UPDATE: 6.6.145

[fepitre-bot]

Update to 6.6.145

Details

Changes since previous version:
gregkh/linux@bb51b626b5a8 ia64: Make acpi_cpufreq_cpu_exit return void
gregkh/linux@c39973ebd732 bpf, arm64: Reject out-of-range B.cond targets
gregkh/linux@48a586e382e4 nfsd: release layout stid on setlease failure
gregkh/linux@666e837b247f nfsd: reset write verifier on deferred writeback errors
gregkh/linux@dd699a60a29e ext4: get rid of ppath in get_ext_path()
gregkh/linux@1fa22de588a6 LoongArch: Report dying CPU to RCU in stop_this_cpu()
gregkh/linux@eae5bb7c0c16 Bluetooth: btmtk: apply the common btmtk_fw_get_filename
gregkh/linux@1c770a550df2 Bluetooth: btusb: mediatek: reset the controller before downloading the fw
gregkh/linux@6b6d985e7a88 Bluetooth: btusb: mediatek: add MT7922 subsystem reset
gregkh/linux@6501b6012966 Bluetooth: btusb: mediatek: remove the unnecessary goto tag
gregkh/linux@9eca71da3b84 Bluetooth: btusb: mediatek: return error for failed reg access
gregkh/linux@f344a2d77d47 Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c
gregkh/linux@51c4b6e9c0e5 Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.
gregkh/linux@9440a6980fc6 Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown
gregkh/linux@5f4dbdb0a875 userfaultfd: gate must_wait writability check on pte_present()
gregkh/linux@f6290849b88a perf: Fix dangling cgroup pointer in cpuctx backport
gregkh/linux@ade787f04790 Bluetooth: btmtk: Fix btmtk.c undefined reference build error
gregkh/linux@da82ec28a0cf slimbus: qcom-ngd-ctrl: Fix probe error path ordering
gregkh/linux@e43819a198b5 slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
gregkh/linux@c75f153e5d54 slimbus: Convert to platform remove callback returning void
gregkh/linux@290014c79876 slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
gregkh/linux@c717f052d702 drm/amd: Fix set but not used warnings
gregkh/linux@e54c05ed3d9c net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
gregkh/linux@f0b4e1cc8ad7 device property: initialize the remaining fields of fwnode_handle in fwnode_init()
gregkh/linux@d2f236196d54 f2fs: validate orphan inode entry count
gregkh/linux@7d3ae21783e5 f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
gregkh/linux@76e1a05cf6d4 f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
gregkh/linux@345c1d1ff751 f2fs: fix potential deadlock in f2fs_balance_fs()
gregkh/linux@1436031b33fa f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
gregkh/linux@2770041f34b5 f2fs: fix listxattr handling of corrupted xattr entries
gregkh/linux@92fc631b69de KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
gregkh/linux@1a02a5028bd6 block: Avoid mounting the bdev pseudo-filesystem in userspace
gregkh/linux@055aff407db5 i2c: core: fix irq domain leak on adapter registration failure
gregkh/linux@2f8a894e148a i2c: core: fix hang on adapter registration failure
gregkh/linux@ad4322d84ebf i2c: core: fix NULL-deref on adapter registration failure
gregkh/linux@4a0034756c2a i2c: core: fix adapter debugfs creation
gregkh/linux@da9d8d9711f7 i2c: core: fix adapter registration race
gregkh/linux@a7a526fbc847 fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
gregkh/linux@eeabb9020721 NFSv4/flexfiles: reject zero filehandle version count
gregkh/linux@655349816642 nfsd: Don't reset the write verifier on a commit EAGAIN
gregkh/linux@42726c616d95 apparmor: advertise the tcp fast open fix is applied
gregkh/linux@2a8ff394907f nfsd: move name lookup out of nfsd4_list_rec_dir()
gregkh/linux@f59f8c2addba nfsd: change nfs4_client_to_reclaim() to allocate data
gregkh/linux@1f1fe94e0c72 net: team: rename team to team_core for linking
gregkh/linux@7cf5a74558e3 net, team, bonding: Add netdev_base_features helper
gregkh/linux@4a85b335f870 bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
gregkh/linux@3b2bd2018938 bonding: add ESP offload features when slaves support
gregkh/linux@ed976725dba3 bonding: Correctly support GSO ESP offload
gregkh/linux@a1d397dbc00a net: add a common function to compute features for upper devices
gregkh/linux@8d5c8ac64455 bonding: use common function to compute the features
gregkh/linux@4128ccd7683f bonding: fix xfrm offload feature setup on active-backup mode
gregkh/linux@5d0fb9806ab6 bonding: fix type confusion in bond_setup_by_slave()
gregkh/linux@9532d0d0ad1d bonding: prevent potential infinite loop in bond_header_parse()
gregkh/linux@420e5aad7ba8 team: fix header_ops type confusion with non-Ethernet ports
gregkh/linux@9af37d8be0fb mm/vmscan: flush deferred TLB before freeing large folios
gregkh/linux@9395d11f6341 xfs: recreate work items when recovering intent items
gregkh/linux@ce9d7f9188f1 xfs: dump the recovered xattri log item if corruption happens
gregkh/linux@5e327f772ca8 xfs: use xfs_defer_finish_one to finish recovered work items
gregkh/linux@a444c3de7187 xfs: move ->iop_recover to xfs_defer_op_type
gregkh/linux@927ef409f713 Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
gregkh/linux@140133dac0ae perf trace beauty fcntl: Fix build with older kernel headers
gregkh/linux@2fb80e962029 ACPI: CPPC: Suppress UBSAN warning caused by field misuse
gregkh/linux@a44343fe230a ACPI: NFIT: core: Fix possible NULL pointer dereference
gregkh/linux@4cdb1b3ab96e perf/core: Detach event groups during remove_on_exec
gregkh/linux@f35e5399c97b Revert "crypto: talitos - rename first/last to first_desc/last_desc"
gregkh/linux@7c3ba8f490f5 Revert "crypto: talitos - fix SEC1 32k ahash request limitation"
gregkh/linux@1981cde2f0be crypto: talitos - stop using crypto_ahash::init
gregkh/linux@22e2db16c801 crypto: talitos - fix SEC1 32k ahash request limitation
gregkh/linux@5b8729416ee8 crypto: talitos - rename first/last to first_desc/last_desc
gregkh/linux@d087272c49aa arm64: sysreg: Add layout for ID_AA64MMFR4_EL1
gregkh/linux@4f25422239d0 arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative
gregkh/linux@153ed820d525 arm64: Fix early handling of FEAT_E2H0 not being implemented
gregkh/linux@a2c343370351 KVM: arm64: Initialize HCR_EL2.E2H early
gregkh/linux@6e5714bcc98f KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu()
gregkh/linux@804e2e41641b arm64: Revamp HCR_EL2.E2H RES1 detection
gregkh/linux@dbab796ff380 arm64: sysreg: Correct sign definitions for EIESB and DoubleLock
gregkh/linux@865a048a3f5a virtio_net: Support dynamic rss indirection table size
gregkh/linux@b0b39425b520 LoongArch: Add PIO for early access before ACPI PCI root register
gregkh/linux@cd2463ec60f0 net: Drop the lock in skb_may_tx_timestamp()
gregkh/linux@e1919d026706 MIPS: smp: report dying CPU to RCU in stop_this_cpu()
gregkh/linux@caea8b120604 usb: gadget: function: rndis: add length check to response query
gregkh/linux@d6ef5af7d0fe usb: gadget: function: rndis: add length check for header
gregkh/linux@bfffc98f3de9 iio: accel: bmc150: clamp the device-reported FIFO frame count
gregkh/linux@36154171385a iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
gregkh/linux@820c4f15353e iio: adc: lpc32xx: Initialize completion before requesting IRQ
gregkh/linux@f3f90bc7b38b iio: adc: spear: Initialize completion before requesting IRQ
gregkh/linux@030fb8481647 iio: adc: ti-ads124s08: Return reset GPIO lookup errors
gregkh/linux@b131f0011dfe iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
gregkh/linux@0d4a646d7f87 iio: event: Fix event FIFO reset race
gregkh/linux@8d202515baea iio: gyro: bmg160: bail out when bandwidth/filter is not in table
gregkh/linux@5240dd5cf02b iio: gyro: bmg160: wait full startup time after mode change at probe
gregkh/linux@5a62be142e28 iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
gregkh/linux@00982b61d026 iio: imu: inv_icm42600: fix timestamp clock period by using lower value
gregkh/linux@34d9d5c81e9d iio: imu: st_lsm6dsx: deselect shub page before reading whoami
gregkh/linux@06158c241f9a iio: light: al3010: fix incorrect scale for the highest gain range
gregkh/linux@f350883989ce iio: light: gp2ap002: fix runtime PM leak on read error
gregkh/linux@140117813afd iio: light: opt3001: fix missing state reset on timeout
gregkh/linux@4337683a3639 iio: light: tsl2591: return actual error from probe IRQ failure
gregkh/linux@664376579d1f iio: light: veml6030: fix channel type when pushing events
gregkh/linux@ae73df471a83 iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
gregkh/linux@46a2cbf57dc3 iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
gregkh/linux@c31679fedfed ALSA: virtio: Add missing 384 kHz PCM rate mapping
gregkh/linux@91095474eea2 ALSA: ymfpci: check snd_ctl_new1() return value
gregkh/linux@05df59b9a61f ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
gregkh/linux@8825a06bfa79 ALSA: cmipci: check snd_ctl_new1() return value
gregkh/linux@7531a37720c2 ALSA: es1938: check snd_ctl_new1() return value
gregkh/linux@3ed2fa1ed8cc ALSA: firewire: isight: bound the sample count to the packet payload
gregkh/linux@eccf8e91266e ALSA: gus: check snd_ctl_new1() return value
gregkh/linux@69bf1dfa3215 ALSA: ice1712: check snd_ctl_new1() return value
gregkh/linux@ea672a9f6cc3 ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
gregkh/linux@a47ecd904c51 ALSA: usb-audio: avoid kobject path lookup in DualSense match
gregkh/linux@29dc393ab69b ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
gregkh/linux@a851636ef95a ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
gregkh/linux@b31c5faf77cd ALSA: usb-audio: Roll back quirk control caches on write errors
gregkh/linux@73178209f2fe ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
gregkh/linux@90310e29ca74 ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
gregkh/linux@28f92b8d3fef vfio/pci: Use a private flag to prevent power state change with VFs
gregkh/linux@654710ef3135 vfio/pci: Latch disable_idle_d3 per device
gregkh/linux@9e0a3f642e60 vfio/pci: Release the VGA arbiter client on register_device() failure
gregkh/linux@08b74e320c7a vfio/pci: Fix racy bitfields and tighten struct layout
gregkh/linux@8e872c07e40d vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
gregkh/linux@9cc0350f2677 Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
gregkh/linux@e6313b800da6 Bluetooth: btusb: fix use-after-free on registration failure
gregkh/linux@6e1b10df890f Bluetooth: btusb: fix use-after-free on marvell probe failure
gregkh/linux@7370cb0dccd6 Bluetooth: btusb: fix wakeup source leak on probe failure
gregkh/linux@faa070c7ad8b binder: fix UAF in binder_thread_release()
gregkh/linux@45df558c543b binder: fix UAF in binder_free_transaction()
gregkh/linux@10666ac9c552 usb: xhci: Fix sleep in atomic context in xhci_free_streams()
gregkh/linux@ce2e36e8759d usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
gregkh/linux@b8189e8b0343 PCI: altera: Do not dispose parent IRQ mapping
gregkh/linux@0f90c4fadef8 PCI: host-common: Request bus reassignment when not probe-only
gregkh/linux@74fef68d5211 mm/damon/ops-common: handle extreme intervals in damon_hot_score()
gregkh/linux@96fbafc20ebd netfilter: ipset: fix race between dump and ip_set_list resize
gregkh/linux@74a4cac9603d virtio-mmio: fix device release warning on module unload
gregkh/linux@fde19b0d4eea hwrng: virtio: clamp device-reported used.len at copy_data()
gregkh/linux@6c82f88bc7a8 USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
gregkh/linux@5e5798880eb1 usb: dwc3: run gadget disconnect from sleepable suspend context
gregkh/linux@a8e3a9471113 6lowpan: fix NHC entry use-after-free on error path
gregkh/linux@9a51115fcdc7 tipc: fix out-of-bounds read in broadcast Gap ACK blocks
gregkh/linux@adc8b9c30d71 staging: vme_user: bound slave read/write to the kern_buf size
gregkh/linux@573e502d1471 smb: client: restrict implied bcc[0] exemption to responses without data area
gregkh/linux@0471a3c72532 staging: vme_user: fix location monitor leak in fake bridge
gregkh/linux@eef048dd77eb staging: vme_user: fix location monitor leak in tsi148 bridge
gregkh/linux@b7da3b9f7c3c media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
gregkh/linux@85263739e810 staging: media: atomisp: reduce load_primary_binaries() stack usage
gregkh/linux@5d7812360abf staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
gregkh/linux@1f6c9d255bdd staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
gregkh/linux@0406d746574e staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
gregkh/linux@9193c34f75fd staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
gregkh/linux@4c21eec80cf5 staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
gregkh/linux@6f26cc55affd staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
gregkh/linux@bb3b942da412 staging: rtl8723bs: fix OOB write in HT_caps_handler()
gregkh/linux@f30e2b879bda crypto: amlogic - avoid double cleanup in meson_crypto_probe()
gregkh/linux@b8e274e69ab0 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
gregkh/linux@273c06b81d2e net: af_key: initialize alg_key_len for IPComp states
gregkh/linux@7ff42312ccde audit: Fix data races of skb_queue_len() readers on audit_queue
gregkh/linux@caed4a96d557 Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
gregkh/linux@d663fbf28b2e debugobjects: Plug race against a concurrent OOM disable
gregkh/linux@946046841013 fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
gregkh/linux@1dba8444ac01 NTB: epf: Avoid calling pci_irq_vector() from hardirq context
gregkh/linux@19d63fd52871 gpio: eic-sprd: use raw_spinlock_t in the irq startup path
gregkh/linux@ea61b04e1d72 io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
gregkh/linux@76d030ac95e1 ipv4: igmp: remove multicast group from hash table on device destruction
gregkh/linux@e81f805824a8 net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
gregkh/linux@729ae27dc250 mfd: cros_ec: Delay dev_set_drvdata() until probe success
gregkh/linux@09d2407985b8 mm: shrinker: fix NULL pointer dereference in debugfs
gregkh/linux@e44f78f5f058 netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
gregkh/linux@d2367d99f245 netfilter: ebtables: module names must be null-terminated
gregkh/linux@2664f537ca5b netfilter: ebtables: terminate table name before find_table_lock()
gregkh/linux@466540e045d0 Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
gregkh/linux@ae215c5b6422 Bluetooth: bnep: pin L2CAP connection during netdev registration
gregkh/linux@21e60eb4d958 Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
gregkh/linux@c66a95e60b65 Bluetooth: fix UAF in bt_accept_dequeue()
gregkh/linux@98d93c226bdf Bluetooth: L2CAP: validate option length before reading conf opt value
gregkh/linux@caa36a91c9c5 fs/ntfs3: fsync files by syncing parent inodes
gregkh/linux@92300ac7ff17 fs/ntfs3: handle attr_set_size() errors when truncating files
gregkh/linux@3ca13af5a400 fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
gregkh/linux@ea59d9dbc550 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
gregkh/linux@38dbc8db8341 coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
gregkh/linux@aa37f5fef78d smb/client: Fix error code in smb2_aead_req_alloc()
gregkh/linux@620d133d4692 ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
gregkh/linux@3072d82461f4 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
gregkh/linux@2a64dbf9c739 ksmbd: serialize QUERY_DIRECTORY requests per file
gregkh/linux@7703fd9aba1f ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
gregkh/linux@67bdad9cf01b ksmbd: require source read access for duplicate extents
gregkh/linux@e6aa731f1b4b ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
gregkh/linux@b35afd5cf8fa ksmbd: run set info with opener credentials
gregkh/linux@288a4abc16fe ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
gregkh/linux@2b9d2a370d63 ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
gregkh/linux@f08b3f451f12 ksmbd: use opener credentials for delete-on-close
gregkh/linux@3409aedf3c81 smb: client: fix query directory replay double-free
gregkh/linux@100fb7c455fa smb: client: fix query_info() replay double-free
gregkh/linux@0be4bc64882e smb: client: fix double-free in SMB2_ioctl() replay
gregkh/linux@5821f9dbb8b5 smb: client: fix change notify replay double-free
gregkh/linux@6e27f40b682a smb: client: fix double-free in SMB2_flush() replay
gregkh/linux@02bc2896bdc3 smb: client: fix double-free in SMB2_open() replay
gregkh/linux@037511726228 smb: client: fix double-free in SMB2_close() replay
gregkh/linux@9136a08dc293 smb: client: Fix next buffer leak in receive_encrypted_standard()
gregkh/linux@b72309777559 smb: client: use unaligned reads in parse_posix_ctxt()
gregkh/linux@0de5b8e76847 smb: client: harden POSIX SID length parsing
gregkh/linux@08c600b7e181 smb: client: mask server-provided mode to 07777 in modefromsid
gregkh/linux@f0776d142e53 OPP: of: Fix potential memory leak in opp_parse_supplies()
gregkh/linux@46d403da376a firmware_loader: fix device reference leak in firmware_upload_register()
gregkh/linux@069ae9502f27 cpufreq: intel_pstate: Sync policy->cur during CPU offline
gregkh/linux@860aaff72c84 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
gregkh/linux@73255d702c75 cpufreq: Fix hotplug-suspend race during reboot
gregkh/linux@982c9f92d57b cpufreq: pcc: fix use-after-free and double free in OSC evaluation
gregkh/linux@e5ffc638faf5 posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
gregkh/linux@9638d3d28f9f clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
gregkh/linux@459b3a373d19 X.509: Fix validation of ASN.1 certificate header
gregkh/linux@d2468e241af4 tools/mm/slabinfo: Fix trace disable logic inversion
gregkh/linux@5b535bde893f tools/mm/slabinfo: fix total_objects attribute name
gregkh/linux@1a1ebdcb56ae HID: wacom: stop hardware after post-start probe failures
gregkh/linux@523db788c0f8 HID: letsketch: fix UAF on inrange_timer at driver unbind
gregkh/linux@33cd1a000daf HID: lg-g15: cancel pending work on remove to fix a use-after-free
gregkh/linux@798d762a5e55 HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
gregkh/linux@16ca053c2be5 hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
gregkh/linux@286f77d002a3 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
gregkh/linux@0fed0fc34ce7 media: mtk-jpeg: cancel workqueue on release for supported platforms only
gregkh/linux@960b29769c90 xfs: use null daddr for unset first bad log block
gregkh/linux@2c590972a273 xfs: fix unreachable BIGTIME check in dquot flush validation
gregkh/linux@bccbab36ff22 bpf: Reject fragmented frames in devmap
gregkh/linux@702d75f1a602 bpf: Restore sysctl new-value from 1 to 0
gregkh/linux@46ab32870d01 net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
gregkh/linux@19d9ff2b423d usb: cdc_acm: Add quirk for Uniden BC125AT scanner
gregkh/linux@fde3c095e1d4 usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
gregkh/linux@dd338e4ffa7f USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
gregkh/linux@164a96603503 usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
gregkh/linux@be5004395dfd usb: free iso schedules on failed submit
gregkh/linux@56add2b9b2e8 usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
gregkh/linux@7a5214dae906 usb: gadget: udc: Fix use-after-free in gadget_match_driver
gregkh/linux@75c0ad13e136 usb: gadget: f_printer: take kref only for successful open
gregkh/linux@60fc5ef4ecea USB: idmouse: fix use-after-free on disconnect race
gregkh/linux@02ca08fff74c USB: ldusb: fix use-after-free on disconnect race
gregkh/linux@164398601a7f USB: iowarrior: fix use-after-free on disconnect
gregkh/linux@9b40d283ac2a USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
gregkh/linux@0b57e5ddbd89 USB: legousbtower: fix use-after-free on disconnect race
gregkh/linux@bb545c4dd22a usb: sl811-hcd: disable controller wakeup on remove
gregkh/linux@6a935158d01f USB: storage: include US_FL_NO_SAME in quirks mask
gregkh/linux@0b3073f40cc9 USB: misc: uss720: unregister parport on probe failure
gregkh/linux@4183874b7925 usb: mtu3: unmap request DMA on queue failure
gregkh/linux@2f7a6b8ab384 USB: serial: keyspan_pda: fix information leak
gregkh/linux@64a115456397 USB: serial: option: add Telit Cinterion FE990D50 compositions
gregkh/linux@8d50a910194f USB: serial: digi_acceleport: fix broken rx after throttle
gregkh/linux@bcfeae431db9 USB: serial: digi_acceleport: fix hard lockup on disconnect
gregkh/linux@699dfb691750 USB: serial: digi_acceleport: fix write buffer corruption
gregkh/linux@5c098f20f15d USB: ulpi: fix memory leak on registration failure
gregkh/linux@0b0651f8ed4f USB: usb-storage: ene_ub6250: restore media-ready check
gregkh/linux@5bd3654a778b usbip: tools: support SuperSpeedPlus devices
gregkh/linux@d0ebf9cc7c2d usbip: vudc: fix NULL deref in vep_dequeue()
gregkh/linux@58b26ba69300 usb: typec: anx7411: use devm_pm_runtime_enable()
gregkh/linux@a82450bcb7ae usb: typec: class: drop PD lookup reference
gregkh/linux@012406f89abc usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
gregkh/linux@0195c30c77e3 usb: typec: ucsi: Invert DisplayPort role assignment
gregkh/linux@af040c5b300c usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
gregkh/linux@c32df1114782 usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
gregkh/linux@97a5da403566 usb: typec: ucsi: cancel pending work on system suspend
gregkh/linux@edcbc218c39f iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
gregkh/linux@7f91201b1e48 PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
gregkh/linux@fb49099206c5 udf: validate free block extents against the partition length
gregkh/linux@bb0d384c1f42 udf: validate VAT header length against the VAT inode size
gregkh/linux@7285276aa50d udf: validate sparing table length as an entry count, not a byte count
gregkh/linux@93dfe94d5567 hwrng: jh7110 - fix refcount leak in starfive_trng_read()
gregkh/linux@ee4465a245c1 dm-ioctl: report an error if a device has no table
gregkh/linux@be5e5553b1e2 nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
gregkh/linux@9c894159c5b8 btrfs: do not trim a device which is not writeable
gregkh/linux@fd94a779020f partitions: aix: bound the pp_count scan to the ppe array
gregkh/linux@b736b12108fd isofs: bound Rock Ridge symlink components to the SL record
gregkh/linux@425d2001df58 crypto: af_alg - Remove zero-copy support from skcipher and aead
gregkh/linux@ebd37eef6e4f crypto: caam - use print_hex_dump_devel to guard key hex dumps
gregkh/linux@c8cfe11e48b2 crypto: caam - use print_hex_dump_devel to guard key hex dumps again
gregkh/linux@677450e5ef85 crypto: ecc - Fix carry overflow in vli multiplication
gregkh/linux@82789a44415e crypto: pcrypt - restore callback for non-parallel fallback
gregkh/linux@cc42fb40171c crypto: drbg - Fix returning success on failure in CTR_DRBG
gregkh/linux@d955e2127c34 crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
gregkh/linux@e3155eb0ea98 crypto: drbg - Fix the fips_enabled priority boost
gregkh/linux@500319830d76 crypto: qat - validate RSA CRT component lengths
gregkh/linux@3d1d94445ab0 crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
gregkh/linux@c25be6c4e4be crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
gregkh/linux@03ab5ac0dc38 crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
gregkh/linux@a9ba45af2788 crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
gregkh/linux@9c68f257f9b2 crypto: talitos - move code in current_desc_hdr() into a standalone function
gregkh/linux@49ca4ff6d643 crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
gregkh/linux@44174532b459 crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
gregkh/linux@d1731c1798f8 crypto: talitos/hash - drop workqueue mechanism for SEC1
gregkh/linux@c9a65ad48bd2 crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
gregkh/linux@0fae6fb13c49 crypto: talitos/hash - remove useless wrapper
gregkh/linux@7953af378a19 crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
gregkh/linux@51ffc1f5d898 arm64: fpsimd: Fix type mismatch in sme{save,load}_state()
gregkh/linux@bf69ee9355c2 spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
gregkh/linux@e65505d91fa0 spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
gregkh/linux@caf08fd5ed74 EDAC/i10nm: Don't fail probing if ADXL is missing
gregkh/linux@0cab02d06307 watchdog: apple: Add "apple,t8103-wdt" compatible
gregkh/linux@35ae19764eab tracing: Prevent out-of-bounds read in glob matching
gregkh/linux@22c1fd1355ad NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
gregkh/linux@afcc0515bbdd module: decompress: check return value of module_extend_max_pages()
gregkh/linux@ce4736c1e6c4 exfat: bound uniname advance in exfat_find_dir_entry()
gregkh/linux@503fdfdcac24 NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
gregkh/linux@8192763d0ad7 KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
gregkh/linux@ffaaff82336d KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
gregkh/linux@051be2ed4d07 udmabuf: fix DMA direction mismatch in release_udmabuf()
gregkh/linux@9882a9bd74db i2c: core: fix adapter deregistration race
gregkh/linux@0c36f72fc4d9 i2c: mpc: Fix timeout calculations
gregkh/linux@8f9b0cb58a10 i2c: stm32f7: truncate clock period instead of rounding it
gregkh/linux@5bd64ed8dd76 Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
gregkh/linux@ba57f4303285 Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
gregkh/linux@26c895928d71 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
gregkh/linux@8c1db3418a41 Input: elan_i2c - prevent division by zero and arithmetic underflow
gregkh/linux@719d1a2c83a4 Input: goodix - clamp the device-reported contact count
gregkh/linux@c21295616a8a Input: iforce - bound the device-reported force-feedback effect index
gregkh/linux@112666835071 Input: mms114 - fix touch indexing for MMS134S and MMS136
gregkh/linux@431ad239f292 Input: touchwin - reset the packet index on every complete packet
gregkh/linux@5d2ea15ba03b Input: mms114 - reject an oversized device packet size
gregkh/linux@a72f944864b4 Input: maplemouse - fix NULL pointer dereference in open()
gregkh/linux@d89daead87d9 Input: mms114 - fix multi-touch slot corruption
gregkh/linux@330f7b37f838 Input: maple_keyb - set driver data before registering input device
gregkh/linux@985cb452c2d1 Input: maplemouse - set driver data before registering input device
gregkh/linux@04781ba93e36 Input: maplecontrol - set driver data before registering input device
gregkh/linux@2912f3d40355 RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
gregkh/linux@b2e26c955f8d RDMA/siw: bound Read Response placement to the RREAD length
gregkh/linux@018e33d40394 fuse: fix device node leak in cuse_process_init_reply()
gregkh/linux@0e4a5a000123 fuse: re-lock request before returning from fuse_ref_folio()
gregkh/linux@36bfa52459e4 smb: client: reject overlapping data areas in SMB2 responses
gregkh/linux@d0ae7ec3aa61 xfs: fail recovery on a committed log item with no regions
gregkh/linux@50f0012da104 xfs: resample the data fork mapping after cycling ILOCK
gregkh/linux@c2e252e04fdc smb/server: do not require delete access for non-replacing links
gregkh/linux@d6998ddd507c block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
gregkh/linux@5a3218fbdeac sched/fair: Only update stats for allowed CPUs when looking for dst group
gregkh/linux@7b91e51d0eb7 crypto: algif_skcipher - force synchronous processing on trees without ctx->state
gregkh/linux@2c5e72b9fbf8 KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
gregkh/linux@477145860dba KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
gregkh/linux@e602c93b25bd nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
gregkh/linux@e091ff83d962 nvmet-tcp: Fix potential UAF when ddgst mismatch
gregkh/linux@306ded31bfa0 crypto: sun4i-ss - Remove insecure and unused rng_alg
gregkh/linux@b2dbc71fe33b x86/mm: Fix check/use ordering in switch_mm_irqs_off()
gregkh/linux@05b7812164ce crypto: crypto4xx - Remove ahash-related code
gregkh/linux@9a0e68b66e7c crypto: crypto4xx - Remove insecure and unused rng_alg
gregkh/linux@9badc789a500 crypto: hisi-trng - Remove crypto_rng interface
gregkh/linux@6e52c240c43a bpf: Support for hardening against JIT spraying
gregkh/linux@cb27f3bf915c x86/bugs: Enable IBPB flush on BPF JIT allocation
gregkh/linux@3b3b23c80202 bpf: Restrict JIT predictor flush to cBPF
gregkh/linux@1f232626a42b bpf: Skip redundant IBPB in pack allocator
gregkh/linux@8d65c431e103 bpf: Prefer packs that won't trigger an IBPB flush on allocation
gregkh/linux@116f0e089089 bpf: Prefer dirty packs for eBPF allocations
gregkh/linux@3351da80ca64 media: uvcvideo: Avoid partial metadata buffers
gregkh/linux@e1052f840601 media: uvcvideo: Fix buffer sequence in frame gaps
gregkh/linux@47ca0107e6a6 media: uvcvideo: Fix sequence number when no EOF
gregkh/linux@3a9c0bee69e6 dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties
gregkh/linux@6c9ac3417de7 dt-bindings: power: imx93: Add MIPI PHY power domain
gregkh/linux@abc1926c88c1 serial: msm: Disable DMA for kernel console UART
gregkh/linux@c004ef925faf serial: 8250_omap: clear rx_running on zero-length DMA completes
gregkh/linux@8bbede0afced rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
gregkh/linux@86eff3140c9d rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
gregkh/linux@85d5fb80fe4f afs: Fix netns teardown to cancel the preallocation charger
gregkh/linux@867b3ea146a0 afs: fix NULL pointer dereference in afs_get_tree()
gregkh/linux@f34fa27d4ac1 afs: Fix further netns teardown to cancel the preallocation charger
gregkh/linux@9b783b7e03dc fbcon: fix NULL pointer dereference for a console without vc_data
gregkh/linux@e3e69cfb053e clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive()
gregkh/linux@c0d5266a945a drm/rockchip: Test for imported buffers with drm_gem_is_imported()
gregkh/linux@a0a24f75f842 drm/tidss: Drop extra drm_mode_config_reset() call
gregkh/linux@a5d13544cacb drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
gregkh/linux@b7b44937c548 drm/radeon: fix integer overflow in radeon_align_pitch()
gregkh/linux@1c9ba32308c0 drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
gregkh/linux@126549251ce3 libbpf: Report error when a negative kprobe offset is specified
gregkh/linux@b6f6a8b8c3f9 Documentation: proc: fix section numbering in table of contents
gregkh/linux@6d7ef14197b7 arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
gregkh/linux@2ed6b94441cf arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning
gregkh/linux@dbb66f78931b wifi: cfg80211: fix grammar in MLO group key error message
gregkh/linux@da4a14062bbc arm64: tegra: Fix Tegra234 MGBE PTP clock
gregkh/linux@d2ebe124d363 dt-bindings: pinctrl: nvidia,tegra234: Add missing required block
gregkh/linux@89a75e3349c4 drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
gregkh/linux@5e79e0180515 driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
gregkh/linux@966fbed4b446 wifi: rtw89: Correct data type for scan index to avoid infinite loop
gregkh/linux@6a3c384393d3 wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
gregkh/linux@3e135495c165 kconfig: fix potential NULL pointer dereference in conf_askvalue
gregkh/linux@46ca1451f61b wifi: ath9k: fix OOB access from firmware tx status queue ID
gregkh/linux@ee346dcb5ebc ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
gregkh/linux@886c7101db61 watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
gregkh/linux@72b77aa04b50 watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5
gregkh/linux@0b22f0181250 watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
gregkh/linux@d011267be9a3 media: cedrus: Fix failure to clean up hardware on probe failure
gregkh/linux@42fbc613682f media: v4l2-common: Add YUV24 format info
gregkh/linux@c399e66507af pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path
gregkh/linux@118930f6c9dc arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
gregkh/linux@95b9fff4036e arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
gregkh/linux@f79c80f173fd vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
gregkh/linux@e833e865e494 crypto: atmel-sha204a - fix blocking and non-blocking rng logic
gregkh/linux@32e50358edf0 crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
gregkh/linux@627938383761 crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
gregkh/linux@ae9e534e502a dlm: fix add msg handle in send_queue ordered
gregkh/linux@ac3d1a11397a nilfs2: fix backing_dev_info reference leak
gregkh/linux@747a1775c4ee iommu/amd: Fix a stale comment about which legacy mode is user visible
gregkh/linux@c10d7a84e5a1 arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host
gregkh/linux@79784c80d570 clk: scmi: Fix clock rate rounding
gregkh/linux@cca79a18f627 arm64: dts: qcom: sm8450: Fix ICE reg size
gregkh/linux@08bb9f3fdd4e drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
gregkh/linux@31f5ad37509d drm/hisilicon/hibmc: use clock to look up the PLL value
gregkh/linux@a36cbfb85f26 evm: terminate and bound the evm_xattrs read buffer
gregkh/linux@345675e960ab thermal: hwmon: Fix critical temperature attribute removal
gregkh/linux@1029bb377700 clk: scpi: Unregister child clock providers on remove
gregkh/linux@5543dd4d8eb5 net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()
gregkh/linux@50c3c7df4f26 crypto: ccp - Treat zero-length cert chain as query for blob lengths
gregkh/linux@e9c1d78836ce spi: hisi-kunpeng: Use dev_err_probe() for host registration failure
gregkh/linux@dc56c30c50ce net/sched: sch_htb: do not change sch->flags in htb_dump()
gregkh/linux@1134ff0c8228 net/sched: sch_htb: annotate data-races (I)
gregkh/linux@8ed0ce9ea58d ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
gregkh/linux@2c3b2667dad6 IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier
gregkh/linux@0ccf70ea8433 RDMA/hns: Fix arithmetic overflow in calc_hem_config()
gregkh/linux@1025dc2f7ba2 RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
gregkh/linux@dcf7a986f377 RDMA/srpt: fix integer overflow in immediate data length check
gregkh/linux@f8c7669f5705 media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
gregkh/linux@457136c9719a firmware: arm_scmi: Read sensor config as 32-bit value
gregkh/linux@969203772e51 sysfs: clamp show() return value in sysfs_kf_read()
gregkh/linux@e05e423fff76 bitops: use common function parameter names
gregkh/linux@8bfe280576b2 regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions
gregkh/linux@ed4e2f9f7e54 net/sched: sch_drr: annotate data-races around cl->deficit
gregkh/linux@8972d8f38373 media: rockchip: rga: fix too small buffer size
gregkh/linux@30aa34849453 firmware: arm_scmi: Fix OOB in scmi_power_name_get()
gregkh/linux@0a1d6bbba52a arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node
gregkh/linux@0c584c27f664 tracing: Bound synthetic-field strings with seq_buf
gregkh/linux@08739321420f device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
gregkh/linux@73323db56aae driver core: Use mod_delayed_work to prevent lost deferred probe work
gregkh/linux@9f1de8e38401 Revert "treewide: Fix probing of devices in DT overlays"
gregkh/linux@de8f81c0e7d3 cpufreq: Documentation: fix sampling_down_factor range
gregkh/linux@7a832f4070be cpufreq: conservative: Simplify frequency limit handling
gregkh/linux@5ff037ec8b5e pwm: imx27: Fix variable truncation in .apply()
gregkh/linux@b0c4c1d8d42f bus: sunxi-rsb: Always check register address validity
gregkh/linux@9f8f0d2099e3 RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
gregkh/linux@665fb7d22a70 RDMA/rxe: Fix a use-after-free problem in rxe_mmap
gregkh/linux@1035807ed1ab IB/mlx4: Fix refcount leak in add_port() error path
gregkh/linux@a075a7acd155 RDMA/hns: Fix warning in poll cq direct mode
gregkh/linux@a22346dc47b0 RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup
gregkh/linux@59096e2aa0f6 PM: sleep: Use complete() in device_pm_sleep_init()
gregkh/linux@f3d1b0c22466 MIPS: Fix big-endian stack argument fetching in o32 wrapper
gregkh/linux@17f5de95069b MIPS: DEC: Remove do_IRQ() call indirection
gregkh/linux@9291ea4dc7b0 mips: ralink: mt7621: add missing __iomem
gregkh/linux@5b36ed8cc78f mips: n64: add _iomem for writel call
gregkh/linux@82d6a87de784 mtd: spi-nor: Drop duplicate Kconfig dependency
gregkh/linux@936641af564c ALSA: seq: midi: Serialize output teardown with event_input
gregkh/linux@2f7c245d4601 pinctrl: cs42l43: Fix polarity on debounce
gregkh/linux@9ffdd11bd6c9 nvme-multipath: fix flex array size in struct nvme_ns_head
gregkh/linux@ec2644cc69e1 workqueue: drop spurious '' from print_worker_info() fn declaration
gregkh/linux@1e3db30a8881 ipv6: guard against possible NULL deref in __in6_dev_stats_get()
gregkh/linux@4a76953c3ed0 net/sched: cls_bpf: prevent unbounded recursion in offload rollback
gregkh/linux@6e22d5ad61cf drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
gregkh/linux@4b731af227c6 drm/tegra: gr2d/gr3d: Contain PM in the grd_probe/gr*d_remove
gregkh/linux@71c017b3f83f gpu: host1x: Allow entries in BO caches to be freed
gregkh/linux@3d211fb43a04 drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
gregkh/linux@3ac173e46ef6 gpu: host1x: Fix iommu_map_sgtable() return value check
gregkh/linux@13d9e73955c9 drm/tegra: Fix iommu_map_sgtable() return value check
gregkh/linux@9980c66ad2d4 drm/nouveau/bios: specify correct display fuse register for Ampere and Ada
gregkh/linux@fb203d0e21dc libbpf: Harden parse_vma_segs() path parsing
gregkh/linux@ca06e163e518 libbpf: Fix UAF in strset__add_str()
gregkh/linux@d47b0b8a69a1 dax/kmem: account for partial discontiguous resource upon removal
gregkh/linux@acd54f42abbb rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
gregkh/linux@b460f8d01a12 ocfs2: don't BUG_ON an invalid journal dinode
gregkh/linux@cc7d67197c51 ocfs2: kill osb->system_file_mutex lock
gregkh/linux@86145b5c5a7c crypto: hisilicon/qm - disable error report before flr
gregkh/linux@fee0e0eefcd4 drm/msm/dp: fix HPD state status bit shift value
gregkh/linux@01623d834b5e drm/msm/dp: Fix the ISR* enum values
gregkh/linux@0c16d7c01284 EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info
gregkh/linux@cd19a6345e37 RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe
gregkh/linux@fc72fd61cc8b RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
gregkh/linux@c4f0846d1d24 media: qcom: venus: drop extra padding in NV12 raw size calculation
gregkh/linux@061a2f302fc5 media: qcom: venus: relax encoder frame/blur dimension steps on v4
gregkh/linux@04c18c43d250 media: qcom: venus: relax encoder frame/blur step size on v6
gregkh/linux@964a44a990d6 rpmsg: use generic driver_override infrastructure
gregkh/linux@ce3030e92f14 md/raid10: reset read_slot when reusing r10bio for discard
gregkh/linux@70b1c71b1fdf ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback
gregkh/linux@93bc5642fbda ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble
gregkh/linux@7eb7c42ec493 ARM: imx3: Fix CCM node reference leak
gregkh/linux@21b8e6afbd1b HID: wiimote: Fix table layout and whitespace errors
gregkh/linux@ddab66c9a90d ata: libata: Fix ata_exec_internal()
gregkh/linux@c225bb49c697 ARM: imx31: Fix IIM mapping leak in revision check
gregkh/linux@73e35c1bdfa1 nvdimm/btt: Handle preemption in BTT lane acquisition
gregkh/linux@da4853eb4616 scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"
gregkh/linux@4f944acca637 scsi: pm8001: Fix error code in non_fatal_log_show()
gregkh/linux@10e05b5ff05c scsi: ufs: Fix wrong value printed in unexpected UPIU response case
gregkh/linux@c70d0f9114c3 bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
gregkh/linux@4af4f0b04964 mm/fake-numa: fix under-allocation detection in uniform split
gregkh/linux@8990dbb7065b ext2: fix ignored return value of generic_write_sync()
gregkh/linux@e8bbcc00760d sched: restore timer_slack_ns when resetting RT policy on fork
gregkh/linux@b0799d03b709 lib/test_meminit: use && for bools
gregkh/linux@eee07d769da5 configfs_lookup(): don't leave ->s_dentry dangling on failure
gregkh/linux@71323880be79 drm/amdgpu: set sub_block_index for mca ras sub-blocks
gregkh/linux@c35dce681145 bpftool: Use libbpf error code for flow dissector query
gregkh/linux@a97a5f842c68 perf/x86/amd/core: Always use the NMI latency mitigation
gregkh/linux@6b38a5b8ee95 ocfs2: rebase copied fsdlm LVB pointers in locking_state
gregkh/linux@ecb3f9386f43 ocfs2: fix buffer head management in ocfs2_read_blocks()
gregkh/linux@346314bb0cc2 ocfs2: reject FITRIM ranges shorter than a cluster
gregkh/linux@aa7883b6a3c7 ocfs2/dlm: require a ref for locking_state debugfs open
gregkh/linux@f38fb17c8758 ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()
gregkh/linux@cc5d7dadb6d8 netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
gregkh/linux@8d86b4041d21 netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
gregkh/linux@6bba4846f196 netfilter: conntrack: revert ct extension genid infrastructure
gregkh/linux@c12147358660 netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
gregkh/linux@9b82054dfe69 IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path()
gregkh/linux@ad360a31092a RDMA/irdma: Fix OOB read during CQ MR registration
gregkh/linux@3982121730f9 RDMA/irdma: Initialize iwmr->access during MR registration
gregkh/linux@f8ab1c1bf42e arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well
gregkh/linux@1bfabe51760d bpf: Check tail zero of bpf_prog_info
gregkh/linux@5e630134d11d bpf: Update transport_header when encapsulating UDP tunnel in lwt
gregkh/linux@cfc67aee0c83 wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
gregkh/linux@64228dfc4247 wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
gregkh/linux@c07aa0534d50 wifi: wcn36xx: fix OOB read from short trigger BA firmware response
gregkh/linux@32b482fbda6b ALSA: seq: Fix partial userptr event expansion
gregkh/linux@dba54c80f86e riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe
gregkh/linux@e0c3edd86414 ALSA: seq: Clear variable event pointer on read
gregkh/linux@e67b984f8c14 ACPI: IPMI: Fix message kref handling on dead device
gregkh/linux@2bc08fe88e57 cpufreq: Documentation: fix conservative governor freq_step description
gregkh/linux@52d0e6527716 IB/mlx5: Don't take the rereg_mr fallback without a new translation
gregkh/linux@94f7e50eb6b2 IB/mlx5: Properly support implicit ODP rereg_mr
gregkh/linux@43c9646d98a0 spi: ep93xx: fix double-free of zeropage on DMA setup failure
gregkh/linux@38149b57427c firmware_loader: Fix recursive lock in device_cache_fw_images()
gregkh/linux@9e57e2863872 configfs: fix lockless traversals of ->s_children
gregkh/linux@89184909634e watchdog: unregister PM notifier on watchdog unregister
gregkh/linux@0165403da508 scsi: target: Fix hexadecimal CHAP_I handling
gregkh/linux@8c888a062c6d scsi: target: Remove tcm_loop target reset handling
gregkh/linux@9f56b6dbefa8 pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39
gregkh/linux@310958030dc0 pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39
gregkh/linux@af71c2b88cca vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
gregkh/linux@6abaa8ec1b98 hwspinlock: qcom: avoid uninitialized struct members
gregkh/linux@66f21eecda2a sched/fair: Fix cpu_util runnable_avg arithmetic
gregkh/linux@e93b18ddc18a wifi: mt76: fix argument to ieee80211_is_first_frag()
gregkh/linux@d42f6f25211a wifi: mt76: mt7915: fix potential tx_retries underflow
gregkh/linux@06010aab6ec0 wifi: mt76: mt7921: fix potential tx_retries underflow
gregkh/linux@015dc4a1e0c2 btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
gregkh/linux@b2ff450f7f5c fbdev: sm501fb: Fix buffer errors in OF binding code
gregkh/linux@5a15f8d87a00 hwmon: (it87) Clamp negative values to zero in set_fan()
gregkh/linux@fcce8a44dfa3 btrfs: zoned: don't account data relocation space-info in statfs free space
gregkh/linux@407472df02db IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified
gregkh/linux@a28ad91dc5d8 spi: meson-spifc: fix runtime PM leak on remove
gregkh/linux@dbc63fe645f0 ASoC: codecs: aw88261: fix incorrect masks for boost regs
gregkh/linux@93ed4692f229 vduse: hold vduse_lock across IDR lookup in open path
gregkh/linux@2b3f79b90b23 vhost/vdpa: validate virtqueue index in mmap and fault paths
gregkh/linux@f8e1f130689a vduse: Requeue failed read to send_list head
gregkh/linux@6445b945024f vhost/net: complete zerocopy ubufs only once
gregkh/linux@67fb36b508ce tools/virtio: check mmap return value in vringh_test
gregkh/linux@b72d5d2d8fe7 ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
gregkh/linux@3c75cd8e68f1 ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails
gregkh/linux@015e32e264a9 bonding: 3ad: fix mux port state on oper down
gregkh/linux@260830a9a706 ext4: fix kernel BUG in ext4_write_inline_data_end
gregkh/linux@2a0ee19de6e8 selftests/bpf: Fix bpf_iter/task_vma test
gregkh/linux@0101d4000a12 cxl/test: Fix integer overflow in mock LSA bounds checks
gregkh/linux@7f10e0f35ac1 cxl/test: Zero out LSA backing memory to avoid leaking to user
gregkh/linux@b0dbe5f70ee8 of: cpu: add check in __of_find_n_match_cpu_property()
gregkh/linux@eb73056ce2a6 bpf: Tighten cgroup storage cookie checks for prog arrays
gregkh/linux@b43dee28b7c8 s390/process: Fix kernel thread function pointer type
gregkh/linux@809230cc25dd Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device
gregkh/linux@290b36f9d1eb Bluetooth: hci: validate codec capability element length
gregkh/linux@41d3e5526fcd Bluetooth: vhci: validate devcoredump state before side effects
gregkh/linux@60fa67263a77 fs: efs: remove unneeded debug prints
gregkh/linux@87262e60adfe RDMA/mlx5: Remove raw RSS QP restrack tracking
gregkh/linux@6fc874fdfb36 RDMA/mlx5: Fix undefined shift of user RQ WQE size
gregkh/linux@aabfc845838e RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
gregkh/linux@8cbf24714d6b ASoC: codecs: hdac_hdmi: Validate written enum value
gregkh/linux@0b10c6203e62 ASoC: fsl: fsl_audmix: Validate written enum values
gregkh/linux@4bcb23635d50 ASoC: tegra: tegra210_ahub: Validate written enum value
gregkh/linux@3d0540018602 net/sched: cls_flow: Dont expose folded kernel pointers
gregkh/linux@a7ef30753353 net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
gregkh/linux@53788b134519 bridge: cfm: reject invalid CCM interval at configuration time
gregkh/linux@85f54cf58916 sctp: validate embedded address parameter length
gregkh/linux@b2a017bfcf56 net/sched: sch_hfsc: Don't make class passive twice
gregkh/linux@9b937de4b3de tipc: require net admin for TIPCv2 netlink mutators
gregkh/linux@47ed873e4ced tipc: prevent snt_unacked underflow on CONN_ACK
gregkh/linux@f1715d92ee30 tipc: reject inverted service ranges from peer bindings
gregkh/linux@66bdbb8e6c5c cxl/test: Add check after kzalloc() memory in alloc_mock_res()
gregkh/linux@ed374dbc70c1 crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
gregkh/linux@8afd1007ef79 crypto: cavium/cpt - fix DMA cleanup using wrong loop index
gregkh/linux@cbc2fcf58088 crypto: rng - Free default RNG on module exit
gregkh/linux@dfab0d4698a6 spi: xilinx: use FIFO occupancy register to determine buffer size
gregkh/linux@820a87639e9a ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO
gregkh/linux@23a29ee1d9de power: supply: core: fix supplied_from allocations
gregkh/linux@25fb53e43ec0 handshake: Require admin permission for DONE command
gregkh/linux@acc08a0c7f37 net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
gregkh/linux@e8c6dbadf139 net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
gregkh/linux@8e52a247d9aa net: mana: initialize gdma queue id to INVALID_QUEUE_ID
gregkh/linux@637639118ef3 net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check
gregkh/linux@b6dced215008 bpf: Run generic devmap egress prog on private skb
gregkh/linux@8d654fa6ebf4 net/mlx5: Check max_macs devlink param value against max capability
gregkh/linux@7edd4db82f94 net: wwan: t7xx: check skb_clone in control TX
gregkh/linux@498a667dc954 net: bcmgenet: Use weighted round-robin TX DMA arbitration
gregkh/linux@b8c90823cdfb kcm: use WRITE_ONCE() when changing lower socket callbacks
gregkh/linux@68d0415c16e5 netfilter: nf_conncount: callers must hold rcu read lock
gregkh/linux@3ff31b83aacf ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
gregkh/linux@4465ebe67d89 cifs: remove all cifs files before kill super
gregkh/linux@6fb80feea309 smb/client: always return a value for FS_IOC_GETFLAGS
gregkh/linux@98219ce3e1c9 selftests/bpf: Initialize operation name before use
gregkh/linux@5c5fccbcf3e1 bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
gregkh/linux@888706a76286 bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
gregkh/linux@c05a0ec1cdce bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
gregkh/linux@ac7385af1dca MIPS: mm: Fix out-of-bounds write in maar_res_walk()
gregkh/linux@5397142d60aa powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del
gregkh/linux@7c75878359bd powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down
gregkh/linux@55d0edf94c19 powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus
gregkh/linux@00cd01ea0cf5 KEYS: Use acquire when reading state in keyring search
gregkh/linux@50ff092633b0 tipc: fix UAF in tipc_l2_send_msg()
gregkh/linux@572fff10819d tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
gregkh/linux@179966099aa1 ionic: Fix check in ionic_get_link_ext_stats
gregkh/linux@7c3264d273d5 ksmbd: fix use-after-free in same_client_has_lease()
gregkh/linux@2ce02059ceb6 mfd: cs42l43: Sanity check firmware size
gregkh/linux@49b34bd3ad69 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
gregkh/linux@8aadc136d8e8 net/9p: fix race condition on rdma->state in trans_rdma.c
gregkh/linux@08626fcfe123 staging: nvec: fix use-after-free in nvec_rx_completed()
gregkh/linux@66433aca6e80 coresight: cti: Fix DT filter signals silently ignored
gregkh/linux@d887844028cd coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
gregkh/linux@a397bf58445f PCI/ASPM: Don't reconfigure ASPM entering low-power state
gregkh/linux@01b03bc88bd8 PCI: Introduce named defines for PCI ROM
gregkh/linux@4997873e3abb PCI: Check ROM header and data structure addr before accessing
gregkh/linux@37b43903ef0f x86/platform/olpc: xo15: Drop wakeup source on driver removal
gregkh/linux@f67b187af749 platform/x86: xo15-ebook: Fix wakeup source and GPE handling
gregkh/linux@78a0d1fa5d7a PCI: loongson: Do not ignore downstream devices on external bridges
gregkh/linux@4d6628c10669 bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()
gregkh/linux@9c55eb9a0f6f phy: phy-can-transceiver: Check driver match and driver data against NULL
gregkh/linux@e519c1d8c5ef mailbox: mtk-adsp: fix UAF during device teardown
gregkh/linux@4928096212b7 staging: most: video: avoid double free on video register failure
gregkh/linux@d512bdefd241 usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
gregkh/linux@2bb0cfa1392c usb: host: max3421: Reject hub port requests for non-existent ports
gregkh/linux@764723bd67a6 char: tlclk: fix use-after-free in tlclk_cleanup()
gregkh/linux@4799162324a8 iio: light: si1133: reset counter to prevent race condition
gregkh/linux@922e9be5c41a iio: light: si1133: prevent race condition on timeout
gregkh/linux@8cf346074533 iio: magnetometer: ak8975: fix potential kernel stack memory leak
gregkh/linux@94d158985b6e iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
gregkh/linux@eed69f8a10b8 iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
gregkh/linux@8ac30431ca7e iio: tcs3472: power down chip on probe failure
gregkh/linux@eda31b3b90f1 clk: at91: keep securam node alive while mapping it
gregkh/linux@6c63a4ed2692 HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter
gregkh/linux@8afc24a884af fs/ntfs3: add bounds check to run_get_highest_vcn()
gregkh/linux@914a77aa7a24 fs/ntfs3: fix mount failure on 64K page-size kernels
gregkh/linux@bca364c4c757 drm/amd/display: Add missing kdoc for ALLM parameters
gregkh/linux@b67a3bcc1cb4 dmaengine: imx-sdma: Refine spba bus searching in probe
gregkh/linux@ba8b410c7c4f perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
gregkh/linux@98cc38b54101 dmaengine: qcom: gpi: set DMA_PRIVATE capability
gregkh/linux@5876f38b67a3 dmaengine: Fix possible use after free
gregkh/linux@a64d70d5e33f clk: qcom: a53: Corrected frequency multiplier for 1152MHz
gregkh/linux@b6c400212257 pNFS/filelayout: fix cheking if a layout is striped
gregkh/linux@e253e1a0b360 xprtrdma: Remove temp allocation of rpcrdma_rep objects
gregkh/linux@b7070614baeb xprtrdma: Avoid 250 ms delay on backlog wakeup
gregkh/linux@9d17e2618037 xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot
gregkh/linux@d1b159356a35 xprtrdma: Post receive buffers after RPC completion
gregkh/linux@d006a5fb63b9 xprtrdma: Use sendctx DMA state for Send signaling
gregkh/linux@9f3d9b68c1c6 xprtrdma: Decouple req recycling from RPC completion
gregkh/linux@02e00663846b NFSv4/pnfs: defer return_range callbacks until after inode unlock
gregkh/linux@c31ce9fd8b34 nfs: keep PG_UPTODATE clear after read errors in page groups
gregkh/linux@502b282f2f45 NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors
gregkh/linux@4bc7e5c789b6 NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write
gregkh/linux@b0c5bc5068f8 PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
gregkh/linux@018359b048c4 PCI: meson: Propagate devm_add_action_or_reset() failure
gregkh/linux@2097a2537d9d fs/ntfs3: resize log->one_page_buf when adopting on-disk page size
gregkh/linux@65a04db641fd PCI: rcar-host: Remove unused LIST_HEAD(res)
gregkh/linux@dd798b76a348 xprtrdma: Check frwr_wp_create() during connect
gregkh/linux@2b84ff4da343 xprtrdma: Document and assert reply-handler invariants
gregkh/linux@e967e82e372f xprtrdma: Resize reply buffers before reposting receives
gregkh/linux@88b5346284a1 xprtrdma: Fix bcall rep leak and unbounded peek
gregkh/linux@416342421401 xprtrdma: Sanitize the reply credit grant after parsing
gregkh/linux@4322fd9645ee xprtrdma: Repost Receive buffers for malformed replies
gregkh/linux@05457b1241d7 xprtrdma: Return sendctx slot after Send preparation failure
gregkh/linux@20a17dd8a0c7 tools lib api: Fix missing null termination in filename__read_int/ull()
gregkh/linux@bd0a73192c3a tools lib api: Fix filename__write_int() writing uninitialized stack data
gregkh/linux@b3c60e4f962d tools lib api: Fix mount_overload() snprintf truncation and toupper range
gregkh/linux@26b30daf73ae PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
gregkh/linux@2e605bef29e0 PCI: mediatek: Use actual physical address instead of virt_to_phys()
gregkh/linux@6848ca381edf Revert "PCI/MSI: Unmap MSI-X region on error"
gregkh/linux@79d80d70b03d security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
gregkh/linux@b7c45c05a396 apparmor: check label build before no_new_privs test
gregkh/linux@cc2192899d50 apparmor: aa_label_alloc use aa_label_free on alloc failure
gregkh/linux@6a26de6c0554 apparmor: fix rawdata_f_data implicit flex array
gregkh/linux@5acb878db413 apparmor: grab ns lock and refresh when looking up changehat child profiles
gregkh/linux@5cba148eae6e apparmor: fix potential UAF in aa_replace_profiles
gregkh/linux@58817bf37ccc apparmor: aa_getprocattr free procattr leak on format failure
gregkh/linux@07fea242a894 apparmor: put secmark label after secid lookup
gregkh/linux@b8e89081a97b i3c: master: Prevent reuse of dynamic address on device add failure
gregkh/linux@5feaaa1d34b2 apparmor: fix label can not be immediately before a declaration
gregkh/linux@e1a215900d2e sparc: led: avoid trimming a newline from empty writes
gregkh/linux@6564da2814a7 gpio: mlxbf3: fail probe if gpiochip registration fails
gregkh/linux@cb4f93bdade9 spi: dw: fix wrong BAUDR setting after resume
gregkh/linux@22d554d9ba24 xfrm: Use the XFRM_GRO to indicate a GRO call on input
gregkh/linux@be8cdef5c93d xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path
gregkh/linux@a1c6d68ddee3 xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]
gregkh/linux@efa9e3b9f3de xfrm: validate selector family and prefixlen during match
gregkh/linux@a6d0abb35052 ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode
gregkh/linux@283e77af49fd drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
gregkh/linux@506e635aed05 drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
gregkh/linux@cfbffc8091f5 drm/amdgpu: initialize irq.lock spinlock earlier
gregkh/linux@19d2d36e193c octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
gregkh/linux@befe1ebe7fc2 net: psample: fix info leak in PSAMPLE_ATTR_DATA
gregkh/linux@722576aba0a6 sctp: hold socket lock when dumping endpoints in sctp_diag
gregkh/linux@e58aef585d17 PCI: iproc: Restore .map_irq() for the platform bus driver
gregkh/linux@154e29d0c6a2 spi: rpc-if: Use correct device for hardware reinitialization on resume
gregkh/linux@38e94d63e29f virtio-net: fix len check in receive_big()
gregkh/linux@0ce4f958ddeb dpaa2-switch: fix VLAN upper check not rejecting bridge join
gregkh/linux@f10479450709 devlink: Fix parent ref leak in devl_rate_node_create()
gregkh/linux@9a65860959db flow_dissector: check device type before reading ETH_ADDRS
gregkh/linux@bcdd5a7363bd ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
gregkh/linux@79417b08f747 arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS
gregkh/linux@e432404e63ed thermal: intel: Fix dangling resources on thermal_throttle_online() failure
gregkh/linux@e3987bc53963 ACPI: resource: Amend kernel-doc style
gregkh/linux@e74488982ecf ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
gregkh/linux@ded58bfebcb3 ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
gregkh/linux@71b5add66c51 ieee802154: fix kernel-infoleak in dgram_recvmsg()
gregkh/linux@c66ed3e6371f md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
gregkh/linux@bead63993e05 netfilter: ipset: Fix data race between add and dump in all hash types
gregkh/linux@28642b1420f2 netfilter: ipset: annotate "pos" for concurrent readers/writers
gregkh/linux@6329d3a9afe7 netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
gregkh/linux@d01b4b471f0f netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
gregkh/linux@76d1bc5498c7 netfilter: nf_reject: skip iphdr options when looking for icmp header
gregkh/linux@f73b7de5338f netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
gregkh/linux@b508e7542d68 irqchip/crossbar: Fix parent domain resource leak
gregkh/linux@04dfc2146599 selftests/mm: clarify alternate unmapping in compaction_test
gregkh/linux@75ec9461a462 selftests/mm: allow PUD-level entries in compound testcase of hmm tests
gregkh/linux@c6edb7532c8e selftests/mm: fix exclusive_cow test fork() handling
gregkh/linux@a07f77e995a6 net: marvell: prestera: initialize err in prestera_port_sfp_bind
gregkh/linux@5e215bf1c47f tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
gregkh/linux@754dfaddde3a net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths
gregkh/linux@9ab0fb5758cb octeontx2-af: mcs: Fix unsupported secy stats read
gregkh/linux@ab9c0b007c7f octeontx2-pf: Clear stats of all resources when freeing resources
gregkh/linux@e88b1ff95f2e octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
gregkh/linux@429025d25ac2 rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
gregkh/linux@48c16ed98879 rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
gregkh/linux@475405593de2 bpf: Fix stack slot index in nospec checks
gregkh/linux@9fe373020cc9 bpf: zero-initialize the fib lookup flow struct
gregkh/linux@525e408c27ae bpf: Fix effective prog array index with BPF_F_PREORDER
gregkh/linux@bfa05d89dc3c drm/edid: fix OOB read in drm_parse_tiled_block()
gregkh/linux@014dd1c8617b PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0
gregkh/linux@2465d1bdf84e PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0
gregkh/linux@335c2dd21ad9 ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
gregkh/linux@d662269211c4 ice: fix AQ error code comparison in ice_set_pauseparam()
gregkh/linux@3186a301d65d i40e: Fix i40e_debug() to use struct i40e_hw argument
gregkh/linux@52c73b6992b4 rtc: msc313: fix NULL deref in shared IRQ handler at probe
gregkh/linux@7470511d085a ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
gregkh/linux@302d57ed7872 ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
gregkh/linux@49eaf1403201 ipv4: fib: Don't ignore error route in local/main tables.
gregkh/linux@b3b4719429d5 bpf, lsm: Add disabled BPF LSM hook list
gregkh/linux@6b44c6660aa1 bpf: Disable xfrm_decode_session hook attachment
gregkh/linux@87f7a720de25 netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
gregkh/linux@abef7f817217 netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
gregkh/linux@1655ca28c5b6 netfilter: nft_synproxy: stop bypassing the priv->info snapshot
gregkh/linux@efc17b9240d8 netfilter: nft_compat: ebtables emulation must reject non-bridge targets
gregkh/linux@ba1a84de3284 NTB: epf: Make db_valid_mask cover only real doorbell bits
gregkh/linux@3fb009699812 NTB: epf: Report 0-based doorbell vector via ntb_db_event()
gregkh/linux@4e5ed2a7dda5 NTB: epf: Fix doorbell bitmask and IRQ vector handling
gregkh/linux@4de5ff924c0a alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
gregkh/linux@bd9e5220ffb1 alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
gregkh/linux@3876318ea54e net, bpf: check master for NULL in xdp_master_redirect()
gregkh/linux@fc62bfd30d30 net: dsa: sja1105: round up PTP perout pin duration
gregkh/linux@83090f5e7b54 veth: fix NAPI leak in XDP enable error path
gregkh/linux@447d493034a9 net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
gregkh/linux@bcf9266fc3cd ipv6: fix error handling in disable_ipv6 sysctl
gregkh/linux@7469cebbd810 ipv6: fix error handling in ignore_routes_with_linkdown sysctl
gregkh/linux@247425586871 ipv6: fix error handling in forwarding sysctl
gregkh/linux@ea8e946b09ba ipv6: fix error handling in disable_policy sysctl
gregkh/linux@0d6d5194d9bb smb/client: preserve errors from smb2_set_sparse()
gregkh/linux@ebe5ad5937db rtc: ds1307: Fix off-by-one issue with wday for rx8130
gregkh/linux@aa6e2b431070 rtc: cmos: unregister HPET IRQ handler on probe failure
gregkh/linux@be626ac1faad net: mvneta: re-enable percpu interrupt on resume
gregkh/linux@a63eaf7605d1 net: sungem: fix probe error cleanup
gregkh/linux@1596d8ecb668 net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove
gregkh/linux@d805c95580b2 ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count
gregkh/linux@cde84429e0fa dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback
gregkh/linux@edce0203a4fc tracing: probes: fix typo in a log message
gregkh/linux@0567b5bcbd79 spi: sh-msiof: abort transfers when reset times out
gregkh/linux@f0320c623f4d gpio: mvebu: fail probe if gpiochip registration fails
gregkh/linux@a05c848a94bb gpio: htc-egpio: use managed gpiochip registration
gregkh/linux@804bb969f194 seg6: validate SRH length before reading fixed fields
gregkh/linux@e30af53dca80 qede: fix out-of-bounds check for cqe->len_list[]
gregkh/linux@f55276160ffa net: en...