UPDATE: 6.6.130

[fepitre-bot]

Update to 6.6.130

Details

Changes since previous version:
gregkh/linux@c09fbcd31ae6 Linux 6.6.130
gregkh/linux@1dacf6b3718a xen/privcmd: add boot control for restricted usage in domU
gregkh/linux@1879319d790f xen/privcmd: restrict usage in unprivileged domU
gregkh/linux@2cf5eff223fc tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure
gregkh/linux@c1bfc25d62d8 lib/bootconfig: check xbc_init_node() return in override path
gregkh/linux@df1f4a7d9cf6 drm/i915/gt: Check set_default_submission() before deferencing
gregkh/linux@b0158d9d6f4e ksmbd: fix use-after-free in durable v2 replay of active file handles
gregkh/linux@806f13752652 ksmbd: fix use-after-free of share_conf in compound request
gregkh/linux@87158a633e9a drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr()
gregkh/linux@6ec8f8ebd023 mtd: rawnand: brcmnand: skip DMA during panic write
gregkh/linux@a80291e577b4 mtd: rawnand: serialize lock/unlock against other NAND operations
gregkh/linux@69aece634a7e i2c: cp2615: fix serial string NULL-deref at probe
gregkh/linux@2aeb380c731f i2c: cp2615: replace deprecated strncpy with strscpy
gregkh/linux@7864c667aed0 netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
gregkh/linux@c51957601d32 x86/platform/uv: Handle deconfigured sockets
gregkh/linux@197fc4dda1c0 i2c: pxa: defer reset on Armada 3700 when recovery is used
gregkh/linux@c40387488be0 i2c: fsi: Fix a potential leak in fsi_i2c_probe()
gregkh/linux@994b301a217f USB: serial: f81232: fix incomplete serial port generation
gregkh/linux@2124d82fd25e Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
gregkh/linux@eec4d5758f33 drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug
gregkh/linux@5b0578a9a9ec hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()
gregkh/linux@5fcef2e370f3 hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value
gregkh/linux@b61529c357f1 icmp: fix NULL pointer dereference in icmp_tag_validation()
gregkh/linux@1a0c3c7b5b14 net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths
gregkh/linux@ff0c54f088f7 net: mvpp2: guard flow control update with global_tx_fc in buffer switching
gregkh/linux@224f4678812e nfnetlink_osf: validate individual option lengths in fingerprints
gregkh/linux@adee3436ccd2 netfilter: nf_tables: release flowtable after rcu grace period on error
gregkh/linux@d016c216bc75 netfilter: bpf: defer hook memory release until rcu readers are done
gregkh/linux@0a3f8cd3f370 net: bonding: fix NULL deref in bond_debug_rlb_hash_show
gregkh/linux@a05a2149386f udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
gregkh/linux@3dffc083292e net/mlx5e: Fix race condition during IPSec ESN update
gregkh/linux@99aaee927800 net/mlx5e: Prevent concurrent access to IPSec ASO context
gregkh/linux@7712b5ff6967 net/mlx5: qos: Restrict RTNL area to avoid a lock cycle
gregkh/linux@5da8009be419 net: macb: fix uninitialized rx_fs_lock
gregkh/linux@edf4c2aaee08 ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
gregkh/linux@a6dc74209462 wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
gregkh/linux@0a4da176ae4b wifi: mac80211: fix NULL deref in mesh_matches_local()
gregkh/linux@58f74dc73d1b iavf: fix VLAN filter lost on add/delete race
gregkh/linux@fb602ed4b19e igc: fix missing update of skb->tail in igc_xmit_frame()
gregkh/linux@4de6a43e8ecf net: usb: aqc111: Do not perform PM inside suspend callback
gregkh/linux@a73d95b57bf9 clsact: Fix use-after-free in init/destroy rollback asymmetry
gregkh/linux@125f932a76a9 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
gregkh/linux@f1c7701d3ac9 net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
gregkh/linux@21c89a0a8de7 net/sched: teql: Fix double-free in teql_master_xmit
gregkh/linux@f00fc26c8a06 net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
gregkh/linux@39f2d86f2ddd PM: runtime: Fix a race condition related to device removal
gregkh/linux@fd8278ffba49 sched: idle: Consolidate the handling of two special cases
gregkh/linux@249e90557158 net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
gregkh/linux@fcdf56bbdade net: bcmgenet: increase WoL poll timeout
gregkh/linux@f5e4f4e4cdb7 netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
gregkh/linux@262beb78e95e netfilter: xt_time: use unsigned int for monthday bit shift
gregkh/linux@63b8097cea19 netfilter: xt_CT: drop pending enqueued packets on template removal
gregkh/linux@e68a8db3a054 netfilter: nft_ct: drop pending enqueued packets on removal
gregkh/linux@b477ef7fa612 netfilter: nft_ct: add seqadj extension for natted connections
gregkh/linux@52235bf88159 netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
gregkh/linux@528b4509c9df netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
gregkh/linux@f04cc86d5990 netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
gregkh/linux@9e5021a90653 netfilter: ctnetlink: remove refcounting in expectation dumpers
gregkh/linux@a75d3be96d70 mpls: add missing unregister_netdevice_notifier to mpls_init
gregkh/linux@0c9fb70a206a net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
gregkh/linux@e160b869b0a8 Bluetooth: qca: fix ROM version reading on WCN3998 chips
gregkh/linux@11a87dd5df42 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
gregkh/linux@45ebe5b90020 Bluetooth: HIDP: Fix possible UAF
gregkh/linux@f35209cf4826 Bluetooth: hci_sync: Fix hci_le_create_conn_sync
gregkh/linux@2d3deaa162a7 Bluetooth: ISO: Fix defer tests being unstable
gregkh/linux@e7899dc538f3 Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy
gregkh/linux@c02860835673 Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU
gregkh/linux@b5c20c899246 Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU
gregkh/linux@d30acb4ecbe2 firmware: arm_scpi: Fix device_node reference leak in probe path
gregkh/linux@37e776e2e0a5 wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
gregkh/linux@256f7d4c1123 wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
gregkh/linux@d21923a8059f soc: fsl: qbman: fix race condition in qman_destroy_fq
gregkh/linux@d0a466caf4ac cache: ax45mp: Fix device node reference leak in ax45mp_cache_init()
gregkh/linux@ccb2262681d6 btrfs: tree-checker: fix misleading root drop_level error message
gregkh/linux@56e72c8b02d9 btrfs: log new dentries when logging parent dir of a conflicting inode
gregkh/linux@df656e45774f drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END}
gregkh/linux@9085ad02eff0 drm/amdgpu: apply state adjust rules to some additional HAINAN vairants
gregkh/linux@41b0edc1be8d drm/radeon: apply state adjust rules to some additional HAINAN vairants
gregkh/linux@2a28ad57d12e drm/amdgpu/mmhub3.0: add bounds checking for cid
gregkh/linux@46411902afd1 drm/amdgpu/mmhub3.0.2: add bounds checking for cid
gregkh/linux@0fabdcd12c29 drm/amdgpu/mmhub3.0.1: add bounds checking for cid
gregkh/linux@6b257be5d3ad drm/amdgpu/mmhub2.3: add bounds checking for cid
gregkh/linux@aa3c80150b0e drm/amdgpu/mmhub2.0: add bounds checking for cid
gregkh/linux@9f41b9f82ecf drm/amdgpu/gmc9.0: add bounds checking for cid
gregkh/linux@447f2c6ef11c serial: uartlite: fix PM runtime usage count underflow on probe
gregkh/linux@59e13f1c9a8c serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY
gregkh/linux@d2719a0a9c34 serial: 8250: Fix TX deadlock when using DMA
gregkh/linux@092cb022a454 serial: 8250_pci: add support for the AX99100
gregkh/linux@85654456e394 iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
gregkh/linux@d8570211a2b1 mtd: Avoid boot crash in RedBoot partition table parser
gregkh/linux@2a79fd98b961 mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init()
gregkh/linux@d55ff6f213be mtd: rawnand: pl353: make sure optimal timings are applied
gregkh/linux@f13100b1f5f1 spi: fix statistics allocation
gregkh/linux@6bbd385b30c7 spi: fix use-after-free on controller registration failure
gregkh/linux@9443202d9138 pmdomain: bcm: bcm2835-power: Increase ASB control timeout
gregkh/linux@4ada013fd7da mmc: sdhci: fix timing selection for 1-bit bus width
gregkh/linux@451816d430b3 mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
gregkh/linux@0c5026178856 net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume
gregkh/linux@fbbd4c07a537 net: macb: Introduce gem_init_rx_ring()
gregkh/linux@2fd0bdd49e57 net: macb: queue tie-off or disable during WOL suspend
gregkh/linux@8afb437ea1f7 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
gregkh/linux@1ada20331f2d batman-adv: avoid OGM aggregation when skb tailroom is insufficient
gregkh/linux@fc77e0a5600e iio: light: bh1780: fix PM runtime leak on error path
gregkh/linux@64ad49597d14 btrfs: fix transaction abort on file creation due to name hash collision
gregkh/linux@b19c0465e4da btrfs: fix transaction abort on set received ioctl due to item overflow
gregkh/linux@6bce705b699c btrfs: fix transaction abort when snapshotting received subvolumes
gregkh/linux@3f04f871a1d4 kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()
gregkh/linux@61cfa81f19b9 kprobes: Remove unneeded goto
gregkh/linux@6ebef4a220a1 ksmbd: unset conn->binding on failed binding request
gregkh/linux@9229709ec8bf smb: client: fix krb5 mount with username option
gregkh/linux@807bd1258453 Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
gregkh/linux@dd3b221e2107 Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
gregkh/linux@935c716be860 parisc: Flush correct cache in cacheflush() syscall
gregkh/linux@5653af416a48 net: macb: fix use-after-free access to PTP clock
gregkh/linux@70662874f646 NFC: nxp-nci: allow GPIOs to sleep
gregkh/linux@67f2796354bf LoongArch: Give more information if kmem access failed
gregkh/linux@e48bf8f1d2b1 nvdimm/bus: Fix potential use after free in asynchronous initialization
gregkh/linux@41f6ba6c98a6 sunrpc: fix cache_request leak in cache_release
gregkh/linux@d1a19217995d NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
gregkh/linux@439a6728ec46 io_uring/kbuf: check if target buffer list is still legacy on recycle
gregkh/linux@d77401968c78 mm/mempolicy: fix wrong mmap_read_unlock() in migrate_to_node()
gregkh/linux@8e7715193e5a s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute
gregkh/linux@2c5c0f4dc8cc s390/stackleak: Fix __stackleak_poison() inline assembly constraint
gregkh/linux@3e0619a2a61b s390/xor: Fix xor_xc_2() inline assembly constraints
gregkh/linux@1b3ff4d88b50 mptcp: pm: in-kernel: always set ID as avail when rm endp
gregkh/linux@268fd5502281 net: stmmac: remove support for lpi_intr_o
gregkh/linux@fbab8c08e1a6 binfmt_misc: restore write access before closing files opened by open_exec()
gregkh/linux@8c1befea57db sched/fair: Fix pelt clock sync when entering idle
gregkh/linux@d1365d2abfaf f2fs: zone: fix to avoid inconsistence in between SIT and SSA
gregkh/linux@3da45ec1e485 rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
gregkh/linux@8af210df4f71 platform/x86/amd/pmc: Add support for Van Gogh SoC
gregkh/linux@9c05cd8f4232 x86/uprobes: Fix XOL allocation failure for 32-bit tasks
gregkh/linux@1b24d3e8792b drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
gregkh/linux@2e147aa3169b drm/exynos: vidi: fix to avoid directly dereferencing user pointer
gregkh/linux@21ca24ba51a2 drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
gregkh/linux@e1903358b215 drm/amdgpu: Add basic validation for RAS header
gregkh/linux@ce63943f9bce l2tp: do not use sock_hold() in pppol2tp_session_get_sock()
gregkh/linux@da249eb3206c drm/amd/pm: Use pm_display_cfg in legacy DPM (v2)
gregkh/linux@b3367ee3e557 drm/amd/display: Add pixel_clock to amd_pp_display_configuration
gregkh/linux@ec2b34acb189 net: dsa: properly keep track of conduit reference
gregkh/linux@0643aa246819 bpf: Forget ranges when refining tnum after JSET
gregkh/linux@2cbef9ea5a0a net: fix segmentation of forwarding fraglist GRO
gregkh/linux@e19201b0c67d net: gso: fix tcp fraglist segmentation after pull from frag_list
gregkh/linux@1f2b859225eb net: add support for segmenting TCP fraglist GSO packets
gregkh/linux@9b03768037d9 tracing: Add recursion protection in kernel stack trace recording
gregkh/linux@eba0c75670c0 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
gregkh/linux@33743ec6679a riscv: Sanitize syscall table indexing under speculation
gregkh/linux@4357e02cafab btrfs: do not strictly require dirty metadata threshold for metadata writepages
gregkh/linux@bfc717be833f iomap: allocate s_dio_done_wq for async reads as well
gregkh/linux@a426f29ac3fa rxrpc: Fix data-race warning and potential load/store tearing
gregkh/linux@fc3454a20bef x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
gregkh/linux@03c29d6d3719 x86/sev: Harden #VC instruction emulation somewhat
gregkh/linux@f69fec628756 ipv6: use RCU in ip6_xmit()
gregkh/linux@897d9006e75f dm-verity: disable recursive forward error correction
gregkh/linux@0464bf75590d rxrpc: Fix recvmsg() unconditional requeue
gregkh/linux@1b0edd6022a3 ext4: always allocate blocks only from groups inode can use
gregkh/linux@90336fc3d6f5 eth: bnxt: always recalculate features after XDP clearing, fix null-deref
gregkh/linux@1e3769aa0946 usb: typec: ucsi: Move unregister out of atomic section
gregkh/linux@c57387d447a2 pNFS: Fix a deadlock when returning a delegation during open()
gregkh/linux@a4810f8beb01 NFS: Fix a deadlock involving nfs_release_folio()
gregkh/linux@1562138b9cab nfs: pass explicit offset/count to trace events
gregkh/linux@815db2363e51 dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
gregkh/linux@64d8abd8c530 btrfs: fix NULL dereference on root when tracing inode eviction
gregkh/linux@54322d95309d arm64: mm: Don't remap pgtables for allocate vs populate
gregkh/linux@6a36c8e88af7 arm64: mm: Batch dsb and isb when populating pgtables
gregkh/linux@37413d064396 arm64: mm: Don't remap pgtables per-cont(pte|pmd) block
gregkh/linux@7d115eb231a6 net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz
gregkh/linux@9dcd86cb22e1 btrfs: always fallback to buffered write if the inode requires checksum
gregkh/linux@dbc4e10619ed ext4: fix dirtyclusters double decrement on fs shutdown
gregkh/linux@db489778e6f2 f2fs: fix to avoid migrating empty section
gregkh/linux@5d305a95130a net/tcp-md5: Fix MAC comparison to be constant-time
gregkh/linux@307afccb751f ksmbd: Compare MACs in constant time
gregkh/linux@946054b773ed smb: client: Compare MACs in constant time
gregkh/linux@26a29582980b xfs: ensure dquot item is deleted from AIL only after log shutdown
gregkh/linux@50c0e03072fc xfs: fix integer overflow in bmap intent sort comparator
gregkh/linux@2bfc83cee05f crypto: atmel-sha204a - Fix OOM ->tfm_count leak
gregkh/linux@0629a1a187e4 cifs: open files should not hold ref on superblock
gregkh/linux@0a47c3889fcd net: macb: Shuffle the tx ring before enabling tx
gregkh/linux@0bc70491e466 drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output
gregkh/linux@920467466d2d drm/msm: Fix dma_free_attrs() buffer size
gregkh/linux@fec5c70b82af ksmbd: Don't log keys in SMB3 signing and encryption key generation
gregkh/linux@d1cdf0c63947 iomap: reject delalloc mappings during writeback
gregkh/linux@0ba544dacec2 mm/kfence: fix KASAN hardware tag faults during late enablement
gregkh/linux@816fa1dfae45 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
gregkh/linux@5d1e72015b90 KVM: SVM: Add a helper to look up the max physical ID for AVIC
gregkh/linux@32ca7117e153 KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids
gregkh/linux@d146f2775804 usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
gregkh/linux@c24c06ed1849 can: gs_usb: gs_can_open(): always configure bitrates before starting device
gregkh/linux@dfc314d7c767 net/sched: act_gate: snapshot parameters with RCU on replace
gregkh/linux@0be8c9627556 kbuild: Leave objtool binary around with 'make clean'
gregkh/linux@2d53b863b401 selftests: mptcp: join: check RM_ADDR not sent over same subflow
gregkh/linux@1ec68e2096ef selftests: mptcp: add a check for 'add_addr_accepted'
gregkh/linux@05799c2f1ca5 mptcp: pm: in-kernel: always mark signal+subflow endp as used
gregkh/linux@a29641dc1267 mptcp: pm: avoid sending RM_ADDR over same subflow
gregkh/linux@7f3b7dc8c6ca drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink
gregkh/linux@c33523b8fd2d net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
gregkh/linux@71511dae56a7 gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL
gregkh/linux@f9f1660b7ffc x86/sev: Allow IBPB-on-Entry feature for SNP guests
gregkh/linux@c8ddb2d30d03 platform/x86: hp-bioscfg: Support allocations of larger data
gregkh/linux@3c5c818c78b0 wifi: libertas: fix use-after-free in lbs_free_adapter()
gregkh/linux@cf29329a13df ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
gregkh/linux@ca049ef5c8c7 gve: defer interrupt enabling until NAPI registration
gregkh/linux@212b9632718c drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD
gregkh/linux@3161ae587816 i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor
gregkh/linux@0911fd8e400e i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort
gregkh/linux@dcd66a0c0388 i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors
gregkh/linux@5c485bc32551 iio: imu: inv_icm42600: fix odr switch to the same value
gregkh/linux@27c324ef1638 iio: gyro: mpu3050-i2c: fix pm_runtime error handling
gregkh/linux@2a86a396aa00 iio: gyro: mpu3050-core: fix pm_runtime error handling
gregkh/linux@10ea2df061f3 iio: buffer: Fix wait_queue not being removed
gregkh/linux@dd7b7093bb77 iio: chemical: bme680: Fix measurement wait duration calculation
gregkh/linux@342e5f67fb99 iio: potentiometer: mcp4131: fix double application of wiper shift
gregkh/linux@dcdf1e92674e iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
gregkh/linux@5a3952ba82f8 iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas()
gregkh/linux@fa87bb35b917 iio: frequency: adf4377: Fix duplicated soft reset mask
gregkh/linux@8f9fca12f2f3 iio: dac: ds4424: reject -128 RAW value
gregkh/linux@fa6fd9aec721 btrfs: abort transaction on failure to update root in the received subvol ioctl
gregkh/linux@40f7c69eb00d smb: client: fix iface port assignment in parse_server_interfaces
gregkh/linux@438e77435aee smb: client: fix in-place encryption corruption in SMB2_write()
gregkh/linux@dcd1f1321034 smb: client: fix atomic open with O_DIRECT & O_SYNC
gregkh/linux@2ca6bdf449b1 lib/bootconfig: check bounds before writing in __xbc_open_brace()
gregkh/linux@bbdb80f29ee9 lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after()
gregkh/linux@f59193807211 x86/apic: Disable x2apic on resume if the kernel expects so
gregkh/linux@35e3ec8e589b scsi: core: Fix error handling for scsi_alloc_sdev()
gregkh/linux@cc7d44c59ea5 lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error
gregkh/linux@b373ff56ed2d s390/dasd: Copy detected format information to secondary device
gregkh/linux@3a67baa8eec4 s390/dasd: Move quiesce state with pprc swap
gregkh/linux@41e91dff2d39 xfs: fix undersized l_iclog_roundoff values
gregkh/linux@eaaaa3abbb20 cifs: make default value of retrans as zero
gregkh/linux@e9311e199ac6 tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G
gregkh/linux@aeb7255531ba drm/i915: Fix potential overflow of shmem scatterlist length
gregkh/linux@624f991cac21 drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding
gregkh/linux@2550d63cc350 drm/amd: Set num IP blocks to 0 if discovery fails
gregkh/linux@c658c1c85ec2 drm/amdgpu: Fix use-after-free race in VM acquire
gregkh/linux@3704ac6a0d9a net: dsa: microchip: Fix error path in PTP IRQ setup
gregkh/linux@81431da77792 net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
gregkh/linux@599625881978 net: ncsi: fix skb leak in error paths
gregkh/linux@302fef75512b ksmbd: fix use-after-free by using call_rcu() for oplock_info
gregkh/linux@b720c84087cb smb: server: fix use-after-free in smb2_open()
gregkh/linux@bf4d66d72e4a ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
gregkh/linux@d156b1c24f72 pmdomain: bcm: bcm2835-power: Fix broken reset status read
gregkh/linux@57e35502faa9 parisc: Check kernel mapping earlier at bootup
gregkh/linux@344fde7a3dc0 parisc: Fix initial page table creation for boot
gregkh/linux@52db5ef163c9 hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
gregkh/linux@7003352d4327 arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation
gregkh/linux@fad178ae8949 nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
gregkh/linux@5699359529c6 parisc: Increase initial mapping to 64 MB with KALLSYMS
gregkh/linux@f3ca45673dab batman-adv: Avoid double-rtnl_lock ELP metric worker
gregkh/linux@422b4524320c tracing: Fix syscall events activation by ensuring refcount hits zero
gregkh/linux@9298b0806923 ice: fix retry for AQ command 0x06EE
gregkh/linux@5138cd978bab net: mana: Ring doorbell at 4 CQ wraparounds
gregkh/linux@1a6da3dbb998 media: dvb-net: fix OOB access in ULE extension header tables
gregkh/linux@768f25613a9f staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
gregkh/linux@740bca8bbdb7 staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
gregkh/linux@627cf4d1f0ea ixgbevf: fix link setup issue
gregkh/linux@aac3ac27e6da ice: reintroduce retry mechanism for indirect AQ
gregkh/linux@1fc8c3a0d249 irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports
gregkh/linux@3cfdf8d27b66 device property: Allow secondary lookup in fwnode_get_next_child_node()
gregkh/linux@54f2f0591216 drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used
gregkh/linux@98310fe3a2a7 drm/bridge: samsung-dsim: Fix memory leak in error path
gregkh/linux@f3333543326c Revert "tcpm: allow looking for role_sw device in the main node"
gregkh/linux@70c78429ef38 scsi: hisi_sas: Fix NULL pointer exception during user_scan()
gregkh/linux@8be15087d037 scsi: hisi_sas: Use macro instead of magic number
gregkh/linux@228c626df8d5 scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
gregkh/linux@a6a894413b04 scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
gregkh/linux@069307ae8cb9 i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach
gregkh/linux@7d86de3847c5 time/jiffies: Mark jiffies_64_to_clock_t() notrace
gregkh/linux@657dc653b06a ceph: fix memory leaks in ceph_mdsc_build_path()
gregkh/linux@b3f5513141ec ceph: fix i_nlink underrun during async unlink
gregkh/linux@59c7bf668c20 libceph: admit message frames only in CEPH_CON_S_OPEN state
gregkh/linux@5f2806684b05 libceph: Use u32 for non-negative values in ceph_monmap_decode()
gregkh/linux@50156622eb08 libceph: prevent potential out-of-bounds reads in process_message_header()
gregkh/linux@3e2e36e9b9f3 libceph: reject preamble if control segment is empty
gregkh/linux@8bb87547e92d libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
gregkh/linux@8b6767e4141b kprobes: avoid crash when rmmod/insmod after ftrace killed
gregkh/linux@a360d3815aae tipc: fix divide-by-zero in tipc_sk_filter_connect()
gregkh/linux@a8e9cab16771 ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start
gregkh/linux@270277c2ab63 mmc: core: Avoid bitfield RMW for claim/retune flags
gregkh/linux@d8f20b282418 mm/kfence: disable KFENCE upon KASAN HW tags enablement
gregkh/linux@f36ab071abd0 mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index()
gregkh/linux@b88ce81232bb mm/tracing: rss_stat: ensure curr is false from kthread context
gregkh/linux@155f471e38aa usb: image: mdc800: kill download URB on timeout
gregkh/linux@e7b3d154eb08 usb: mdc800: handle signal and read racing
gregkh/linux@9c6159d5b72d usb: renesas_usbhs: fix use-after-free in ISR during device removal
gregkh/linux@4ee3062bf2c9 usb: class: cdc-wdm: fix reordering issue in read code path
gregkh/linux@659c0c7d50a4 USB: core: Limit the length of unkillable synchronous timeouts
gregkh/linux@39bd4097292f USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
gregkh/linux@fc26e98b6cb8 USB: usbcore: Introduce usb_bulk_msg_killable()
gregkh/linux@2872b67951fe usb: roles: get usb role switch from parent only for usb-b-connector
gregkh/linux@52950203880b usb: cdc-acm: Restore CAP_BRK functionnality to CH343
gregkh/linux@24aa4caf7f95 usb: core: don't power off roothub PHYs if phy_set_mode() fails
gregkh/linux@19ef3da0a82d usb: misc: uss720: properly clean up reference in uss720_probe()
gregkh/linux@f1c8b8183abc usb: dwc3: pci: add support for the Intel Nova Lake -H
gregkh/linux@939e3d17b843 usb: yurex: fix race in probe
gregkh/linux@b2dd9abf8c06 usb: xhci: Prevent interrupt storm on host controller error (HCE)
gregkh/linux@2e2baa8fb5aa usb: xhci: Fix memory leak in xhci_disable_slot()
gregkh/linux@2f2418efd495 USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed
gregkh/linux@9105f4d74762 usb/core/quirks: Add Huawei ME906S-device to wakeup quirk
gregkh/linux@551f82df759c USB: add QUIRK_NO_BOS for video capture several devices
gregkh/linux@ad4394f269dc KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC
gregkh/linux@22bd6fea06bc ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA
gregkh/linux@af834b026bfc net: usb: lan78xx: skip LTM configuration for LAN7850
gregkh/linux@2aaf0a7be0b8 net: usb: lan78xx: fix TX byte statistics for small packets
gregkh/linux@e94d81319259 net: usb: lan78xx: fix silent drop of packets with checksum errors
gregkh/linux@c5c5a6c53cf3 ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
gregkh/linux@629cf09464cf ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
gregkh/linux@3dfd1328c052 cgroup: fix race between task migration and iteration
gregkh/linux@343d4b4a21a5 Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on"
gregkh/linux@ce0caaed5940 usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()
gregkh/linux@3e2f1628faa3 octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status
gregkh/linux@e4a4ca0b69c5 octeontx2-af: devlink health: use retained error fmsg API
gregkh/linux@fa3183e7c748 octeontx2-af: devlink: fix NIX RAS reporter recovery condition
gregkh/linux@cf6099ef493b net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
gregkh/linux@764039ff6515 ASoC: detect empty DMI strings
gregkh/linux@35c7624d30cb ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
gregkh/linux@e15b56da10b5 ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()
gregkh/linux@0a1fc25deaba e1000/e1000e: Fix leak in DMA error cleanup
gregkh/linux@e611b36efca1 i40e: fix src IP mask checks and memcpy argument names in cloud filter
gregkh/linux@628773eba024 nvme-pci: Fix race bug in nvme_poll_irqdisable()
gregkh/linux@83e6edd63583 nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
gregkh/linux@f691272c3e8c sched: idle: Make skipping governor callbacks more consistent
gregkh/linux@ac8f2dfcecbd regulator: pca9450: Correct interrupt type
gregkh/linux@28986d1c093f regulator: pca9450: Make IRQ optional
gregkh/linux@540803559993 netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
gregkh/linux@4a1f6ee69267 netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
gregkh/linux@47b1c5d1b094 netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
gregkh/linux@9b94f0e42ed2 netfilter: x_tables: guard option walkers against 1-byte tail reads
gregkh/linux@0a55d62cdb62 netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
gregkh/linux@61243ff7e757 amd-xgbe: prevent CRC errors during RX adaptation with AN disabled
gregkh/linux@df65ae0f1330 amd-xgbe: fix link status handling in xgbe_rx_adaptation
gregkh/linux@86f5334fcb48 mctp: route: hold key->lock in mctp_flow_prepare_output()
gregkh/linux@a3a1ea5d1f8d can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value
gregkh/linux@d7900a43b0a3 mctp: i2c: fix skb memory leak in receive path
gregkh/linux@8460187b4852 serial: caif: hold tty->link reference in ldisc_open and ser_release
gregkh/linux@bba6c0806a8c net: sfp: improve Huawei MA5671a fixup
gregkh/linux@17f69ee2ed08 net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick
gregkh/linux@2369830617a5 net: sfp: improve Nokia GPON sfp fixup
gregkh/linux@783025a3babb net: sfp: re-implement ignoring the hardware TX_FAULT signal
gregkh/linux@d9744892b8ed ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays
gregkh/linux@e03f8d141911 ASoC: simple-card-utils: use __free(device_node) for device node
gregkh/linux@317a9298c54b ASoC: soc-core: flush delayed work before removing DAIs and widgets
gregkh/linux@8b76136bd446 ASoC: soc-core: drop delayed_work_pending() check before flush
gregkh/linux@59b06d8b9bdb net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
gregkh/linux@383b37c04a48 net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
gregkh/linux@957d2a58f7f8 net/mlx5: Fix deadlock between devlink lock and esw->wq
gregkh/linux@87db2efa8327 net/mlx5: Query to see if host PF is disabled
gregkh/linux@0e4dd5078b0c net/mlx5: IFC updates for disabled host PF
gregkh/linux@11762a893ffc bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states
gregkh/linux@43723dff1a59 drm/msm/dsi: fix pclk rate calculation for bonded dsi
gregkh/linux@7c370f2cb7fc drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations
gregkh/linux@c58dcaac49b6 net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets
gregkh/linux@74c39a47856b xprtrdma: Decrement re_receiving on the early exit paths
gregkh/linux@2f91ef68d0ed smb/server: Fix another refcount leak in smb2_open()
gregkh/linux@fd4ff8c64639 powerpc: 83xx: km83xx: Fix keymile vendor prefix
gregkh/linux@a971ce3a39e5 remoteproc: mediatek: Unprepare SCP clock during system suspend
gregkh/linux@f3394234b849 remoteproc: sysmon: Correct subsys_name_len type in QMI request
gregkh/linux@80bc3c57dd32 powerpc/uaccess: Fix inline assembly for clang build on PPC32
gregkh/linux@9e5df7e19c44 ALSA: usb-audio: Check max frame size for implicit feedback mode, too
gregkh/linux@8d66e46ff0f4 ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0
gregkh/linux@32af15506450 scsi: ufs: core: Fix shift out of bounds when MAXQ=32
gregkh/linux@0614f5618c24 scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()
gregkh/linux@7b640a732689 ASoC: cs42l43: Report insert for exotic peripherals
gregkh/linux@f43a420065f0 ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table
gregkh/linux@80e35a0a8ab5 scsi: ses: Fix devices attaching to different hosts
gregkh/linux@486519660bd9 ACPI: OSI: Add DMI quirk for Acer Aspire One D255
gregkh/linux@b006c61a5d97 wifi: mac80211: set default WMM parameters on all links
gregkh/linux@d7963d6997fe unshare: fix unshare_fs() handling
gregkh/linux@7da755e0d02e scsi: mpi3mr: Add NULL checks when resetting request and reply queues
gregkh/linux@5bb47c03024e ACPI: PM: Save NVS memory on Lenovo G70-35
gregkh/linux@e7919a293f9b scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
gregkh/linux@ae10787d955f apparmor: fix race between freeing data and fs accessing it
gregkh/linux@6ef1f2926c41 apparmor: fix race on rawdata dereference
gregkh/linux@f90e3ecd9e1e apparmor: fix differential encoding verification
gregkh/linux@17debf558602 apparmor: fix unprivileged local user can do privileged policy management
gregkh/linux@55ef2af7490a apparmor: Fix double free of ns_name in aa_replace_profiles()
gregkh/linux@7c7cf05e0606 apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
gregkh/linux@5a184f7cbdea apparmor: fix side-effect bug in match_char() macro usage
gregkh/linux@3f8699b3ee0c apparmor: fix: limit the number of levels of policy namespaces
gregkh/linux@33959a491e9f apparmor: replace recursive profile removal with iterative approach
gregkh/linux@663ce34786e7 apparmor: fix memory leak in verify_header
gregkh/linux@07cf6320f40e apparmor: validate DFA start states are in bounds in unpack_pdb
gregkh/linux@7f4d6a5d3429 net: tcp: accept old ack during closing
gregkh/linux@5a110ddcc99b net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
gregkh/linux@59c15b9cc453 tracing: Add NULL pointer check to trigger_data_free()
gregkh/linux@c7919c1c1d80 selftest/arm64: Fix sve2p1_sigill() to hwcap test
gregkh/linux@a0fb59f527d0 xdp: produce a warning when calculated tailroom is negative
gregkh/linux@d5f7daed130c i40e: use xdp.frame_sz as XDP RxQ info frag_size
gregkh/linux@7b9c0ee7fed9 i40e: fix registering XDP RxQ info
gregkh/linux@183f940bdf90 xsk: introduce helper to determine rxq->frag_size
gregkh/linux@8701504563fa xdp: use modulo operation to calculate XDP frag tailroom
gregkh/linux@5b1449301ca0 net/sched: act_ife: Fix metalist update behavior
gregkh/linux@b299121e7453 net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
gregkh/linux@5f93e6b4d12b net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
gregkh/linux@a12cdaa3375f net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
gregkh/linux@29629dd7d373 net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
gregkh/linux@3cdb52d6eba0 net: stmmac: Fix error handling in VLAN add and delete paths
gregkh/linux@722a28b635ec nfc: rawsock: cancel tx_work before socket teardown
gregkh/linux@edc188322caa nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback
gregkh/linux@dcbcccfc5195 nfc: nci: free skb on nci_transceive early error paths
gregkh/linux@f7d8b5d649dd net: nfc: nci: Fix zero-length proprietary notifications
gregkh/linux@dbd58b0730aa net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
gregkh/linux@e42ff5abbd14 nvme: fix memory allocation in nvme_pr_read_keys()
gregkh/linux@be3b61ebcafe nvme: reject invalid pr_read_keys() num_keys values
gregkh/linux@5d53fe502ef4 drm/sched: Fix kernel-doc warning for drm_sched_job_done()
gregkh/linux@0c3dce09e8ef amd-xgbe: fix sleep while atomic on suspend/resume
gregkh/linux@581800298313 ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
gregkh/linux@db93ff008d2e smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info()
gregkh/linux@99acd1ea3499 smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op()
gregkh/linux@9b02c5c4147f bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
gregkh/linux@4bb55e430d82 bpf: export bpf_link_inc_not_zero.
gregkh/linux@39959a7d3efe xen/acpi-processor: fix _CST detection using undersized evaluation buffer
gregkh/linux@8babb2714033 net/rds: Fix circular locking dependency in rds_tcp_tune
gregkh/linux@11fc15378e87 indirect_call_wrapper: do not reevaluate function pointer
gregkh/linux@7ae7b093b7db wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
gregkh/linux@a6605f619131 wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
gregkh/linux@aca4c9e4901b wifi: wlcore: Fix a locking bug
gregkh/linux@78bb63bbabb3 wifi: cw1200: Fix locking in error paths
gregkh/linux@3bf4ee25f051 octeon_ep: avoid compiler and IQ/OQ reordering
gregkh/linux@4818b80d20de octeon_ep: Relocate counter updates before NAPI
gregkh/linux@5c262bd0e393 bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
gregkh/linux@f8db044a0a47 net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value
gregkh/linux@14cecde3eb07 kunit: tool: copy caller args in run_kernel to prevent mutation
gregkh/linux@eb5632fae6a3 rust: kunit: fix warning when !CONFIG_PRINTK
gregkh/linux@b73832292cd9 can: mcp251x: fix deadlock in error path of mcp251x_open
gregkh/linux@70e951afad4c can: bcm: fix locking for bcm_op runtime updates
gregkh/linux@b4d1e6d27f93 amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds
gregkh/linux@622062f24644 atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
gregkh/linux@c7becfe3e604 dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
gregkh/linux@420bc92cc966 dpaa2-switch: do not clear any interrupts automatically
gregkh/linux@fb64be8e20dc xsk: Fix zero-copy AF_XDP fragment drop
gregkh/linux@5172adf9efb8 xsk: Fix fragment node deletion to prevent buffer leak
gregkh/linux@eb66c67b0847 xsk: s/free_list_node/list_node/
gregkh/linux@560c974b7ccd xsk: Get rid of xdp_buff_xsk::xskb_list_node
gregkh/linux@4e58b99c3c33 net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table
gregkh/linux@391396b5052d drm/solomon: Fix page start when updating rectangle in page addressing mode
gregkh/linux@352d940bcdbd drm/ssd130x: Replace .page_height field in device info with a constant
gregkh/linux@3327bb9d474d drm/ssd130x: Store the HW buffer in the driver-private CRTC state
gregkh/linux@be3079b7a328 drm/ssd130x: Use bool for ssd130x_deviceinfo flags
gregkh/linux@9328cc4e511c e1000e: clear DPG_EN after reset to avoid autonomous power-gating
gregkh/linux@337ecf555a4b hwmon: (it87) Check the it87_lock() return value
gregkh/linux@95b14ecc5688 pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
gregkh/linux@cc06e3f73390 platform/x86: thinkpad_acpi: Fix errors reading battery thresholds
gregkh/linux@896449ad9053 pinctrl: equilibrium: fix warning trace on load
gregkh/linux@27fad3a507d6 pinctrl: equilibrium: rename irq_chip function callbacks
gregkh/linux@70cde1f24ffb hwmon: (aht10) Fix initialization commands for AHT20
gregkh/linux@166678027ad4 hwmon: (aht10) Add support for dht20
gregkh/linux@cc7f6f0a2666 ARM: clean up the memset64() C wrapper
gregkh/linux@ec312cb9bd97 selftests: mptcp: join: check removing signal+subflow endp
gregkh/linux@047de213219d selftests: mptcp: more stable simult_flows tests
gregkh/linux@7c01b680beaf scsi: core: Fix refcount leak for tagset_refcnt
gregkh/linux@3990f352bb0a smb: client: Don't log plaintext credentials in cifs_set_cifscreds
gregkh/linux@f65c92e81cb4 smb: client: fix broken multichannel with krb5+signing
gregkh/linux@874c47503e0f smb: client: fix cifs_pick_channel when channels are equally loaded
gregkh/linux@6f1d1614f841 drbd: fix null-pointer dereference on local read error
gregkh/linux@e91d8d6565b7 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
gregkh/linux@6b847d65f5b0 Squashfs: check metadata block offset is within range
gregkh/linux@e8ef82cb6443 scsi: target: Fix recursive locking in __configfs_open_file()
gregkh/linux@7dbffffd5761 net/sched: ets: fix divide by zero in the offload path
gregkh/linux@1b1fac4c7a3a RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
gregkh/linux@d0148965dbca IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
gregkh/linux@22a9adea7e26 wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
gregkh/linux@650981e718e6 wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration
gregkh/linux@fa18639deab4 wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
gregkh/linux@129c8bb320a7 wifi: radiotap: reject radiotap with unknown bits
gregkh/linux@a0c6ae2ea845 ALSA: usb-audio: Use correct version for UAC3 header validation
gregkh/linux@cf48c2d1db3a platform/x86: dell-wmi: Add audio/mic mute key codes
gregkh/linux@411ba3cd837f platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
gregkh/linux@6a25e2527928 x86/efi: defer freeing of boot services memory
gregkh/linux@6e330889e6c8 HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
gregkh/linux@888f164453f2 can: usb: f81604: handle bulk write errors properly
gregkh/linux@9b740ff5bc64 can: usb: f81604: handle short interrupt urb messages properly
gregkh/linux@f6e90c113c92 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
gregkh/linux@13b646eec3ba can: ucan: Fix infinite loop from zero-length messages
gregkh/linux@54ee74307165 can: usb: f81604: correctly anchor the urb in the read bulk callback
gregkh/linux@1818974e1b5e can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
gregkh/linux@7f8505c7ce3f net: usb: pegasus: validate USB endpoints
gregkh/linux@12c0243de0ae net: usb: kalmia: validate USB endpoints
gregkh/linux@72f90f481c6a net: usb: kaweth: validate USB endpoints
gregkh/linux@d1f6d20b3c26 nfc: pn533: properly drop the usb interface reference on disconnect
gregkh/linux@af050ab44fa1 media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
gregkh/linux@5f8463e43720 eventpoll: Fix integer overflow in ep_loop_check_proc()
gregkh/linux@1b3ae721257e drm/amdgpu: keep vga memory on MacBooks with switchable graphics
gregkh/linux@aa7f9ef72eae drm/amd: Drop special case for yellow carp without discovery
gregkh/linux@4b4eee6d0c00 net: arcnet: com20020-pci: fix support for 2.5Mbit cards
gregkh/linux@efc159492b5c ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314
gregkh/linux@f3cb23e1fcf3 hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race
gregkh/linux@020bfaac6cb4 ALSA: hda/conexant: Add quirk for HP ZBook Studio G4
gregkh/linux@c676ab65519c drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected()
gregkh/linux@d637f6ec149f usb: cdns3: fix role switching during resume
gregkh/linux@3de5fd27af5b usb: cdns3: call cdns_power_is_lost() only once in cdns_resume()
gregkh/linux@3097fb95e244 usb: cdns3: remove redundant if branch
gregkh/linux@7b900a94d716 clk: tegra: tegra124-emc: fix device leak on set_rate()
gregkh/linux@8acf534d5a58 arm64: dts: rockchip: Fix rk356x PCIe range mappings
gregkh/linux@3469112edc5c mfd: omap-usb-host: Fix OF populate on driver rebind
gregkh/linux@1d4ea57730bf mfd: omap-usb-host: Convert to platform remove callback returning void
gregkh/linux@59b76ae68764 mfd: qcom-pm8xxx: Fix OF populate on driver rebind
gregkh/linux@a97ff3b70ff5 mfd: qcom-pm8xxx: Convert to platform remove callback returning void
gregkh/linux@57e83bfbe1e4 ext4: fix e4b bitmap inconsistency reports
gregkh/linux@e33256b2f927 ext4: convert bd_buddy_page to bd_buddy_folio
gregkh/linux@ccab2af6c19f ext4: convert bd_bitmap_page to bd_bitmap_folio
gregkh/linux@ceee57fd7207 ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock()
gregkh/linux@31c4c67dec33 mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
gregkh/linux@c42ffd816c0f mailbox: Allow controller specific mapping using fwnode
gregkh/linux@cfdb216691ec mailbox: Use guard/scoped_guard for con_mutex
gregkh/linux@bef5ecf09d70 mailbox: Use dev_err when there is error
gregkh/linux@5e99cbdfcd15 mailbox: remove unused header files
gregkh/linux@235359afbe0a mailbox: sort headers alphabetically
gregkh/linux@97b60acdca6f mailbox: don't protect of_parse_phandle_with_args with con_mutex
gregkh/linux@49ada773c180 mailbox: Use of_property_match_string() instead of open-coding
gregkh/linux@dc7c9b9d03a5 ext4: drop extent cache when splitting extent fails
gregkh/linux@f0931a5c1700 ext4: drop extent cache after doing PARTIAL_VALID1 zeroout
gregkh/linux@67cdb7bd7442 ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
gregkh/linux@11406eb96a19 ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT
gregkh/linux@ed0096fc86b2 ext4: get rid of ppath in ext4_ext_handle_unwritten_extents()
gregkh/linux@d7b04ea31c6e ext4: get rid of ppath in ext4_ext_convert_to_initialized()
gregkh/linux@c24ce099bea9 ext4: get rid of ppath in ext4_convert_unwritten_extents_endio()
gregkh/linux@147a6a2725b1 ext4: get rid of ppath in ext4_split_convert_extents()
gregkh/linux@cda8a34348d7 ext4: get rid of ppath in ext4_split_extent()
gregkh/linux@58ddae5d77b1 ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1
gregkh/linux@e766534911b3 ext4: subdivide EXT4_EXT_DATA_VALID1
gregkh/linux@ffb68fc57207 ext4: get rid of ppath in ext4_split_extent_at()
gregkh/linux@fb138df7d886 ext4: get rid of ppath in ext4_ext_insert_extent()
gregkh/linux@8f6e910852d8 ext4: get rid of ppath in ext4_ext_create_new_leaf()
gregkh/linux@cafb151eb180 ext4: get rid of ppath in ext4_find_extent()
gregkh/linux@a4a7024448ab bus: omap-ocp2scp: fix OF populate on driver rebind
gregkh/linux@e4be2bd01a76 bus: omap-ocp2scp: Convert to platform remove callback returning void
gregkh/linux@43bb0a265b26 drm/tegra: dsi: fix device leak on probe
gregkh/linux@ec3be7dc9391 KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
gregkh/linux@5e8bf325ed12 KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject
gregkh/linux@ca921be7a117 media: tegra-video: Fix memory leak in _tegra_channel_try_format()
gregkh/linux@7a9c901edcaf media: tegra-video: Use accessors for pad config 'try' fields
gregkh/linux@32a1889f7bb0 KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR
gregkh/linux@469a8a038d8b KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED
gregkh/linux@626ccc6daa7a KVM: x86: Fix KVM_GET_MSRS stack info leak
gregkh/linux@fa0e278a1230 PCI: Use resource_set_range() that correctly sets ->end
gregkh/linux@ffe8617e2e5b resource: Add resource set range and size helpers
gregkh/linux@fffdb0fece19 PCI: Use resource names in PCI log messages
gregkh/linux@bc440d87e655 PCI: Update BAR # and window messages
gregkh/linux@b9eccd59697f memory: mtk-smi: fix device leak on larb probe
gregkh/linux@b16599fedf49 memory: mtk-smi: fix device leaks on common probe
gregkh/linux@646ac65db6c1 memory: mtk-smi: Convert to platform remove callback returning void
gregkh/linux@5f5997339cf0 PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value
gregkh/linux@8a95fb9df110 bpf: Fix stack-out-of-bounds write in devmap
gregkh/linux@dfe079bb6ab3 btrfs: fix compat mask in error messages in btrfs_check_features()
gregkh/linux@a1b82706c233 btrfs: fix warning in scrub_verify_one_metadata()
gregkh/linux@6eac621b2deb btrfs: fix objectid value in error message in check_extent_data_ref()
gregkh/linux@ad567ccfd90c btrfs: fix incorrect key offset in error message in check_dev_extent_item()
gregkh/linux@ab69bf6f8970 btrfs: add support for inserting raid stripe extents
gregkh/linux@cbca08a23773 btrfs: read raid stripe tree from disk
gregkh/linux@fff272a83847 btrfs: add raid stripe tree definitions
gregkh/linux@9895ddc5efec btrfs: move btrfs_extref_hash into inode-item.h
gregkh/linux@d928f8aec88d btrfs: remove btrfs_crc32c wrapper
gregkh/linux@971658d3932b btrfs: move btrfs_crc32c_final into free-space-cache.c
gregkh/linux@37fc52528383 ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put()
gregkh/linux@996d43a72d11 ALSA: pci: hda: use snd_kcontrol_chip()
gregkh/linux@4f8d58123378 perf: Fix _perf_event_overflow() vs perf_remove_from_context() race
gregkh/linux@949e15a8dbde ALSA: usb-audio: Use inclusive terms
gregkh/linux@6ec99e9c90f4 ALSA: usb-audio: Cap the packet size pre-calculations
gregkh/linux@133c3f3dde72 scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume
gregkh/linux@0990188985f5 rseq: Clarify rseq registration rseq_size bound check comment
gregkh/linux@7b2c39f7bada ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices
gregkh/linux@8b00427317ba scsi: pm8001: Fix use-after-free in pm8001_queue_command()
gregkh/linux@be4c63507aca scsi: lpfc: Properly set WC for DPP mapping
gregkh/linux@2edbd1733091 irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
gregkh/linux@0bd326dffd9e drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
gregkh/linux@7e55d0788b36 drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
gregkh/linux@2106a0153b5d drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release
gregkh/linux@4fc00fe35d46 Linux 6.6.129
gregkh/linux@acf7c8972775 Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer"
gregkh/linux@682d8e2f892b Linux 6.6.128
gregkh/linux@0ac0e02183c5 arm64: Fix sampling the "stable" virtual counter in preemptible section
gregkh/linux@18845fb30921 drm/i915/wakeref: clean up INTEL_WAKEREF_PUT flag macros
gregkh/linux@fe418ef21efd NTB: ntb_transport: Fix too small buffer for debugfs_name
gregkh/linux@1cdff5d564fe tracing: Wake up poll waiters for hist files when removing an event
gregkh/linux@e4e5026252b4 tracing: Fix checking of freed trace_event_file for hist files
gregkh/linux@ad058a4317db net: nfc: nci: Fix parameter validation for packet data
gregkh/linux@dc99b25ed4f7 arm64: Force the use of CNTVCT_EL0 in __delay()
gregkh/linux@ad3640895956 x86/kexec: Copy ACPI root pointer address from config table
gregkh/linux@9c735a7d98c9 net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
gregkh/linux@1e300c33ef3c net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
gregkh/linux@6ccfcad1b582 ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
gregkh/linux@c854ab481ece cifs: some missing initializations on replay
gregkh/linux@6a3ce8c8ad80 fbcon: Remove struct fbcon_display.inverse
gregkh/linux@b6de6d481cc2 fbdev: ffb: fix corrupted video output on Sun FFB1
gregkh/linux@3ed019654234 fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
gregkh/linux@e8c5d5f6cd66 fbdev: vt8500lcdfb: fix missing dma_free_coherent()
gregkh/linux@a785c4e2a999 fbcon: check return value of con2fb_acquire_newinfo()
gregkh/linux@632d233cf2e6 ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
gregkh/linux@e075ec9b08f8 atm: fore200e: fix use-after-free in tasklets during device removal
gregkh/linux@9f8ad199844c net: intel: fix PCI device ID conflict between i40e and ipw2200
gregkh/linux@6eb571a37631 io_uring/filetable: clamp alloc_hint to the configured alloc range
gregkh/linux@0f4dcba31bf4 tracing: Fix to set write permission to per-cpu buffer_size_kb
gregkh/linux@ec4445ae9e58 net: macb: Fix tx/rx malfunction after phy link down and up
gregkh/linux@013ac469596a octeontx2-af: CGX: fix bitmap leaks
gregkh/linux@0f85a9655445 net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
gregkh/linux@63afc078bba6 net: ethernet: marvell: skge: remove incorrect conflicting PCI ID
gregkh/linux@710657d3d31f LoongArch: Disable instrumentation for setup_ptwalker()
gregkh/linux@6868bd64dc90 LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT
gregkh/linux@a50371c6ad99 LoongArch: Prefer top-down allocation after arch_mem_init()
gregkh/linux@bb1a54f7f011 LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
gregkh/linux@9efa154609cd ceph: supply snapshot context in ceph_zero_partial_object()
gregkh/linux@103e9d1d43e6 MIPS: rb532: Fix MMIO UART resource registration
gregkh/linux@953953abb66e cifs: Fix locking usage for tcon fields
gregkh/linux@cc3f83b6fb37 staging: rtl8723bs: fix null dereference in find_network
gregkh/linux@369d369ed08f parisc: kernel: replace kfree() with put_device() in create_tree_node()
gregkh/linux@a19b61fdb958 PCI: Fix pci_slot_trylock() error handling
gregkh/linux@65e794574069 net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path
gregkh/linux@4857c37c7ba9 drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
gregkh/linux@7a4fd19c567f tipc: fix RCU dereference race in tipc_aead_users_dec()
gregkh/linux@8e875cf8851b mtd: rawnand: pl353: Fix software ECC support
gregkh/linux@f5da4c24aa6d usb: dwc2: fix resume failure if dr_mode is host
gregkh/linux@76c1123ffccf usb: dwc3: gadget: Move vbus draw to workqueue context
gregkh/linux@aa8d68d97c7f scsi: ufs: core: Flush exception handling work when RPM level is zero
gregkh/linux@d3e837e11ee9 perf/arm-cmn: Reject unsupported hardware configurations
gregkh/linux@9bd98d088f47 remoteproc: imx_rproc: Fix invalid loaded resource table detection
gregkh/linux@d99a08c2b4d5 btrfs: continue trimming remaining devices on failure
gregkh/linux@41a09925ec68 arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
gregkh/linux@1047ca2d8169 PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
gregkh/linux@639265296fe6 Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"
gregkh/linux@cfccd3b8c51b kexec: derive purgatory entry from symbol
gregkh/linux@bb273b68c171 ocfs2: fix reflink preserve cleanup issue
gregkh/linux@649c2e853608 rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
gregkh/linux@81c44a4bc168 mm/highmem: fix kmap_to_page() build error
gregkh/linux@1eabfd2c437b iio: gyro: itg3200: Fix unchecked return value in read_raw
gregkh/linux@9d0ca11258e7 powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()
gregkh/linux@442f5db91317 tools: Fix bitfield dependency failure
gregkh/linux@e4709950acd4 dm mpath: make pg_init_delay_msecs settable
gregkh/linux@542dd6da35eb bus: fsl-mc: fix an error handling in fsl_mc_device_add()
gregkh/linux@65f5a17b6d56 usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
gregkh/linux@22e460b6333a x86/kexec: add a sanity check on previous kernel's ima kexec buffer
gregkh/linux@57c4fd0f4b02 nvmem: Drop OF node reference on nvmem_add_one_cell() failure
gregkh/linux@13c1f31f777c nfsd: fix return error code for nfsd_map_name_to[ug]id
gregkh/linux@d92b8fac294b md/bitmap: fix GPF in write_page caused by resize race
gregkh/linux@142b1bba3299 PCI: endpoint: Fix swapped parameters in pci{primary/secondary}_epc_epf_unlink() functions
gregkh/linux@708e20c66b27 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
gregkh/linux@a6f660d62bc1 xfs: fix remote xattr valuelblk check
gregkh/linux@38613c01f69e xfs: fix freemap adjustments when adding xattrs to leaf blocks
gregkh/linux@ffaf5c99d0f8 xfs: delete attr leaf freemap entries when empty
gregkh/linux@e2e7c275f557 mfd: core: Add locking around 'mfd_of_node_list'
gregkh/linux@01aed2f1d7cb iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
gregkh/linux@a5b1ddbe31f4 media: verisilicon: AV1: Fix tile info buffer size
gregkh/linux@8be53110395e xfs: mark data structures corrupt on EIO and ENODATA
gregkh/linux@297bb8b1db60 selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs
gregkh/linux@aa5f25d55cda mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations
gregkh/linux@8dcff1979381 drm: of: drm_of_panel_bridge_remove(): fix device_node leak
gregkh/linux@52920a853381 media: venus: vdec: restrict EOS addr quirk to IRIS2 only
gregkh/linux@225f2221b422 media: venus: vdec: fix error state assignment for zero bytesused
gregkh/linux@272d44fa7bce arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
gregkh/linux@ed36f6ae0039 dm-unstripe: fix mapping bug when there are multiple targets in a table
gregkh/linux@fb49f209995f dm-integrity: fix recalculation in bitmap mode
gregkh/linux@de7934627cc4 s390/pci: Handle futile config accesses of disabled devices directly
gregkh/linux@1c7c87cf18da clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc()
gregkh/linux@0f0809bfe4fa media: i2c: ov01a10: Fix digital gain range
gregkh/linux@85cc6574f21b clk: clk-apple-nco: Add "apple,t8103-nco" compatible
gregkh/linux@3880e331b0b3 KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
gregkh/linux@e113339cc7d2 soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
gregkh/linux@d451bf970a0c soc: ti: k3-socinfo: Fix regmap leak on probe failure
gregkh/linux@7daf279c674d dm: clear cloned request bio pointer when last clone bio completes
gregkh/linux@2d10a3dad8d6 dm-integrity: fix a typo in the code for write/discard race
gregkh/linux@d03a29cb36d6 media: i2c: ov5647: use our own mutex for the ctrl lock
gregkh/linux@089625cccd7e media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
gregkh/linux@c146483bad46 media: i2c: ov5647: Sensor should report RAW color space
gregkh/linux@e5f4aad2627d media: i2c: ov5647: Correct minimum VBLANK value
gregkh/linux@1f413dac763a media: i2c: ov5647: Correct pixel array offset
gregkh/linux@cabd025182cf media: i2c: ov5647: Initialize subdev before controls
gregkh/linux@c9af1818387f media: ccs: Avoid possible division by zero
gregkh/linux@0c074e80921f media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()
gregkh/linux@8de39720e7a3 media: i2c: ov01a10: Fix test-pattern disabling
gregkh/linux@a14a3cef8017 media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls
gregkh/linux@567a03fe8d08 media: i2c: ov01a10: Fix analogue gain range
gregkh/linux@e2f6d78dc3a8 media: i2c: ov01a10: Fix reported pixel-rate value
gregkh/linux@bb2b049f75f1 media: i2c: ov01a10: Fix the horizontal flip control
gregkh/linux@ccb92def042a media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
gregkh/linux@9cb9eca33d20 media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
gregkh/linux@046c5db6bbba media: cx25821: Add missing unmap in snd_cx25821_hw_params()
gregkh/linux@544215cc37d0 media: cx23885: Add missing unmap in snd_cx23885_hw_params()
gregkh/linux@10ab64f8efc2 media: cx88: Add missing unmap in snd_cx88_hw_params()
gregkh/linux@27c508f61963 media: radio-keene: fix memory leak in error path
gregkh/linux@dd8508820246 media: verisilicon: AV1: Set IDR flag for intra_only frame type
gregkh/linux@8305902ac038 arm64: dts: apple: t8112-j473: Keep the HDMI port powered on
gregkh/linux@b74bf7d0d01f HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
gregkh/linux@3f1b21cc67a1 HID: prodikeys: Check presence of pm->input_ep82
gregkh/linux@243e1165eb03 HID: magicmouse: Do not crash on missing msc->input
gregkh/linux@449004434e1f HID: hid-pl: handle probe errors
gregkh/linux@cad7442ff23b arm64: Disable branch profiling for all arm64 code
gregkh/linux@deb8f6dfd31d KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
gregkh/linux@275e15fd1cf7 ARM: omap2: Fix reference count leaks in omap_control_init()
gregkh/linux@b44eb959159f media: verisilicon: AV1: Fix tx mode bit setting
gregkh/linux@8ad7e6ea46a9 media: verisilicon: AV1: Fix enable cdef computation
gregkh/linux@564fd3a63efc media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
gregkh/linux@12cafc15d246 media: mtk-mdp: Fix error handling in probe function
gregkh/linux@637510cb5bed media: mediatek: encoder: Fix uninitialized scalar variable issue
gregkh/linux@031f2adc1499 dm-verity: correctly handle dm_bufio_client_create() failure
gregkh/linux@a9ddc035050a fpga: dfl: use subsys_initcall to allow built-in drivers to be added
gregkh/linux@d6f5aed42760 ASoC: SOF: ipc4-control: Keep the payload size up to date
gregkh/linux@e1dd7092fa8f ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data
gregkh/linux@59fe643f21b9 ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
gregkh/linux@3a5a4b066329 ASoC: SOF: ipc4-control: If there is no data do not send bytes update
gregkh/linux@955e2d6e5e0a clk: renesas: rzg2l: Select correct div round macro
gregkh/linux@a4be3b90ba9d clk: renesas: rzg2l: Fix intin variable size
gregkh/linux@90c8353f4718 rpmsg: core: fix race in driver_override_show() and use core helper
gregkh/linux@7ef82863d422 netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
gregkh/linux@b690635d4719 dpaa2-switch: validate num_ifs to prevent out-of-bounds write
gregkh/linux@9ac6aebef4b4 net: consume xmit errors of GSO frames
gregkh/linux@175881094756 net/mlx5: Fix missing devlink lock in SRIOV enable error path
gregkh/linux@54fb0577ebe7 net/mlx5: DR, Fix circular locking dependency in dump
gregkh/linux@b324327ff6f4 RDMA/umem: Fix double dma_buf_unpin in failure path
gregkh/linux@35854ed5c40b net: usb: pegasus: enable basic endpoint checking
gregkh/linux@df001db47708 RDMA/efa: Fix typo in efa_alloc_mr()
gregkh/linux@337d7b4112a4 net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
gregkh/linux@52d469319ced RDMA/core: Fix stale RoCE GIDs during netdev events at registration
gregkh/linux@0b7d596da5de tipc: fix duplicate publication key in tipc_service_insert_publ()
gregkh/linux@481ea39b342c Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
gregkh/linux@efcdb4da480c Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ
gregkh/linux@1a138921ce56 Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
gregkh/linux@1d93a369b5aa Bluetooth: hci_qca: Cleanup on all setup failures
gregkh/linux@7247f340f824 Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
gregkh/linux@2983b39f8c0d Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
gregkh/linux@1f40fde29349 wifi: cfg80211: wext: fix IGTK key ID off-by-one
gregkh/linux@322437972f0a net: ethernet: xscale: Check for PTP support properly
gregkh/linux@854f5997df49 net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
gregkh/linux@19f359963ae8 net: usb: lan78xx: scan all MDIO addresses on LAN7801
gregkh/linux@ef9b10a02050 net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
gregkh/linux@166801e49a5b xfrm: always flush state and policy upon NETDEV_UNREGISTER event
gregkh/linux@56d5c0557e53 ipmi: ipmb: initialise event handler read bytes
gregkh/linux@f13e4fe961a7 xfrm: skip templates check for packet offload tunnel mode
gregkh/linux@719918fc88df xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
gregkh/linux@d0559d07afab ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
gregkh/linux@85c9daa1f831 ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
gregkh/linux@a4557dc20df4 rtc: zynqmp: correct frequency value
gregkh/linux@61bd8787c605 drm/amd/display: Remove conditional for shaper 3DLUT power-on
gregkh/linux@0b284a7ce311 btrfs: replace BUG() with error handling in __btrfs_balance()
gregkh/linux@8995fc0e00b3 ALSA: usb-audio: Add sanity check for OOB writes at silencing
gregkh/linux@6a997eb80644 drm/radeon: Add HAINAN clock adjustment
gregkh/linux@5b9af0342402 drm/amdgpu: Add HAINAN clock adjustment
gregkh/linux@c26bde6301f2 ALSA: usb-audio: Update the number of packets properly at receiving
gregkh/linux@d2e92247b24a drm/amdgpu: Adjust usleep_range in fence wait
gregkh/linux@068dee782c8c drm/amd/display: Avoid updating surface with the same surface under MPO
gregkh/linux@1a7f1116c7f8 ARM: 9467/1: mm: Don't use %pK through printk
gregkh/linux@44373b1e9c12 include: uapi: netfilter_bridge.h: Cover for musl libc
gregkh/linux@9f33e83c8393 thermal: int340x: Fix sysfs group leak on DLVR registration failure
gregkh/linux@e1dc45d97975 libceph: define and enforce CEPH_MAX_KEY_LEN
gregkh/linux@a87a445ac1d9 ceph: supply snapshot context in ceph_uninline_data()
gregkh/linux@2f5c626ea792 fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra()
gregkh/linux@ad0d779cdc26 fs/ntfs3: drop preallocated clusters for sparse and compressed files
gregkh/linux@8d8c70b57dbe fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
gregkh/linux@af839013c70a fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
gregkh/linux@68e32694be23 fs: ntfs3: check return value of indx_find to avoid infinite loop
gregkh/linux@6dedf0369f2a MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
gregkh/linux@da08099d5f7a iio: magnetometer: Remove IRQF_ONESHOT
gregkh/linux@53f2152b48d5 iio: Use IRQF_NO_THREAD
gregkh/linux@be5465701341 Revert "mfd: da9052-spi: Change read-mask to write-mask"
gregkh/linux@dc3bc979814b phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
gregkh/linux@afb941338c8e phy: mvebu-cp110-utmi: fix dr_mode property read from dts
gregkh/linux@d476130e53d3 watchdog: imx7ulp_wdt: handle the nowayout option
gregkh/linux@0883ddd583ed binder: don't use %pK through printk
gregkh/linux@1d7120244b54 fix it87_wdt early reboot by reporting running timer
gregkh/linux@4ff5ab3e7141 serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done
gregkh/linux@8311bb40698b staging: rtl8723bs: fix memory leak on failure path
gregkh/linux@03a2f7f9864c misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
gregkh/linux@ece3722169ba misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()
gregkh/linux@c219c20cc357 dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings
gregkh/linux@f89324e2e09d dmaengine: sun6i: Choose appropriate burst length under maxburst
gregkh/linux@f9305dda5015 fpga: of-fpga-region: Fail if any bridge is missing
gregkh/linux@b2bbcaa36c1a usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs
gregkh/linux@32ccda4895ba serial: 8250_dw: handle clock enable errors in runtime_resume
gregkh/linux@52b42c24750a staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure
gregkh/linux@cd496527efa8 soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15)
gregkh/linux@3be7beef4a05 m68k: nommu: fix memmove() with differently aligned src and dest for 68000
gregkh/linux@6ce681cf8082 clk: microchip: core: correct return value on *_get_parent()
gregkh/linux@e2809ad08252 mailbox: sprd: clear delivery flag before handling TX done
gregkh/li...