclaim() to allocate data
gregkh/linux@99f6e7ab2cfa bonding: fix xfrm offload feature setup on active-backup mode
gregkh/linux@6375f1d0d033 block: add a store_limit operations for sysfs entries
gregkh/linux@1645cd7fd42c block: fix queue freeze vs limits lock order in sysfs store methods
gregkh/linux@9108ee3d5f70 mm/khugepaged: write all dirty file folios when collapsing
gregkh/linux@ceef25a6ab60 perf trace beauty fcntl: Fix build with older kernel headers
gregkh/linux@37f28bf8f146 ACPI: CPPC: Suppress UBSAN warning caused by field misuse
gregkh/linux@3c8f73b0fbdf ACPI: NFIT: core: Fix possible NULL pointer dereference
gregkh/linux@a6402808e552 platform/x86: intel-hid: Protect ACPI notify handler against recursion
gregkh/linux@a77764000196 LoongArch: Add PIO for early access before ACPI PCI root register
gregkh/linux@555fab808859 rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER
gregkh/linux@39358e856fb8 perf/core: Detach event groups during remove_on_exec
gregkh/linux@6d44f69ced27 rust: kasan: KASAN+RUST requires clang
gregkh/linux@cc9b98d488da drm/i915: ensure segment offset never exceeds allowed max
gregkh/linux@f5870777458d usb: gadget: function: rndis: add length check to response query
gregkh/linux@ba2cc601e59f usb: gadget: function: rndis: add length check for header
gregkh/linux@89f4a4ca0ac3 iio: accel: bmc150: clamp the device-reported FIFO frame count
gregkh/linux@223703d6e8be iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
gregkh/linux@48eccc6caed4 iio: adc: lpc32xx: Initialize completion before requesting IRQ
gregkh/linux@37077d8271b1 iio: adc: spear: Initialize completion before requesting IRQ
gregkh/linux@f40292fb1939 iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
gregkh/linux@fbb2a5f576ea iio: adc: ti-ads124s08: Return reset GPIO lookup errors
gregkh/linux@86dd1d4558bd iio: backend: fix uninitialized data in debugfs
gregkh/linux@8d4a46e971cf iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
gregkh/linux@d6d4f7beaa06 iio: common: st_sensors: honour channel endianness in read_axis_data
gregkh/linux@72c6aa8e0d74 iio: event: Fix event FIFO reset race
gregkh/linux@d85ee50f58dd iio: gyro: bmg160: bail out when bandwidth/filter is not in table
gregkh/linux@1a775f73790c iio: gyro: bmg160: wait full startup time after mode change at probe
gregkh/linux@08d04868cf66 iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
gregkh/linux@c455b547984c iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
gregkh/linux@39e77f670c05 iio: imu: inv_icm42600: fix timestamp clock period by using lower value
gregkh/linux@d372524ef4c4 iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
gregkh/linux@ef9fed6a9ab1 iio: imu: st_lsm6dsx: deselect shub page before reading whoami
gregkh/linux@7c470dc8b9a6 iio: light: al3010: fix incorrect scale for the highest gain range
gregkh/linux@29137052c448 iio: light: gp2ap002: fix runtime PM leak on read error
gregkh/linux@4cd292234863 iio: light: opt3001: fix missing state reset on timeout
gregkh/linux@df8520a9fc1a iio: light: tsl2591: return actual error from probe IRQ failure
gregkh/linux@19b0e248dc0e iio: light: veml6030: fix channel type when pushing events
gregkh/linux@6586519a71b3 iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
gregkh/linux@dbac6f7dc25e iio: resolver: ad2s1210: notify trigger and clear state on fault read error
gregkh/linux@2396d44f34cc iio: temperature: Build mlx90635 with CONFIG_MLX90635
gregkh/linux@087bbeed0729 iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
gregkh/linux@53a7955b5642 iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
gregkh/linux@0ad7d7e4f1b6 ALSA: virtio: Add missing 384 kHz PCM rate mapping
gregkh/linux@3243563f99ef ALSA: virtio: Validate control metadata from the device
gregkh/linux@02f33c2062c7 ALSA: ymfpci: check snd_ctl_new1() return value
gregkh/linux@3cad86197c7b ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
gregkh/linux@4dd5b0b1a52a ALSA: cmipci: check snd_ctl_new1() return value
gregkh/linux@af01c48e17a6 ALSA: es1938: check snd_ctl_new1() return value
gregkh/linux@31da82b9676c ALSA: firewire: isight: bound the sample count to the packet payload
gregkh/linux@fc5d4f27ca12 ALSA: gus: check snd_ctl_new1() return value
gregkh/linux@d34ad480b889 ALSA: ice1712: check snd_ctl_new1() return value
gregkh/linux@fb1aa5082847 ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
gregkh/linux@c1da6d3f4503 ALSA: usb-audio: avoid kobject path lookup in DualSense match
gregkh/linux@8cf0fe58f37d ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
gregkh/linux@89bb747e91e6 ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
gregkh/linux@35a73bba734a ALSA: usb-audio: Roll back quirk control caches on write errors
gregkh/linux@e0d9f6cadb11 ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
gregkh/linux@629d5aa902aa ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
gregkh/linux@99e22a5713c1 vfio/pci: Use a private flag to prevent power state change with VFs
gregkh/linux@b98296816d31 vfio/pci: Latch disable_idle_d3 per device
gregkh/linux@42d758a09d2c vfio/pci: Release the VGA arbiter client on register_device() failure
gregkh/linux@5e91e4c329a7 vfio/pci: Fix racy bitfields and tighten struct layout
gregkh/linux@ed7d5599e6c3 vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
gregkh/linux@6cc60b41d616 vfio: Remove device debugfs before releasing devres
gregkh/linux@ee7b466103b4 Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
gregkh/linux@14e02f1449ba Bluetooth: btusb: fix use-after-free on registration failure
gregkh/linux@92c736866244 Bluetooth: btusb: fix use-after-free on marvell probe failure
gregkh/linux@6ec6918526a5 Bluetooth: btusb: fix wakeup source leak on probe failure
gregkh/linux@e63032dc7150 binder: fix UAF in binder_thread_release()
gregkh/linux@d45ef513eed1 binder: fix UAF in binder_free_transaction()
gregkh/linux@f7b022ae0768 usb: xhci: Fix sleep in atomic context in xhci_free_streams()
gregkh/linux@94b1abf1af94 usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
gregkh/linux@438ab0d51f37 PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series
gregkh/linux@0db364eef812 PCI: altera: Do not dispose parent IRQ mapping
gregkh/linux@1de0f4435f85 PCI: host-common: Request bus reassignment when not probe-only
gregkh/linux@9bcb59a45302 PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
gregkh/linux@ef2ae10a4582 mm/damon/ops-common: handle extreme intervals in damon_hot_score()
gregkh/linux@ff86ea9b7fdf netfilter: ipset: fix race between dump and ip_set_list resize
gregkh/linux@41e6dc1a1003 virtio_pci: fix vq info pointer lookup via wrong index
gregkh/linux@7e529fd730c3 virtio-mmio: fix device release warning on module unload
gregkh/linux@81dd21b5f0c2 hwrng: virtio: clamp device-reported used.len at copy_data()
gregkh/linux@3ad5fbcced4e USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
gregkh/linux@e0e4f15d4225 usb: dwc3: run gadget disconnect from sleepable suspend context
gregkh/linux@593b78bb3c7e 6lowpan: fix NHC entry use-after-free on error path
gregkh/linux@a21ed5064217 tipc: fix out-of-bounds read in broadcast Gap ACK blocks
gregkh/linux@8eff7cd4817e staging: vme_user: bound slave read/write to the kern_buf size
gregkh/linux@419ec1b604d7 smb: client: restrict implied bcc[0] exemption to responses without data area
gregkh/linux@eab82fdf40c2 staging: vme_user: fix location monitor leak in fake bridge
gregkh/linux@36902ab588cc staging: vme_user: fix location monitor leak in tsi148 bridge
gregkh/linux@cacbe2173801 media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
gregkh/linux@e024cf507bb8 staging: media: atomisp: reduce load_primary_binaries() stack usage
gregkh/linux@46f66c16a951 staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
gregkh/linux@3e44a7665f3a staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
gregkh/linux@0970dd47726a staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
gregkh/linux@bd953d52d587 staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
gregkh/linux@ad2637c46ef8 staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
gregkh/linux@204b22c8df11 staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
gregkh/linux@918537a0fbed staging: rtl8723bs: fix OOB write in HT_caps_handler()
gregkh/linux@6effdbaca3cd crypto: amlogic - avoid double cleanup in meson_crypto_probe()
gregkh/linux@ddb923982833 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
gregkh/linux@6de2a650917b net: af_key: initialize alg_key_len for IPComp states
gregkh/linux@a3d85dec60bb audit: Fix data races of skb_queue_len() readers on audit_queue
gregkh/linux@e4369e4e970f Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
gregkh/linux@6f2ca7e63942 coresight: etb10: restore atomic_t for shared reading state
gregkh/linux@e2e255d07723 debugobjects: Plug race against a concurrent OOM disable
gregkh/linux@c6f9e804f73e fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
gregkh/linux@174a97f21bf9 NTB: epf: Avoid calling pci_irq_vector() from hardirq context
gregkh/linux@6112fba41500 gpio: eic-sprd: use raw_spinlock_t in the irq startup path
gregkh/linux@b6f179a653a9 io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
gregkh/linux@95ecc5b58042 netpoll: fix a use-after-free on shutdown path
gregkh/linux@8820b530cb23 ipv4: igmp: remove multicast group from hash table on device destruction
gregkh/linux@99206ce2244f net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
gregkh/linux@ed2941e5db01 mfd: cros_ec: Delay dev_set_drvdata() until probe success
gregkh/linux@2fed79f0fe8c mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
gregkh/linux@b9a280a9a454 mm: shrinker: fix shrinker_info teardown race with expansion
gregkh/linux@36f8534f4612 mm: shrinker: fix NULL pointer dereference in debugfs
gregkh/linux@60cbe67d1342 mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
gregkh/linux@13e0a1308f7e netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
gregkh/linux@3b13e7635795 netfilter: handle unreadable frags
gregkh/linux@da32e78bbb18 netfilter: ebtables: module names must be null-terminated
gregkh/linux@7436da6c1bc4 netfilter: ebtables: terminate table name before find_table_lock()
gregkh/linux@7b429d611060 Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
gregkh/linux@df22adc7eafc Bluetooth: bnep: pin L2CAP connection during netdev registration
gregkh/linux@441088792ffe Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
gregkh/linux@6303ed4bbe00 Bluetooth: fix UAF in bt_accept_dequeue()
gregkh/linux@d52446b3e735 Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
gregkh/linux@b3e647a4aa4d Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
gregkh/linux@996d3da39899 Bluetooth: L2CAP: validate option length before reading conf opt value
gregkh/linux@b566bcf0be48 fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
gregkh/linux@7ce1ae75bbbd fs/ntfs3: fsync files by syncing parent inodes
gregkh/linux@ab622912b7c4 fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
gregkh/linux@d68a14450783 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
gregkh/linux@4c5a0a946373 coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
gregkh/linux@cad756733dc3 smb/client: Fix error code in smb2_aead_req_alloc()
gregkh/linux@9b9cf7e65cbe ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
gregkh/linux@ca53bb17f4e8 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
gregkh/linux@64dac2d486ec ksmbd: serialize QUERY_DIRECTORY requests per file
gregkh/linux@463bbd796985 ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
gregkh/linux@b0d4d5cb846a ksmbd: require source read access for duplicate extents
gregkh/linux@9ab2ffd3ed3d ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
gregkh/linux@0ce682867fd5 ksmbd: run set info with opener credentials
gregkh/linux@db12df22ad74 ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
gregkh/linux@41f5ff8c8115 ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
gregkh/linux@18c59109bb6f ksmbd: use opener credentials for delete-on-close
gregkh/linux@a8f5d39971bb ksmbd: use opener credentials for ADS I/O
gregkh/linux@1665f25b1dea smb: client: fix query directory replay double-free
gregkh/linux@3c81dda84799 smb: client: fix query_info() replay double-free
gregkh/linux@96fcfc8ae735 smb: client: fix double-free in SMB2_ioctl() replay
gregkh/linux@d684f4134998 smb: client: fix change notify replay double-free
gregkh/linux@878757163eea smb: client: fix double-free in SMB2_flush() replay
gregkh/linux@3196b5192f24 smb: client: fix double-free in SMB2_open() replay
gregkh/linux@0aa97edf7c34 smb: client: fix double-free in SMB2_close() replay
gregkh/linux@67097772df77 smb: client: Fix next buffer leak in receive_encrypted_standard()
gregkh/linux@93128043b0a5 smb: client: use unaligned reads in parse_posix_ctxt()
gregkh/linux@427eb7eb4642 smb: client: harden POSIX SID length parsing
gregkh/linux@82144cf09247 smb: client: fix atime clamp check in read completion
gregkh/linux@b84e002e0df2 smb: client: mask server-provided mode to 07777 in modefromsid
gregkh/linux@c923cc3cb5cd writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
gregkh/linux@2e134fb6c2ab OPP: of: Fix potential memory leak in opp_parse_supplies()
gregkh/linux@28a03a3f6e6c cpufreq: qcom-cpufreq-hw: Fix possible double free
gregkh/linux@2619b47a0c81 firmware_loader: fix device reference leak in firmware_upload_register()
gregkh/linux@89899b16992d cpufreq: intel_pstate: Sync policy->cur during CPU offline
gregkh/linux@89237c8fc15d sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
gregkh/linux@a0ef2fc89d28 cpufreq: Fix hotplug-suspend race during reboot
gregkh/linux@a36ca93a8ba5 cpufreq: pcc: fix use-after-free and double free in OSC evaluation
gregkh/linux@eb4cec29a783 posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
gregkh/linux@50a4a00e52ad clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
gregkh/linux@f7f958e04a50 perf/arm-cmn: Fix DVM node events
gregkh/linux@3d25d2556029 X.509: Fix validation of ASN.1 certificate header
gregkh/linux@7e706d50fa11 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
gregkh/linux@6008958a5818 tools/mm/slabinfo: Fix trace disable logic inversion
gregkh/linux@3ad05214be9a tools/mm/slabinfo: fix total_objects attribute name
gregkh/linux@ad47ad624f2f HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
gregkh/linux@75eb2173b63a HID: wacom: stop hardware after post-start probe failures
gregkh/linux@17f5928d7010 HID: letsketch: fix UAF on inrange_timer at driver unbind
gregkh/linux@dfc6e61f8311 HID: lg-g15: cancel pending work on remove to fix a use-after-free
gregkh/linux@09ddf4221361 HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
gregkh/linux@d2afc7ecee47 hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
gregkh/linux@0789f0a67107 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
gregkh/linux@ac0774961a6e media: mtk-jpeg: cancel workqueue on release for supported platforms only
gregkh/linux@977855894bca serial: 8250_mid: Disable DMA for selected platforms
gregkh/linux@640d396c9cc1 xfs: use null daddr for unset first bad log block
gregkh/linux@d19df485dd64 xfs: release dquot buffer after dqflush failure
gregkh/linux@3c1094a7aa4a xfs: fix unreachable BIGTIME check in dquot flush validation
gregkh/linux@368061960cef xfs: fix pointer arithmetic error on 32-bit systems
gregkh/linux@c597c8580d50 xfs: fix exchmaps reservation limit check
gregkh/linux@c5b4f5efcb55 bpf: Reject fragmented frames in devmap
gregkh/linux@70328bbd504a bpf: Restore sysctl new-value from 1 to 0
gregkh/linux@c5ff816d5f13 bpf: Validate BTF repeated field counts before expansion
gregkh/linux@c466097d85d5 net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
gregkh/linux@b74385a11fe9 usb: cdc_acm: Add quirk for Uniden BC125AT scanner
gregkh/linux@d9643bbe93a6 usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
gregkh/linux@6f6f799c4fbf USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
gregkh/linux@ed0b61d75b79 usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
gregkh/linux@8890699eea19 usb: free iso schedules on failed submit
gregkh/linux@91b3ecd34b60 usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
gregkh/linux@d026f71df141 usb: gadget: udc: Fix use-after-free in gadget_match_driver
gregkh/linux@bf20c94fa6aa usb: gadget: f_printer: take kref only for successful open
gregkh/linux@d0f61acb51a8 USB: idmouse: fix use-after-free on disconnect race
gregkh/linux@d8f69404e1d6 USB: ldusb: fix use-after-free on disconnect race
gregkh/linux@f328b0e9a0db USB: iowarrior: fix use-after-free on disconnect
gregkh/linux@abebc71815cf USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
gregkh/linux@ab2bfd7bec4f USB: legousbtower: fix use-after-free on disconnect race
gregkh/linux@bbb8af0097a6 usb: sl811-hcd: disable controller wakeup on remove
gregkh/linux@f050cd5a76b1 USB: storage: include US_FL_NO_SAME in quirks mask
gregkh/linux@5e62d7857fd5 USB: misc: uss720: unregister parport on probe failure
gregkh/linux@00c3fef4c2dc usb: mtu3: unmap request DMA on queue failure
gregkh/linux@e1494191a3aa USB: serial: keyspan_pda: fix information leak
gregkh/linux@2d5b85773b79 USB: serial: option: add Telit Cinterion FE990D50 compositions
gregkh/linux@abacd67e6f68 USB: serial: digi_acceleport: fix broken rx after throttle
gregkh/linux@2067b3838da6 USB: serial: digi_acceleport: fix hard lockup on disconnect
gregkh/linux@a274b3794fe1 USB: serial: digi_acceleport: fix write buffer corruption
gregkh/linux@624c57147df1 USB: ulpi: fix memory leak on registration failure
gregkh/linux@80e9afede8d2 USB: usb-storage: ene_ub6250: restore media-ready check
gregkh/linux@2afb5e4b7107 usbip: tools: support SuperSpeedPlus devices
gregkh/linux@0025276175fb usbip: vudc: fix NULL deref in vep_dequeue()
gregkh/linux@c48b6edb4ac5 usb: typec: anx7411: use devm_pm_runtime_enable()
gregkh/linux@078dac3c3f34 usb: typec: class: drop PD lookup reference
gregkh/linux@d731216d1e2b usb: typec: tcpm: Fix VDM type for Enter Mode commands
gregkh/linux@c6d2af3b217a usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
gregkh/linux@35f5c3bd1ee4 usb: typec: ucsi: Invert DisplayPort role assignment
gregkh/linux@b3c58283258a usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
gregkh/linux@86c9ee928c4a usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
gregkh/linux@bf7944b98ca1 usb: typec: ucsi: cancel pending work on system suspend
gregkh/linux@b7475b2dce5e usb: gadget: f_fs: Fix DMA fence leak
gregkh/linux@f41cf35ee2a1 block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
gregkh/linux@ebc300b7ee0c x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
gregkh/linux@e9e726107170 PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
gregkh/linux@9442d75429b0 udf: validate free block extents against the partition length
gregkh/linux@55287a3555ff udf: validate VAT header length against the VAT inode size
gregkh/linux@2a219acb2ce6 udf: validate sparing table length as an entry count, not a byte count
gregkh/linux@a03d29d6c5e2 hwrng: jh7110 - fix refcount leak in starfive_trng_read()
gregkh/linux@d65fe42820b8 nvme: target: rdma: fix ndev refcount leak on queue connect
gregkh/linux@84f279d444c8 dm-ioctl: report an error if a device has no table
gregkh/linux@7fd24368c492 nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
gregkh/linux@33b974eb6261 nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
gregkh/linux@999f6205ede9 nvmet-auth: validate reply message payload bounds against transfer length
gregkh/linux@02c903fc6fc7 btrfs: do not trim a device which is not writeable
gregkh/linux@4671bb74bba0 partitions: aix: bound the pp_count scan to the ppe array
gregkh/linux@6bf41db09ef9 isofs: bound Rock Ridge symlink components to the SL record
gregkh/linux@ed5905a9f212 crypto: af_alg - Remove zero-copy support from skcipher and aead
gregkh/linux@cea7302d5d05 crypto: caam - use print_hex_dump_devel to guard key hex dumps
gregkh/linux@8904b425cfca crypto: caam - use print_hex_dump_devel to guard key hex dumps again
gregkh/linux@5275e0fca256 crypto: ecc - Fix carry overflow in vli multiplication
gregkh/linux@4711ca06bd16 crypto: pcrypt - restore callback for non-parallel fallback
gregkh/linux@515f19de36ae crypto: tegra - fix refcount leak in tegra_se_host1x_submit()
gregkh/linux@5181e88da99c crypto: ccp - Do not initialize SNP for SEV ioctls
gregkh/linux@74768f73854d crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
gregkh/linux@61cf5eef2065 crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
gregkh/linux@bbbac12083ef crypto: drbg - Fix returning success on failure in CTR_DRBG
gregkh/linux@ae9cfe6a49b3 crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
gregkh/linux@5c638c51a4e2 crypto: drbg - Fix the fips_enabled priority boost
gregkh/linux@5bef30152405 crypto: qat - keep VFs enabled during reset
gregkh/linux@217ed010a399 crypto: qat - notify fatal error before AER reset preparation
gregkh/linux@222fa7b453b6 crypto: qat - protect service table iterations with service_lock
gregkh/linux@3d61a214fdcd crypto: qat - validate RSA CRT component lengths
gregkh/linux@9471f6fac360 crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
gregkh/linux@1bbfc4204418 crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
gregkh/linux@d2e052e13354 crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
gregkh/linux@18156c469987 crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
gregkh/linux@4797eb9c1bf5 crypto: talitos - move code in current_desc_hdr() into a standalone function
gregkh/linux@21e3f4d7ec6e crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
gregkh/linux@d873fa890a41 crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
gregkh/linux@9da7ac35a7fe crypto: talitos/hash - drop workqueue mechanism for SEC1
gregkh/linux@b5677c2d9b54 crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
gregkh/linux@1859a24f5821 crypto: talitos/hash - remove useless wrapper
gregkh/linux@f8f25ae63db1 crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
gregkh/linux@a6f7fd47d801 arm64: fpsimd: Fix type mismatch in sme{save,load}state()
gregkh/linux@5fa47117d610 spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
gregkh/linux@d5c1060218a3 spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
gregkh/linux@f53e6546dfbd EDAC/i10nm: Don't fail probing if ADXL is missing
gregkh/linux@f8f04432c173 watchdog: apple: Add "apple,t8103-wdt" compatible
gregkh/linux@3e1441a4d06d regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
gregkh/linux@c51122aff62b i2c: core: fix hang on adapter registration failure
gregkh/linux@ebb559028569 tracing: Prevent out-of-bounds read in glob matching
gregkh/linux@036804d92bae audit: fix potential integer overflow in audit_log_n_hex()
gregkh/linux@6bd7d0a06b53 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
gregkh/linux@168072baf9ad module: decompress: check return value of module_extend_max_pages()
gregkh/linux@727bf7783a29 exfat: bound uniname advance in exfat_find_dir_entry()
gregkh/linux@0cbf15c88cfc NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
gregkh/linux@c4df24702bfc riscv: mm: Unconditionally sfence.vma for spurious fault
gregkh/linux@920272b425e8 mm: fix mmap errno value when MAP_DROPPABLE is not supported
gregkh/linux@76bbd8b52d88 selftests: mm: fix and speedup "droppable" test
gregkh/linux@8344bdf06294 mm: do file ownership checks with the proper mount idmap
gregkh/linux@dd83e7d500cc selftests/mm: pagemap_ioctl: use the correct page size for transact_test()
gregkh/linux@89a8a372f41c iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
gregkh/linux@d2bd041e0efa iommufd: Set upper bounds on cache invalidation entry_num and entry_len
gregkh/linux@58b6191e2a65 KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
gregkh/linux@b3436d9b9b1a KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
gregkh/linux@258ec63c0f28 KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
gregkh/linux@f51475339fed udmabuf: fix DMA direction mismatch in release_udmabuf()
gregkh/linux@d6552f5cff79 dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
gregkh/linux@d12c84598551 i2c: core: fix irq domain leak on adapter registration failure
gregkh/linux@2ce0a74bfa3a i2c: core: fix NULL-deref on adapter registration failure
gregkh/linux@8c57213d031b i2c: core: fix adapter probe deferral loop
gregkh/linux@4d42f92c7d9b i2c: core: fix adapter debugfs creation
gregkh/linux@bb234487a447 i2c: core: fix adapter deregistration race
gregkh/linux@c61fa75825a6 i2c: mpc: Fix timeout calculations
gregkh/linux@69bda589d838 i2c: stm32f7: truncate clock period instead of rounding it
gregkh/linux@6425f9241fa1 Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
gregkh/linux@850117b637bc Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
gregkh/linux@4e3689c26854 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
gregkh/linux@feb4866a42ec Input: elan_i2c - prevent division by zero and arithmetic underflow
gregkh/linux@46addbd13dbf Input: goodix - clamp the device-reported contact count
gregkh/linux@e5fa31f0550b Input: iforce - bound the device-reported force-feedback effect index
gregkh/linux@7c00a0787af7 Input: mms114 - fix touch indexing for MMS134S and MMS136
gregkh/linux@70e424879376 Input: touchwin - reset the packet index on every complete packet
gregkh/linux@b78150729762 Input: mms114 - reject an oversized device packet size
gregkh/linux@c35ff54b0b9b Input: maplemouse - fix NULL pointer dereference in open()
gregkh/linux@f8ef4504057a Input: mms114 - fix multi-touch slot corruption
gregkh/linux@0df5e3a9495f Input: maple_keyb - set driver data before registering input device
gregkh/linux@9f2058f77681 Input: maplemouse - set driver data before registering input device
gregkh/linux@99e8e3b1419e Input: maplecontrol - set driver data before registering input device
gregkh/linux@6f40246f4312 RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
gregkh/linux@6bc89f34a459 RDMA/siw: bound Read Response placement to the RREAD length
gregkh/linux@d75f57f2ec45 fuse: fix device node leak in cuse_process_init_reply()
gregkh/linux@e6aa539720c3 fuse: re-lock request before returning from fuse_ref_folio()
gregkh/linux@1d8ecd0cd696 fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
gregkh/linux@82cf1142e5cc usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
gregkh/linux@4a9d2657d3e0 smb: client: reject overlapping data areas in SMB2 responses
gregkh/linux@0bc94aed06d1 xfs: fix null pointer dereference in tracepoint
gregkh/linux@d50b1fd066d6 xfs: fail recovery on a committed log item with no regions
gregkh/linux@e705d81a7193 xfs: resample the data fork mapping after cycling ILOCK
gregkh/linux@249e311c2ba3 xfs: don't wrap around quota ids in dqiterate
gregkh/linux@20333513ffaf xfs: set xfarray killable sort correctly
gregkh/linux@f56bb97e91b8 xfs: clamp timestamp nanoseconds correctly
gregkh/linux@5bebe1a2461f xfs: fully check the parent handle when it points to the rootdir
gregkh/linux@3436b38a5212 xfs: don't zap bmbt forks if they are MAXLEVELS tall
gregkh/linux@6d15a1029d42 Linux 6.12.96
gregkh/linux@dcc1bce68aec smb/server: do not require delete access for non-replacing links
gregkh/linux@c716a59e9977 iommu/vt-d: Clear Present bit before tearing down context entry
gregkh/linux@889fc9996700 tcp: Add preempt{disable,enable}_nested() in reqsk_queue_hash_req().
gregkh/linux@eed774da6012 bpf: Support for hardening against JIT spraying
gregkh/linux@9354248fc1c3 x86/bugs: Enable IBPB flush on BPF JIT allocation
gregkh/linux@8ea20054e8d4 bpf: Restrict JIT predictor flush to cBPF
gregkh/linux@83d1065499eb bpf: Skip redundant IBPB in pack allocator
gregkh/linux@0e9f31a87a23 bpf: Prefer packs that won't trigger an IBPB flush on allocation
gregkh/linux@307010f4693e bpf: Prefer dirty packs for eBPF allocations
gregkh/linux@49350f77ca69 sched/fair: Only update stats for allowed CPUs when looking for dst group
gregkh/linux@60eafc7b08c6 crypto: algif_skcipher - force synchronous processing
gregkh/linux@9fa301d82987 KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
gregkh/linux@dfaef40d8a15 KVM: arm64: Clear _hyp_running_vcpu when flushing the pKVM hyp vCPU
gregkh/linux@016f90fd4503 iommu: Pass old domain to set_dev_pasid op
gregkh/linux@72e172bbfa92 iommu/vt-d: Cleanup intel_context_flush_present()
gregkh/linux@e9e83bcfe37d iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry
gregkh/linux@43d51ad31adc timekeeping: Register default clocksource before taking tk_core.lock
gregkh/linux@d306da8833e7 nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
gregkh/linux@6f9442983a3e nvmet-tcp: Fix potential UAF when ddgst mismatch
gregkh/linux@293fe8f2d1b5 vsock/virtio: fix zerocopy completion for multi-skb sends
gregkh/linux@72194f650509 vsock/virtio: bind uarg before filling zerocopy skb
gregkh/linux@e4b7b9819811 crypto: sun4i-ss - Remove insecure and unused rng_alg
gregkh/linux@016e959703d8 iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19
gregkh/linux@3742e9b7df86 iommu/amd: Use maximum PPR log buffer size when SNP is enabled on Family 0x19
gregkh/linux@0650f1c8b6b0 x86/mm: Fix check/use ordering in switch_mm_irqs_off()
gregkh/linux@0a0d7bd7e8bc net: dropreason: Gather SOCKET drop reasons.
gregkh/linux@b1fcc7888035 af_unix: Set drop reason in unix_release_sock().
gregkh/linux@cc8ddf303397 af_unix: Set drop reason in manage_oob().
gregkh/linux@d8f5b285dd31 af_unix: Set drop reason in unix_stream_read_skb().
gregkh/linux@5c7713b035ac af_unix/scm: fix whitespace errors
gregkh/linux@e93a6cbb7e95 af_unix: Don't hold unix_state_lock() in __unix_dgram_recvmsg().
gregkh/linux@7496786770c2 af_unix: Don't check SOCK_DEAD in unix_stream_read_skb().
gregkh/linux@e4baacf6ac27 af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb().
gregkh/linux@48c41cd2e04a af_unix: Drop all SCM attributes for SOCKMAP.
gregkh/linux@a3c6f7c0389c crypto: crypto4xx - Remove ahash-related code
gregkh/linux@689bceaf448f crypto: crypto4xx - Remove insecure and unused rng_alg
gregkh/linux@bf9b5bb0a149 crypto: hisi-trng - Remove crypto_rng interface
gregkh/linux@fe9bdea65ba2 time/jiffies: Register jiffies clocksource before usage
gregkh/linux@c88047e89afb time/jiffies: Change register_refined_jiffies() to void __init
gregkh/linux@cfdfb27373a4 media: uvcvideo: Use hw timestaming if the clock buffer is full
gregkh/linux@b4789ed24393 media: uvcvideo: Avoid partial metadata buffers
gregkh/linux@a9c1380a7de6 media: uvcvideo: Fix buffer sequence in frame gaps
gregkh/linux@08652757cab4 media: uvcvideo: Fix dev_sof filtering in hw timestamp
gregkh/linux@a3fd489f1855 media: uvcvideo: Do not add clock samples with small sof delta
gregkh/linux@2468f9b58a69 media: uvcvideo: Relax the constrains for interpolating the hw clock
gregkh/linux@812103ef9abb media: uvcvideo: Fix sequence number when no EOF
gregkh/linux@b141527b8745 dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties
gregkh/linux@12e2fdf0ee2e dt-bindings: power: imx93: Add MIPI PHY power domain
gregkh/linux@2727744ccb5c serial: msm: Disable DMA for kernel console UART
gregkh/linux@2e191b707cab serial: max310x: implement gpio_chip::get_direction()
gregkh/linux@ed0f9e6f5cfe serial: 8250_omap: clear rx_running on zero-length DMA completes
gregkh/linux@6563b4eb38c3 rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
gregkh/linux@e473cd3046a1 rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
gregkh/linux@a33975ff2b6e afs: Fix netns teardown to cancel the preallocation charger
gregkh/linux@ea19edf71721 afs: fix NULL pointer dereference in afs_get_tree()
gregkh/linux@47dbe2cd4964 afs: Fix further netns teardown to cancel the preallocation charger
gregkh/linux@ac970358c5ca fbcon: fix NULL pointer dereference for a console without vc_data
gregkh/linux@705caaa339e0 clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive()
gregkh/linux@09af44ecf24f drm/rockchip: Test for imported buffers with drm_gem_is_imported()
gregkh/linux@bba0ecd3283f drm/tidss: Drop extra drm_mode_config_reset() call
gregkh/linux@9e1be5d0ed07 drm/gpuvm: Do not prepare NULL objects
gregkh/linux@3d1d9ca86b4f drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
gregkh/linux@415bb9893e24 drm/radeon: fix integer overflow in radeon_align_pitch()
gregkh/linux@eecfb76129eb drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
gregkh/linux@7eaaa5f61d39 libbpf: Report error when a negative kprobe offset is specified
gregkh/linux@974f17b4d77f drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR macro
gregkh/linux@9168714bb640 selftests/bpf: Use local type for flow_offload_tuple_rhash in xdp_flowtable
gregkh/linux@7326adb7f1e3 selftests/bpf: Use local type for bpf_fou_encap in test_tunnel_kern
gregkh/linux@04b6944cd346 Documentation: proc: fix section numbering in table of contents
gregkh/linux@7e5e67b79c23 arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
gregkh/linux@37c20d20817d arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning
gregkh/linux@90f8be63a67f arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning
gregkh/linux@c5878b34156b wifi: cfg80211: fix grammar in MLO group key error message
gregkh/linux@48871402d9f7 arm64: tegra: Fix Tegra234 MGBE PTP clock
gregkh/linux@6f8c8372e80e dt-bindings: pinctrl: nvidia,tegra234: Add missing required block
gregkh/linux@085ea93bda71 drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
gregkh/linux@860885fcd261 driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
gregkh/linux@05d46e303032 wifi: rtw89: Correct data type for scan index to avoid infinite loop
gregkh/linux@26c183a86ea4 wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
gregkh/linux@7090f70cabf5 kconfig: fix potential NULL pointer dereference in conf_askvalue
gregkh/linux@b0f748c56392 soc: xilinx: Shutdown and free rx mailbox channel
gregkh/linux@a9e055ac62cb wifi: ath9k: fix OOB access from firmware tx status queue ID
gregkh/linux@b4feb5df10e8 ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
gregkh/linux@756dba03c83b watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
gregkh/linux@84428bfaf691 watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5
gregkh/linux@ea34d6d427e8 watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
gregkh/linux@61548e38cbeb media: cedrus: Fix failure to clean up hardware on probe failure
gregkh/linux@767f201c9d60 media: v4l2-common: Add YUV24 format info
gregkh/linux@b4985c57ba8b memory: tegra: Wire up system sleep PM ops
gregkh/linux@57da9c3ffcfd crypto: qat - fix heartbeat error injection
gregkh/linux@a5c13e3f24d2 pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path
gregkh/linux@7958f532efe1 drm/gpuvm: take refcount on DRM device
gregkh/linux@79f304b2c6a3 arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
gregkh/linux@720f1394219b arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
gregkh/linux@08f40c0d23c6 vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
gregkh/linux@830c1f3e7198 crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one
gregkh/linux@2fa302bbc62d crypto: atmel-sha204a - fix blocking and non-blocking rng logic
gregkh/linux@adeed0791153 crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
gregkh/linux@e162bc386e71 crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
gregkh/linux@66adc1e6e3ce ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD
gregkh/linux@6369619f1b66 dlm: fix add msg handle in send_queue ordered
gregkh/linux@40a81e38d1c7 nilfs2: fix backing_dev_info reference leak
gregkh/linux@33fdb7a0e497 media: qcom: camss: vfe: fix PIX subdev naming on VFE lite
gregkh/linux@c909263f37af iommu/amd: Fix a stale comment about which legacy mode is user visible
gregkh/linux@886ab6a1f52c arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host
gregkh/linux@b9be95d042a7 rust: alloc: fix Vec::extend_with SAFETY comment
gregkh/linux@b9c2cbac6810 clk: scmi: Fix clock rate rounding
gregkh/linux@9d17a6339abe arm64: dts: qcom: kodiak: Fix ICE reg size
gregkh/linux@7988a37f5e78 arm64: dts: qcom: sm8450: Fix ICE reg size
gregkh/linux@0691511a1f61 drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
gregkh/linux@341ba051d06f drm/hisilicon/hibmc: use clock to look up the PLL value
gregkh/linux@12ad52dc45a0 evm: terminate and bound the evm_xattrs read buffer
gregkh/linux@d2d0d01e6fd9 thermal: hwmon: Fix critical temperature attribute removal
gregkh/linux@5c56f010b2be clk: scpi: Unregister child clock providers on remove
gregkh/linux@020a9334e423 net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()
gregkh/linux@ee717e73ab47 crypto: ccp - Treat zero-length cert chain as query for blob lengths
gregkh/linux@9ecad623a224 spi: hisi-kunpeng: Use dev_err_probe() for host registration failure
gregkh/linux@4086e3054096 net/sched: sch_htb: do not change sch->flags in htb_dump()
gregkh/linux@8f424f8ac821 net/sched: sch_htb: annotate data-races (I)
gregkh/linux@3bdc86d89fd6 ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
gregkh/linux@37fc3cc0f924 IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier
gregkh/linux@65f11919aaa2 RDMA/hns: Fix arithmetic overflow in calc_hem_config()
gregkh/linux@7921821fc2b1 RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
gregkh/linux@07dec3f6dcb6 RDMA/srpt: fix integer overflow in immediate data length check
gregkh/linux@4bb5b7fee1dd RDMA/hns: Initialize seqfile before creating file
gregkh/linux@e245f3491bf3 drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
gregkh/linux@d54de3709ddb selftests/bpf: Reject unsupported -k option in vmtest.sh
gregkh/linux@3807222de315 selftests/mm: Fix resv_sz when parsing arm64 signal frame
gregkh/linux@f53254b2d5e6 media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
gregkh/linux@fdbb8e55578b media: atomisp: gc2235: fix UAF and memory leak
gregkh/linux@6f73f555a5f7 staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy()
gregkh/linux@2ac73017f9f7 firmware: arm_scmi: Read sensor config as 32-bit value
gregkh/linux@5d52b6dc6fd0 sysfs: clamp show() return value in sysfs_kf_read()
gregkh/linux@4a498f67dee6 bitops: use common function parameter names
gregkh/linux@1e7d1c519ef9 regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions
gregkh/linux@67a5b4bba487 net/sched: sch_drr: annotate data-races around cl->deficit
gregkh/linux@2ef552d02a51 media: rockchip: rga: fix too small buffer size
gregkh/linux@0db2bb3c948e firmware: arm_scmi: Fix OOB in scmi_power_name_get()
gregkh/linux@b81604cffdd7 arm64: dts: qcom: sc7180: Add power-domain and iface clk for ice node
gregkh/linux@e7fd3d477447 arm64: dts: qcom: kodiak: Add power-domain and iface clk for ice node
gregkh/linux@c53dbc6c7fa2 arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node
gregkh/linux@98befc53fa0d arm64: dts: qcom: sm8650: Add power-domain and iface clk for ice node
gregkh/linux@88b901fdc166 tracing: Bound synthetic-field strings with seq_buf
gregkh/linux@e43ed4412692 writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()
gregkh/linux@ceae8cc8677e device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
gregkh/linux@67c79e1cdbfe driver core: Use mod_delayed_work to prevent lost deferred probe work
gregkh/linux@9e36e619b101 Revert "treewide: Fix probing of devices in DT overlays"
gregkh/linux@bc7d24f0f465 cpufreq: Documentation: fix sampling_down_factor range
gregkh/linux@16723523c74f cpufreq: conservative: Simplify frequency limit handling
gregkh/linux@32cbbcc50404 pwm: imx27: Fix variable truncation in .apply()
gregkh/linux@a7a65cc24637 RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed
gregkh/linux@427227a9593b bus: sunxi-rsb: Always check register address validity
gregkh/linux@192a3be0e375 RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
gregkh/linux@e038d42cc09c RDMA/rxe: Fix a use-after-free problem in rxe_mmap
gregkh/linux@0e6247e540bf IB/mlx4: Fix refcount leak in add_port() error path
gregkh/linux@9f05319149c1 RDMA/hns: Fix warning in poll cq direct mode
gregkh/linux@7d9fbee252f8 RDMA/hns: Fix log flood after cmd_mbox failure
gregkh/linux@5452b60cb1db RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup
gregkh/linux@171ef40fce41 PM: sleep: Use complete() in device_pm_sleep_init()
gregkh/linux@aeb8ca374990 MIPS: Fix big-endian stack argument fetching in o32 wrapper
gregkh/linux@7670a3a6ccaf MIPS: DEC: Remove do_IRQ() call indirection
gregkh/linux@f470166acec3 mips: ralink: mt7621: add missing __iomem
gregkh/linux@3cb25fb223b9 mips: n64: add _iomem for writel call
gregkh/linux@5dc96cd93818 jiffies: Define secs_to_jiffies()
gregkh/linux@d25dadf7423b driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout()
gregkh/linux@962eae1f30e5 driver core: Guard deferred probe timeout extension with delayed_work_pending()
gregkh/linux@59f526accb1d mtd: spi-nor: Drop duplicate Kconfig dependency
gregkh/linux@718f6a56b408 ALSA: seq: midi: Serialize output teardown with event_input
gregkh/linux@138cad07aa3b pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table
gregkh/linux@c40181ccd3fc pinctrl: cs42l43: Fix polarity on debounce
gregkh/linux@a43a9abc1ebf nvmet-tcp: fix page fragment cache leak in error path
gregkh/linux@bde4d6eb53f7 nvme-multipath: fix flex array size in struct nvme_ns_head
gregkh/linux@25246f6a5c53 workqueue: drop spurious '' from print_worker_info() fn declaration
gregkh/linux@952426a83ca7 ipv6: guard against possible NULL deref in __in6_dev_stats_get()
gregkh/linux@1387f252a242 net/sched: cls_bpf: prevent unbounded recursion in offload rollback
gregkh/linux@5db37fd7710e drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
gregkh/linux@cfa312e730d2 drm/tegra: gr2d/gr3d: Contain PM in the grd_probe/gr*d_remove
gregkh/linux@0e9dd7cfb998 gpu: host1x: Allow entries in BO caches to be freed
gregkh/linux@222c4693df4b drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
gregkh/linux@2a68928c4451 gpu: host1x: Fix iommu_map_sgtable() return value check
gregkh/linux@405ad0724778 drm/tegra: Fix iommu_map_sgtable() return value check
gregkh/linux@c67dab59f57b drm/nouveau/bios: specify correct display fuse register for Ampere and Ada
gregkh/linux@d57eb8122073 libbpf: Harden parse_vma_segs() path parsing
gregkh/linux@bbdfa44ae5c6 bpftool: Fix typo in struct_ops map FD generation for light skeleton
gregkh/linux@41855b7c9428 libbpf: Fix UAF in strset__add_str()
gregkh/linux@799e54c510a0 dax/kmem: account for partial discontiguous resource upon removal
gregkh/linux@3b5c66e922aa rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
gregkh/linux@a06eec15596e ocfs2: don't BUG_ON an invalid journal dinode
gregkh/linux@7f3b4046e6e5 ocfs2: kill osb->system_file_mutex lock
gregkh/linux@88c7e40721f1 crypto: hisilicon/qm - disable error report before flr
gregkh/linux@39547eda3a2f crypto: tegra - Fix dma_free_coherent size error
gregkh/linux@5cf0f624191c crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm
gregkh/linux@9a9054d7c3d2 sched/deadline: Always stop dl-server before changing parameters
gregkh/linux@593a86d8dbf4 sched/deadline: Reject debugfs dl_server writes for offline CPUs
gregkh/linux@5bb439f98efe drm/msm/dp: fix HPD state status bit shift value
gregkh/linux@bb10ddb1ce18 drm/msm/dp: Fix the ISR* enum values
gregkh/linux@cb35e82f9d85 EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info
gregkh/linux@3e07ea9579dc RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe
gregkh/linux@9fa785137303 RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
gregkh/linux@fa766e5e53ad media: qcom: venus: drop extra padding in NV12 raw size calculation
gregkh/linux@5ef9764ad2b0 media: qcom: venus: relax encoder frame/blur dimension steps on v4
gregkh/linux@34a45a67aab0 media: qcom: venus: relax encoder frame/blur step size on v6
gregkh/linux@4eaddd16c118 amba: use generic driver_override infrastructure
gregkh/linux@de54c2a9c1ba cdx: use generic driver_override infrastructure
gregkh/linux@d1cb12ae81d2 Drivers: hv: vmbus: use generic driver_override infrastructure
gregkh/linux@9ecce7ce29d0 rpmsg: use generic driver_override infrastructure
gregkh/linux@742e4afd247d md/raid10: reset read_slot when reusing r10bio for discard
gregkh/linux@7206752fedb7 ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback
gregkh/linux@62f6fc9479cf ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble
gregkh/linux@6b9221408467 NFSD: Fix delegation reference leak in nfsd4_revoke_states
gregkh/linux@2e73544ea405 ARM: imx3: Fix CCM node reference leak
gregkh/linux@fcfa8380e457 HID: wiimote: Fix table layout and whitespace errors
gregkh/linux@462306361c78 ata: libata: Fix ata_exec_internal()
gregkh/linux@b4eb859e8000 ARM: imx31: Fix IIM mapping leak in revision check
gregkh/linux@417918783bcf nvdimm/btt: Handle preemption in BTT lane acquisition
gregkh/linux@4902eece9239 scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"
gregkh/linux@695c0020ef12 scsi: pm8001: Fix error code in non_fatal_log_show()
gregkh/linux@063e608d549c scsi: ufs: Fix wrong value printed in unexpected UPIU response case
gregkh/linux@53649846e043 bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
gregkh/linux@7a5edef05a12 mm/fake-numa: fix under-allocation detection in uniform split
gregkh/linux@8d70b3973020 ext2: fix ignored return value of generic_write_sync()
gregkh/linux@dc2267965c72 sched: restore timer_slack_ns when resetting RT policy on fork
gregkh/linux@6987d31d3425 driver core: Use system_percpu_wq instead of system_wq
gregkh/linux@da48da09de85 tick/sched: Fix TOCTOU in nohz idle time fetch
gregkh/linux@5af9a1895cbd lib/test_meminit: use && for bools
gregkh/linux@9c747dcee164 configfs_lookup(): don't leave ->s_dentry dangling on failure
gregkh/linux@a76e389ebd16 drm/amdgpu: set sub_block_index for mca ras sub-blocks
gregkh/linux@856aedb47df0 bpftool: Use libbpf error code for flow dissector query
gregkh/linux@e11547100811 vhost: fix vhost_get_avail_idx for a non empty ring
gregkh/linux@3c4df1505730 perf/x86/amd/core: Always use the NMI latency mitigation
gregkh/linux@002820343b03 perf/x86/intel/uncore: Fix discovery unit lookup for multi-die systems
gregkh/linux@349ec4bdaef5 perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains
gregkh/linux@7c30d7f1ba65 xfrm: fix NAT-related field inheritance in SA migration
gregkh/linux@e29da2a4d9a3 drm/amdkfd: always resume_all after suspend_all
gregkh/linux@8614a8f7e81e ocfs2: rebase copied fsdlm LVB pointers in locking_state
gregkh/linux@61f7a5acb3bf ocfs2: fix buffer head management in ocfs2_read_blocks()
gregkh/linux@06c0a0431b98 ocfs2: reject FITRIM ranges shorter than a cluster
gregkh/linux@9c81c1a61a52 ocfs2/dlm: require a ref for locking_state debugfs open
gregkh/linux@7174ab5c8d1d ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()
gregkh/linux@8b1fcf69cd0d netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
gregkh/linux@37aac171aab5 netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags
gregkh/linux@e5eec2bc23b0 netfilter: synproxy: drop packets if timestamp adjustment fails
gregkh/linux@b310786a060c netfilter: synproxy: adjust duplicate timestamp options
gregkh/linux@2b8e7aaa3800 netfilter: synproxy: fix unaligned memory access in timestamp adjustment
gregkh/linux@d3365731187c netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
gregkh/linux@61eab1d0237e netfilter: conntrack: revert ct extension genid infrastructure
gregkh/linux@ff8fde13457e netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
gregkh/linux@374a1f56e534 IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path()
gregkh/linux@d566002de555 RDMA/irdma: Fix OOB read during CQ MR registration
gregkh/linux@51564994f108 RDMA/irdma: Initialize iwmr->access during MR registration
gregkh/linux@7d1772222de9 arm64: dts: imx95: Correct PCIe outbound address space configuration
gregkh/linux@bb4890b3c9f2 arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well
gregkh/linux@b28d513393f8 RDMA/siw: Fix endpoint/socket association handling
gregkh/linux@67acab689821 bpf: Check tail zero of bpf_prog_info
gregkh/linux@4b4cd3d2f1f6 bpf: Update transport_header when encapsulating UDP tunnel in lwt
gregkh/linux@15545ee71301 wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
gregkh/linux@23d210877968 wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
gregkh/linux@d0b57bcd0dac wifi: wcn36xx: fix OOB read from short trigger BA firmware response
gregkh/linux@58b2f865bb5a ALSA: seq: Fix partial userptr event expansion
gregkh/linux@418423a0750e riscv: cpu_ops: Change return value type of cpu_is_stopped() to bool
gregkh/linux@8b7601303847 riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe
gregkh/linux@6b52211eba21 ALSA: seq: Clear variable event pointer on read
gregkh/linux@d8707f55bcef ACPI: IPMI: Fix message kref handling on dead device
gregkh/linux@3e368ba51309 cpufreq: Documentation: fix conservative governor freq_step description
gregkh/linux@b83df128afe0 thermal: testing: reject missing command arguments
gregkh/linux@f393f13fea90 IB/mlx5: Don't take the rereg_mr fallback without a new translation
gregkh/linux@eb7cb798e563 IB/mlx5: Properly support implicit ODP rereg_mr
gregkh/linux@bc0bb1efce52 spi: ep93xx: fix double-free of zeropage on DMA setup failure
gregkh/linux@0a5ff4000dd7 ASoC: amd: acp-sdw-sof: Bound DAI link iteration
gregkh/linux@a5b2a68a391b firmware_loader: Fix recursive lock in device_cache_fw_images()
gregkh/linux@459860529c10 configfs: fix lockless traversals of ->s_children
gregkh/linux@e690afea5c87 watchdog: unregister PM notifier on watchdog unregister
gregkh/linux@cd41a7609161 scsi: target: Fix hexadecimal CHAP_I handling
gregkh/linux@0afeb9e8c3f8 scsi: target: Remove tcm_loop target reset handling
gregkh/linux@6dd67f709cf7 pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39
gregkh/linux@622796f3f10a pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39
gregkh/linux@a1bca6b69bd9 vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
gregkh/linux@d9a76eb5c879 hwspinlock: qcom: avoid uninitialized struct members
gregkh/linux@29cf3b31e8cc sched/fair: Fix cpu_util runnable_avg arithmetic
gregkh/linux@94b68abf4b84 wifi: mt76: mt7925: clean up DMA on probe failure
gregkh/linux@9b591c05d409 wifi: mt76: mt7925: fix stale pointer comparisons in change_vif_links
gregkh/linux@de0a9894363a wifi: mt76: mt7925: keep TX BA state in the primary WCID
gregkh/linux@48852732af0d wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX
gregkh/linux@0c7249e7780c wifi: mt76: fix argument to ieee80211_is_first_frag()
gregkh/linux@d032d66cc807 wifi: mt76: mt7915: fix potential tx_retries underflow
gregkh/linux@aa74971e74b6 wifi: mt76: mt7921: fix potential tx_retries underflow
gregkh/linux@f5e4e1e1ef16 wifi: mt76: mt7925: fix potential tx_retries underflow
gregkh/linux@6638c0528573 wifi: mt76: mt7996: fix potential tx_retries underflow
gregkh/linux@ba9fa2ff5981 btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
gregkh/linux@9057e3f5db39 fbdev: sm501fb: Fix buffer errors in OF binding code
gregkh/linux@a3ba6422e911 hwmon: (it87) Clamp negative values to zero in set_fan()
gregkh/linux@115b22bf45cf btrfs: zoned: don't account data relocation space-info in statfs free space
gregkh/linux@06283034cec0 btrfs: fix deadlock cloning inline extent when using flushoncommit
gregkh/linux@68593e5dc3db IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified
gregkh/linux@7ed62f7040ee NFSD: Handle layout stid in nfsd4_drop_revoked_stid()
gregkh/linux@d3c57f41bfa8 spi: meson-spifc: fix runtime PM leak on remove
gregkh/linux@894fa40df71e ASoC: codecs: aw88261: fix incorrect masks for boost regs
gregkh/linux@d94e2947203a vduse: hold vduse_lock across IDR lookup in open path
gregkh/linux@bbba4f925152 vhost/vdpa: validate virtqueue index in mmap and fault paths
gregkh/linux@0531c635cef5 virtio_console: read size from config space during device init
gregkh/linux@55378bb873fe vduse: Requeue failed read to send_list head
gregkh/linux@a9f8a1d2e3ff vhost/net: complete zerocopy ubufs only once
gregkh/linux@e19615dc34d2 tools/virtio: check mmap return value in vringh_test
gregkh/linux@6e950ebc7da4 vdpa/octeon_ep: Fix PF->VF mailbox data address calculation
gregkh/linux@abf04414e969 ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
gregkh/linux@33d7b4c5ed7e ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails
gregkh/linux@ee734e00d0b5 bonding: 3ad: fix mux port state on oper down
gregkh/linux@9808ae9fae99 ext4: fix kernel BUG in ext4_write_inline_data_end
gregkh/linux@74796e886ca3 ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
gregkh/linux@e37a04bece6b selftests/bpf: Fix bpf_iter/task_vma test
gregkh/linux@0ea28545ae4f cxl/test: Fix integer overflow in mock LSA bounds checks
gregkh/linux@4bbf63bae89c cxl/test: Zero out LSA backing memory to avoid leaking to user
gregkh/linux@120cdfa13784 of: cpu: add check in __of_find_n_match_cpu_property()
gregkh/linux@6465af0004dc vfio/qat: fix f_pos race in qat_vf_resume_write()
gregkh/linux@9ca06849c423 bpf: Tighten cgroup storage cookie checks for prog arrays
gregkh/linux@a799ca909617 ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset()
gregkh/linux@7813df1e4c85 s390/process: Fix kernel thread function pointer type
gregkh/linux@a209744230f9 Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device
gregkh/linux@09301f1fdf2a Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
gregkh/linux@48c7ad6afcc5 Bluetooth: hci_core: Fix UAF in hci_unregister_dev()
gregkh/linux@2643524743b9 Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
gregkh/linux@f2ad01f55e07 Bluetooth: hci: validate codec capability element length
gregkh/linux@5bfca25c0573 Bluetooth: vhci: validate devcoredump state before side effects
gregkh/linux@43790a05ac01 fs: efs: remove unneeded debug prints
gregkh/linux@493efc1508d2 RDMA/mlx5: Remove DCT restrack tracking
gregkh/linux@ae06ea361c4b RDMA/mlx5: Remove raw RSS QP restrack tracking
gregkh/linux@42f3d2c8c18b RDMA/mlx5: Fix undefined shift of user RQ WQE size
gregkh/linux@6f83de384ca5 RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
gregkh/linux@7f02e9064b6f ASoC: codecs: hdac_hdmi: Validate written enum value
gregkh/linux@b36d6d48faa6 ASoC: fsl: fsl_audmix: Validate written enum values
gregkh/linux@f67d63628fe1 ASoC: tegra: tegra210_ahub: Validate written enum value
gregkh/linux@562a838a689b net: dsa: qca8k: fix led devicename when using external mdio bus
gregkh/linux@fb31fbe51c23 net/sched: cls_flow: Dont expose folded kernel pointers
gregkh/linux@1fbc6c6efe78 net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
gregkh/linux@b42aeb58317f bridge: cfm: reject invalid CCM interval at configuration time
gregkh/linux@92e4adfee56f sctp: validate embedded address parameter length
gregkh/linux@56b4ad500fd1 net: pfcp: allocate per-cpu tstats for PFCP netdevs
gregkh/linux@9221a594c72a net/sched: sch_hfsc: Don't make class passive twice
gregkh/linux@c9668a4adb22 tipc: require net admin for TIPCv2 netlink mutators
gregkh/linux@b44bebdd32c9 tipc: prevent snt_unacked underflow on CONN_ACK
gregkh/linux@581ef56e5c34 tipc: reject inverted service ranges from peer bindings
gregkh/linux@40f1ea795322 cxl/test: Unregister cxl_acpi in cxl_test_init() error path
gregkh/linux@121c41a01e38 cxl/test: Add check after kzalloc() memory in alloc_mock_res()
gregkh/linux@6c721a3e4334 crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
gregkh/linux@3b8a1e1f4e40 crypto: cavium/cpt - fix DMA cleanup using wrong loop index
gregkh/linux@c9401353e9e2 crypto: rng - Free default RNG on module exit
gregkh/linux@93d260ce43a8 ALSA: seq: Fix kernel heap address leak in bounce_error_event()
gregkh/linux@d7ccd8736b67 spi: xilinx: use FIFO occupancy register to determine buffer size
gregkh/linux@cbc4dd5ed0c8 ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO
gregkh/linux@fefc9dad30d5 power: supply: core: fix supplied_from allocations
gregkh/linux@b6557f912509 handshake: Require admin permission for DONE command
gregkh/linux@7c09843fd2b4 net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
gregkh/linux@e4615aa6bb78 net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
gregkh/linux@a493cbb6b11a net: mana: initialize gdma queue id to INVALID_QUEUE_ID
gregkh/linux@a6c75d4856a1 net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check
gregkh/linux@b6d79102894a net: ethernet: mtk_wed: fix loading WO firmware for MT7986
gregkh/linux@c9b4f1f55caf bpf: Run generic devmap egress prog on private skb
gregkh/linux@40835e7a765c net/mlx5: Check max_macs devlink param value against max capability
gregkh/linux@de8e3a4004c5 octeontx2-af: npc: Fix size of entry2cntr_map
gregkh/linux@e850eca5fde3 net: ethernet: mtk_wed: debugfs: correct index in wed_amsdu_show()
gregkh/linux@112490467586 net: wwan: t7xx: check skb_clone in control TX
gregkh/linux@667de95020f0 dpll: add reference-sync netlink attribute
gregkh/linux@40466ea1827c dpll: add reference sync get/set
gregkh/linux@57bcd4ed9845 dpll: Allow associating dpll pin with a firmware node
gregkh/linux@ad8c223f505c dpll: Add notifier chain for dpll events
gregkh/linux@1bcca4ad43b3 dpll: Support dynamic pin index allocation
gregkh/linux@eb6c4dacb834 dpll: Enhance and consolidate reference counting logic
gregkh/linux@39e839cdd833 dpll: fix stale iteration in dpll_pin_on_pin_unregister()
gregkh/linux@a4bf8c14f48f dpll: send delete notification before unregister in on-pin rollback
gregkh/linux@1f053dc52d2b dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister()
gregkh/linux@b677debec03c dpll: guard sync-pair removal on full pin unregister
gregkh/linux@690e9839e49f dpll: balance create/delete notifications in _dpll_pin(un)register
gregkh/linux@50a51c152a86 landlock: Fix unmarked concurrent access to socket family
gregkh/linux@0706d5223ab0 net: bcmgenet: Use weighted round-robin TX DMA arbitration
gregkh/linux@11faefd11ce2 kcm: use WRITE_ONCE() when changing lower socket callbacks
gregkh/linux@0bf7be751e41 netfilter: nf_conncount: callers must hold rcu read lock
gregkh/linux@7e398956a78b ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
gregkh/linux@3baedc9b2f53 cifs: remove all cifs files before kill super
gregkh/linux@269e613d7208 smb/client: always return a value for FS_IOC_GETFLAGS
gregkh/linux@6fa7f01b0aba selftests/bpf: Fix typo in verify_umulti_link_info
gregkh/linux@524edf133f61 selftests/bpf: Initialize operation name before use
gregkh/linux@ba3cdbc3c0ba bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
gregkh/linux@ad9d4caddbde udf: fix nls leak on udf_fill_super() failure
gregkh/linux@db77b6bb6e6e bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
gregkh/linux@17eb9832a10d bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
gregkh/linux@431812eb88c2 MIPS: mm: Fix out-of-bounds write in maar_res_walk()
gregkh/linux@b89477077c83 powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del
gregkh/linux@86f9add33a04 powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down
gregkh/linux@46dee55efef2 powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus
gregkh/linux@3b2d1457d724 KEYS: Use acquire when reading state in keyring search
gregkh/linux@aef12b5ce793 tipc: fix UAF in tipc_l2_send_msg()
gregkh/linux@8e6214a530c0 tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
gregkh/linux@4137e7f9b80f net: airoha: Introduce ndo_select_queue callback
gregkh/linux@e99fe426a842 net: airoha: Add sched ETS offload support
gregkh/linux@e873ad740863 net: airoha: Fix always-true condition in PPE1 queue reservation loop
gregkh/linux@31d106202e40 net: ethernet: oa_tc6: Remove FCS size in RX frame
gregkh/linux@f1f696370be7 ionic: Fix check in ionic_get_link_ext_stats
gregkh/linux@79c7c59bb519 ksmbd: fix use-after-free in same_client_has_lease()
gregkh/linux@44b41a31afc2 mfd: rsmu: Fix page register setup
gregkh/linux@197a4c54d8a9 mfd: cs42l43: Sanity check firmware size
gregkh/linux@ff187c502b39 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
gregkh/linux@151f8cf5b23d net/9p: fix race condition on rdma->state in trans_rdma.c
gregkh/linux@209edc5f691d eventpoll: expand top-of-file overview / locking doc
gregkh/linux@6371e74a665f eventpoll: rename attach_epitem() to ep_attach_file()
gregkh/linux@4de8ff51c59e eventpoll: split ep_insert() into alloc + register stages
gregkh/linux@c3c2f5867ec9 eventpoll: extract ep_deliver_event() from ep_send_events()
gregkh/linux@d52a7b956297 eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers
gregkh/linux@485dff8d0ec2 eventpoll: rename epi->next and txlist for clarity
gregkh/linux@fe8cd66f1dea eventpoll: Fix epoll_wait() report false negative
gregkh/linux@229cb9f2469b gpiolib: acpi: Only trigger ActiveBoth interrupts on boot
gregkh/linux@f19a5bc05905 staging: nvec: fix use-after-free in nvec_r...