UPDATE: 6.12.101

[fepitre-bot]

Update to 6.12.101

Details

Changes since previous version:
gregkh/linux@913e7b4459d6 ext4: fix fd leak in EXT4_IOC_MOVE_EXT cross-sb validation
gregkh/linux@588b2d2beb4b Linux 6.12.98
gregkh/linux@41fb1f3c8a71 mm: refactor mm_access() to not return NULL
gregkh/linux@720e8bcaa674 Linux 6.12.99
gregkh/linux@e74443f5db00 posix-cpu-timers: Prevent UAF caused by non-leader exec() race
gregkh/linux@52a355b23cd2 Linux 6.12.100
gregkh/linux@fb4ac6f3ceac platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug
gregkh/linux@16dc07941b8d net: airoha: Move airoha_eth driver in a dedicated folder
gregkh/linux@5003ab61b9b5 net: airoha: Fix skb->priority underflow in airoha_dev_select_queue()
gregkh/linux@8674e2db06cf bpf: Fix ld_{abs,ind} failure path analysis in subprogs
gregkh/linux@e0eed71a182f selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs
gregkh/linux@48cf7918d10c netfilter: nft_counter: serialize reset with spinlock
gregkh/linux@b4a8b6652717 netfilter: nft_quota: use atomic64_xchg for reset
gregkh/linux@d66bedfe97a2 netfilter: nf_tables: revert commit_mutex usage in reset path
gregkh/linux@405e71e27c97 drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker
gregkh/linux@50a25249a635 fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race
gregkh/linux@28cc48efc4f7 seqlock: Cure some more scoped_seqlock() optimization fails
gregkh/linux@58668e3e5bc3 seqlock: Allow KASAN to fail optimizing
gregkh/linux@db8508e48b55 seqlock: Allow UBSAN_ALIGNMENT to fail optimizing
gregkh/linux@0026dbb7de8e KVM: x86: Check for invalid/obsolete root after making MMU pages available
gregkh/linux@0a1fe2017cf1 KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN
gregkh/linux@589419470030 KVM: nVMX: Hide shadow VMCS right after VMCLEAR
gregkh/linux@32b9f89ed9e6 KVM: x86/mmu: Fix use-after-free on vendor module reload
gregkh/linux@834cbca3b12e can: bcm: add locking when updating filter and timer values
gregkh/linux@970caff5c1a6 can: bcm: fix CAN frame rx/tx statistics
gregkh/linux@972fd66bb08f can: bcm: extend bcm_tx_lock usage for data and timer updates
gregkh/linux@1b475c0c72f4 can: bcm: validate frame length in bcm_rx_setup() for RTR replies
gregkh/linux@633bda66fbf3 can: bcm: add missing device refcount for CAN filter removal
gregkh/linux@f749e4564952 can: bcm: fix stale rx/tx ops after device removal
gregkh/linux@656ff69ef235 can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
gregkh/linux@3ff8c24b4210 can: bcm: track a single source interface for ANYDEV timeout/throttle ops
gregkh/linux@43884dc7963b can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
gregkh/linux@a7d90e7b5e75 can: isotp: serialize TX state transitions under so->rx_lock
gregkh/linux@2a4d9e2234c3 dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
gregkh/linux@f10a2c721082 Revert "arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc"
gregkh/linux@5b7e5f84d3d4 gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
gregkh/linux@e472df3c24a5 crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin
gregkh/linux@21fce0dc4464 xprtrdma: Clear receive-side ownership pointers on release
gregkh/linux@ca9f8c09845f Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
gregkh/linux@650d8de1f396 Input: ims-pcu - fix logic error in packet reset
gregkh/linux@de970cfda8e0 soc: qcom: ice: Allow explicit votes on 'iface' clock for ICE
gregkh/linux@9cdb0e36ec7d arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234
gregkh/linux@33c881562c84 firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits
gregkh/linux@6e1bd7f590b0 IB/mad: Drop unmatched RMPP responses before reassembly
gregkh/linux@8dfcc545f809 mtd: mtdswap: remove debugfs stats file on teardown
gregkh/linux@623059b19c66 mtd: nand: mtk-ecc: stop on ECC idle timeouts
gregkh/linux@404a0b986e0b btrfs: reject free space cache with more entries than pages
gregkh/linux@72f673d1c1de btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
gregkh/linux@7201e56e52d1 firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
gregkh/linux@2929df4d5560 RDMA/cma: Fix hardware address comparison length in netevent callback
gregkh/linux@fda078ad6ad7 RDMA/umem: Add pinned revocable dmabuf import interface
gregkh/linux@b5029e91c634 RDMA/irdma: Prevent rereg_mr for non-mem regions
gregkh/linux@bda4ad4c53bd RDMA/erdma: initialize ret for empty receive WR lists
gregkh/linux@f7dd725e82d9 RDMA/hns: Fix potential integer overflow in mhop hem cleanup
gregkh/linux@74912ad168f8 RDMA/siw: publish QP after initialization
gregkh/linux@e1e96aca1bdf mtd: fix double free and WARN_ON in add_mtd_device() error paths
gregkh/linux@5eeef76f650d selftests/alsa: Fix memory leak in find_controls error path
gregkh/linux@a6ecc36b16e7 RDMA/irdma: Prevent overflows in memory contiguity checks
gregkh/linux@43de8a49335e xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
gregkh/linux@94c00391a511 xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
gregkh/linux@308ffdf57556 wifi: cfg80211: cancel sched scan results work on unregister
gregkh/linux@836a19c654dc wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
gregkh/linux@fade308845c8 wifi: mac80211_hwsim: clamp virtio RX length before skb_put
gregkh/linux@ca27a81cd77b wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure
gregkh/linux@e2c55079155a wifi: mac80211: fix fils_discovery double free on alloc failure
gregkh/linux@eaeb1d74a47f wifi: libertas: fix memory leak in helper_firmware_cb()
gregkh/linux@f46f8f9c43fd wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
gregkh/linux@4dae80dd259b wifi: cfg80211: pass net_device to .set_monitor_channel
gregkh/linux@e482dc7072d2 wifi: cfg80211: define and use wiphy guard
gregkh/linux@21512b5f7a74 wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock
gregkh/linux@312c8b9d7836 wifi: nl80211: free RNR data on MBSSID mismatch
gregkh/linux@26f943df9693 wifi: cfg80211: derive S1G beacon TSF from S1G fields
gregkh/linux@dd951feac898 wifi: nl80211: validate nested MBSSID IE blobs
gregkh/linux@ec32f1286091 wifi: cfg80211: validate PMSR measurement type data
gregkh/linux@922d71fbaf99 wifi: cfg80211: validate PMSR FTM preamble range
gregkh/linux@af10a6e90ee9 wifi: cfg80211: reject unsupported PMSR FTM location requests
gregkh/linux@962f755a47d7 wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
gregkh/linux@6bd21ec8549a wifi: brcmfmac: initialize SDIO data work before cleanup
gregkh/linux@84bd907361c5 wifi: cfg80211: bound element ID read when checking non-inheritance
gregkh/linux@c803b3dbcc04 ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop
gregkh/linux@7ec345e63f07 ASoC: amd: ps: fix wrong ACP version string in pci_request_regions()
gregkh/linux@a003082dae79 ASoC: cs42l43: Correct report for forced microphone jack
gregkh/linux@e44c010f20e8 ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup
gregkh/linux@4fa626cfd1b8 firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context
gregkh/linux@5b05ab03efc2 cpufreq: Make cpufreq_update_pressure() fall back to cpuinfo.max_freq
gregkh/linux@3ab32218d718 ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
gregkh/linux@d00705686872 ipv4: fib: free fib_alias with kfree_rcu() on insert error path
gregkh/linux@1801cb20a502 net/iucv: take a reference on the socket found in afiucv_hs_rcv()
gregkh/linux@40a339ca560a udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()
gregkh/linux@866efe8ae8b8 scsi: core: wake eh reliably when using scsi_schedule_eh
gregkh/linux@23d4c50fdc0d ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
gregkh/linux@43d4e99b1b8a ata: sata_dwc_460ex: use platform_get_irq()
gregkh/linux@7cb443599975 ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts
gregkh/linux@8c5de0d8ab68 ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
gregkh/linux@612ee80fcc4c accel/ivpu: Fix wrong register read in LNL failure diagnostics
gregkh/linux@078ba1d99113 ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
gregkh/linux@59fd2f075bca Bluetooth: qca: fix NVM tag length underflow in TLV parser
gregkh/linux@65ce6fe1b921 Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update
gregkh/linux@579faba5ede6 Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
gregkh/linux@f915e74b6f18 Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds
gregkh/linux@069258d5111e Bluetooth: hci_qca: Clear memdump state on invalid dump size
gregkh/linux@377fe3e583e4 smb/client: handle overlapping allocated ranges in fallocate
gregkh/linux@74b08b863639 drm/i915/gt: use correct selftest config symbol
gregkh/linux@3612dccaa22b powerpc/85xx: Add fsl,ifc to common device ids
gregkh/linux@7ba9dbe6d38c powerpc/time: Prepare to stop elapsing in dynticks-idle
gregkh/linux@4cde605b1cca powerpc/vtime: Initialize starttime at boot for native accounting
gregkh/linux@17b7ef6b8611 bpf, sockmap: Reject unhashed UDP sockets on sockmap update
gregkh/linux@5fc0a2a6eeb9 s390/checksum: Fix csum_partial() without vector facility
gregkh/linux@608714defa8e riscv: hwprobe: Avoid uninitialized read in hwprobe_get_cpus()
gregkh/linux@d822dfa84314 can: j1939: fix lockless local-destination check
gregkh/linux@43c780d5ea5a drm/xe/wopcm: fix WOPCM size for LNL+
gregkh/linux@14de709d0d17 smb: move some duplicate definitions to common/cifsglob.h
gregkh/linux@793e1c7041b9 ksmbd: pin conn during async oplock break notification
gregkh/linux@f7550a91ab21 ksmbd: validate compound request size before reading StructureSize2
gregkh/linux@8ac5ae8f5d38 drm/i915/selftests: Fix GT PM sort comparators
gregkh/linux@2200a00ff247 net/sched: act_tunnel_key: Defer dst_release to RCU callback
gregkh/linux@d0a59ba58578 sctp: fix auth_hmacs array size in struct sctp_cookie
gregkh/linux@ad6284ced6a1 mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
gregkh/linux@c07caee449c9 usb: core: sysfs: add lock to bos_descriptors_read()
gregkh/linux@bcde7249d45f wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
gregkh/linux@78d361e60caf usb: core: port: Deattach Type-C connector on component unbind
gregkh/linux@db514511a920 USB: storage: add NO_ATA_1X quirk for Longmai USB Key
gregkh/linux@948cb144a919 usb: chipidea: fix usage_count leak when autosuspend_delay is negative
gregkh/linux@67b589d09a96 usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
gregkh/linux@87bc316dd6fc usb: gadget: f_midi: cancel pending IN work before freeing the midi object
gregkh/linux@e03597ad9494 usb: gadget: printer: fix infinite loop in printer_read()
gregkh/linux@8205a60e7e10 USB: gadget: snps-udc: fix device name leak on probe failure
gregkh/linux@cbdd6d7b988c USB: gadget: fsl-udc: fix device name leak on probe failure
gregkh/linux@fff1059d139e usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
gregkh/linux@f6fc21ec7ccd usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
gregkh/linux@662f6c6c6ff8 usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
gregkh/linux@24506a45b6ae USB: serial: ftdi_sio: add support for E+H FXA291
gregkh/linux@64b687f96947 USB: serial: io_edgeport: cap received transmit credits
gregkh/linux@920734761c48 USB: serial: keyspan_pda: fix data loss on receive throttling
gregkh/linux@9f5fe6e6e403 USB: serial: option: add TDTECH MT5710-CN
gregkh/linux@544b78d2cc48 crypto: rsa-pkcs1pad: Don't WARN on an empty digest
gregkh/linux@f0cd47ace412 Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
gregkh/linux@7731bdf99145 RISC-V: KVM: Serialize virtual interrupt pending state updates
gregkh/linux@c4657f5438fb usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
gregkh/linux@10b0ce629123 wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
gregkh/linux@d6bba659ac30 wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
gregkh/linux@c0aae8d24f5e hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
gregkh/linux@c7757db58957 hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
gregkh/linux@a855f678ba37 hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop
gregkh/linux@a2a15de02059 hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
gregkh/linux@8cb282c34d58 hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop
gregkh/linux@0ca252720f0e watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
gregkh/linux@904367381a92 wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
gregkh/linux@ad54b644f06d wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
gregkh/linux@5176797769cf wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
gregkh/linux@22e05b8ddbcf firewire: net: Fix fragmented datagram reassembly
gregkh/linux@289edc3c7134 wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
gregkh/linux@d70c0a850c21 wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
gregkh/linux@500c36649f27 wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
gregkh/linux@e8a862a3da45 wifi: carl9170: fix OOB read from off-by-two in TX status handler
gregkh/linux@b9dfee5e63ee wifi: carl9170: fix buffer overflow in rx_stream failover path
gregkh/linux@a6a14f9ae48f btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8
gregkh/linux@2a9246a424f4 btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps
gregkh/linux@14a8be942843 btrfs: free mapping node on duplicate reloc root insert
gregkh/linux@0ec45e80a827 ASoC: tas2781: bound firmware description string parsing
gregkh/linux@19129a365d2b ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state()
gregkh/linux@7fea0c89ed39 ALSA: hda: cs35l41: validate and free ACPI mute object
gregkh/linux@533078257871 ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
gregkh/linux@f8dbd9c6122e ASoC: cs35l56: Don't use devres to unregister component
gregkh/linux@c7eb685b904a ASoC: cs35l56: Fix potential probe() deadlock
gregkh/linux@889cfee0d475 ASoC: cs35l56: Use complete_all() to signal init_completion
gregkh/linux@a7fcd7ab6ace wifi: iwlwifi: mvm: validate SAR GEO response payload size
gregkh/linux@76648c663cad wifi: iwlwifi: mvm: fix read in wake packet notification handler
gregkh/linux@9904a4640119 usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
gregkh/linux@9e803a8767ef drivers/virt: pkvm: Fix end calculation in mmio_guard_ioremap_hook()
gregkh/linux@64ed9eb4b92c hwmon: (asus-ec-sensors) fix looping over banks while reading from EC
gregkh/linux@54dd9295e672 hwmon: (asus-ec-sensors) fix EC read intervals
gregkh/linux@492db88a9b58 hwmon: (asus-ec-sensors) add missed handle for ENOMEM
gregkh/linux@285bd4a5f3f1 smb: client: validate DFS referral PathConsumed
gregkh/linux@54cb78eceb4e hwmon: occ: validate poll response sensor blocks
gregkh/linux@81953b85f741 regulator: mt6358: use regmap helper to read fixed LDO calibration
gregkh/linux@400267bab0f4 Bluetooth: btusb: validate Realtek vendor event length
gregkh/linux@43fedd007b81 netlink: specs: rt-link: convert bridge port flag attributes to u8
gregkh/linux@0a052e0808e0 net/packet: avoid fanout hook re-registration after unregister
gregkh/linux@690ce6678277 bonding: fix devconf_all NULL dereference when IPv6 is disabled
gregkh/linux@cfb3ce07b705 rds: drop incoming messages that cross network namespace boundaries
gregkh/linux@5fd54a74bb82 gtp: parse extension headers before reading inner protocol
gregkh/linux@680eecc850d3 dpaa2-switch: put MAC endpoint device on disconnect
gregkh/linux@e23e4a3b9dfd dpaa2-eth: put MAC endpoint device on disconnect
gregkh/linux@93494bd44639 iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()
gregkh/linux@c57d97f38130 wifi: mac80211: tear down new links on vif update error path
gregkh/linux@cfa119aa781c nfp: Check resource mutex allocation
gregkh/linux@b9e2ff70e96a wan: wanxl: Only reset hardware after BAR mapping
gregkh/linux@ad26c75ae257 wifi: mwifiex: bound uAP association event IEs to the event buffer
gregkh/linux@abe5d7962f09 iommu/amd: Bound the early ACPI HID map
gregkh/linux@866a35735e56 iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
gregkh/linux@0423f2b6a1d6 wifi: mac80211: recalculate TIM when a station enters power save
gregkh/linux@727c77c135a7 pds_core: reject component parameter in legacy firmware update
gregkh/linux@ff484dbd9867 amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN
gregkh/linux@5c2f04258be2 net: txgbe: fix FDIR filter leak on remove
gregkh/linux@886e28e14ab6 sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid
gregkh/linux@90d9f3ef2884 pds_core: fix deadlock between reset thread and remove
gregkh/linux@224214eb4182 pds_core: fix use-after-free on workqueue during remove
gregkh/linux@2f13243a6cef pds_core: yield the CPU while waiting for the adminq to drain
gregkh/linux@891bc70046ff pds_core: order completion reads after the ownership check
gregkh/linux@ef194751fed5 pds_core: fix auxiliary device add/del races
gregkh/linux@cc82077a038d pds_core: check for workqueue allocation failure
gregkh/linux@6f0e39d180cd sctp: validate stream count in sctp_process_strreset_inreq()
gregkh/linux@49d15cfab247 net: mctp i3c: clean up notifier and buses if driver register fails
gregkh/linux@4514f0100732 tls: device: push pending open record on splice EOF
gregkh/linux@347c7eea6d49 selftests: af_unix: add USER_NS config
gregkh/linux@2d4bacb4522f selftests: openvswitch: add config file
gregkh/linux@4fc7923871d1 gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
gregkh/linux@3081702ea5ac nexthop: initialize extack in nh_res_bucket_migrate()
gregkh/linux@1ab78af21401 tipc: fix infinite loop in __tipc_nl_compat_dumpit
gregkh/linux@1e608cae1ba0 wifi: mt76: mt7925: guard link STA in decap offload
gregkh/linux@a031f454f14e wifi: mt76: mt7915: guard HE capability lookups
gregkh/linux@2afc2d509886 wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()
gregkh/linux@42288cca984f wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()
gregkh/linux@8b8a079e22ce wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()
gregkh/linux@d9326796a378 wifi: mt76: mt7925: fix crash in reset link replay
gregkh/linux@3e4f848f4a62 wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()
gregkh/linux@d3ac5b35ec85 wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
gregkh/linux@ff7a8b0485b2 ovl: fix trusted xattr escape prefix matching
gregkh/linux@7746d588d42a amt: re-read skb header pointers after every pull
gregkh/linux@6e91392d5d27 amt: make the head writable before rewriting the L2 header
gregkh/linux@5a98c725e7cb net: bridge: vlan: fix vlan range dumps starting with pvid
gregkh/linux@21d48408479a net: hsr: fix memory leak on slave unregistration by removing synced VLANs
gregkh/linux@87392c1e68d2 net: dpaa: fix mode setting
gregkh/linux@28c5fdce9dd9 sctp: auth: verify auth requirement when auth_chunk is NULL
gregkh/linux@28cb5d8d13b4 vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
gregkh/linux@adb475be49aa iomap: correct the range of a partial dirty clear
gregkh/linux@f4013598b694 tipc: fix u16 MTU truncation in media and bearer MTU validation
gregkh/linux@71b096dd8948 drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem
gregkh/linux@fb02180d22a0 net: stmmac: fix l3l4 filter rejecting unsupported offload requests
gregkh/linux@b09bac1c50ad net: stmmac: reset residual action in L3L4 filters on delete
gregkh/linux@ab08ac18dd6a net: stmmac: enable the MAC on link up for all supported speeds
gregkh/linux@9f948e9aede9 net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM
gregkh/linux@376ea2e1942c octeontx2-vf: set TC flower flag on MCAM entry allocation
gregkh/linux@95f52c9bf75b ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup
gregkh/linux@cc92d8e5753d ppp: use IFF_NO_QUEUE in virtual interfaces
gregkh/linux@fa4e1dad10e7 ppp: convert to percpu netstats
gregkh/linux@ff24b5075329 ppp: enable TX scatter-gather
gregkh/linux@d6f3014184c1 ppp: annotate data races in ppp_generic
gregkh/linux@586b938a4983 hinic: remove unused ethtool RSS user configuration buffers
gregkh/linux@f488116df769 net: qrtr: restrict socket creation to the initial network namespace
gregkh/linux@65fbd20d67de dpll: add clock quality level attribute and op
gregkh/linux@dafcc6787f23 net/mlx5: DPLL, Add clock quality level op implementation
gregkh/linux@389309e5a9e4 net/mlx5: Remove newline at the end of a netlink error message
gregkh/linux@1319986a6643 net/mlx5: Refactor EEPROM query error handling to return status separately
gregkh/linux@5be4eebd5a3a net/mlx5: Fix MCIA register buffer overflow on 32 dword reads
gregkh/linux@499f2944cec7 net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule
gregkh/linux@85fb2cbae22b net/mlx5e: Report zero bandwidth for non-ETS traffic classes
gregkh/linux@99c47527c06b net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
gregkh/linux@5da9c9a056f5 octeontx2-pf: tc: fix egress ratelimiting
gregkh/linux@c17d421bee67 net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
gregkh/linux@f7b900930208 ice: allow creating VFs when !CONFIG_ICE_SWITCHDEV
gregkh/linux@653de66d01e2 ice: fix LAG recipe to profile association
gregkh/linux@80fffed08dc1 rds: tcp: unregister sysctl before tearing down listen socket
gregkh/linux@4db67ea7e288 net: airoha: fix ETS channel derivation in airoha_tc_setup_qdisc_ets()
gregkh/linux@cde4d6bcd9b7 bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
gregkh/linux@c82c00264887 drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
gregkh/linux@b90b52308bf3 drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
gregkh/linux@02b0da249c8f drm/imagination: Count paired job fence as dependency in prepare_job()
gregkh/linux@347bc3a6a4d9 drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
gregkh/linux@04d953f50d61 drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers
gregkh/linux@ef0dbcc200c3 drm/dp/mst: fix buffer overflows in sideband chunk accumulation
gregkh/linux@15a986392920 drm/imagination: Fit paired fragment job in the correct CCCB
gregkh/linux@0bcd7675c69a drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
gregkh/linux@db07fe1643b7 drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2)
gregkh/linux@b1f07bf996fe drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older
gregkh/linux@2b70014740b6 drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT
gregkh/linux@2aa9ea2bd514 drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
gregkh/linux@e15c25c7972d drm/nouveau: fix reversed error cleanup order in ucopy functions
gregkh/linux@dacaaeaf8fe0 drm/displayid: fix Tiled Display Topology ID size
gregkh/linux@be3931753066 drm/i915/gem: Add missing nospec on parallel submit slot
gregkh/linux@7d3b88271597 drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()
gregkh/linux@dc5726206b3f drm/radeon: fix r100_copy_blit for large BOs
gregkh/linux@1286d1c9b6be drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds
gregkh/linux@9be3f4bd6f51 drm/imagination: Fix double call to drm_sched_entity_fini()
gregkh/linux@bbebc39a70f6 drm/imagination: Fix user array stride in pvr_set_uobj_array()
gregkh/linux@ce97192087c6 drm/imagination: fix error checking of pvr_vm_context_lookup()
gregkh/linux@1f1f2618e44b drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM
gregkh/linux@49f63f097e22 drm/amdkfd: Use kvcalloc to allocate arrays
gregkh/linux@4622214f0542 drm/amdkfd: Check bounds in allocate_event_notification_slot
gregkh/linux@b88ffe659360 drm/amdkfd: fix 32-bit overflow in CWSR total size calculation
gregkh/linux@3c078cf41f05 drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips
gregkh/linux@a59e493567d1 drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference
gregkh/linux@2757e6e80309 drm/virtio: bound EDID block reads to the response buffer
gregkh/linux@395bf099ef71 drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()
gregkh/linux@e7f31c9a6153 drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
gregkh/linux@b665c1845488 drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
gregkh/linux@28337e5d7df4 drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
gregkh/linux@b238d86e7f43 drm/i915: Return NULL on error in active_instance
gregkh/linux@e7b5694645b0 drm/i915/bios: range check LFP Data Block panel_type2
gregkh/linux@fe16a7e5336a drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()
gregkh/linux@8431a4d7ff95 drm/i915/gem: Do not leak siblings[] on proto context error
gregkh/linux@9923c223d38f drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
gregkh/linux@a322d276f3d1 drm/amd/pm: fix smu14 power limit range calculation
gregkh/linux@323a769c64a1 drm/gfx10: Program DB_RING_CONTROL
gregkh/linux@23142cf03ab7 drm/panthor: return error on truncated firmware
gregkh/linux@9f6b3017a1e1 drm/amdgpu: Fix VFCT bus number matching with soft filter
gregkh/linux@e17a682a707b drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)
gregkh/linux@5182e442e613 drm/amd/display: set new_stream to NULL after release
gregkh/linux@bfe28ce019c2 drm/amd/display: dce100: skip non-DP stream encoders for DP MST
gregkh/linux@05ea6cecade1 drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge
gregkh/linux@2f390b4c8301 drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
gregkh/linux@71779fe8bf40 drm/vmwgfx: Validate vmw_surface_metadata::array_size
gregkh/linux@019e6ad247f7 drm/vc4: Prevent shader BO mappings from becoming writable
gregkh/linux@cd42623d698b media: airspy: Return queued buffers on start_streaming() failure
gregkh/linux@05d612c67b22 media: aspeed: fix missing of_reserved_mem_device_release() on probe failure
gregkh/linux@d0ae60d92f94 media: cec: seco: unregister adapter on IR probe failure
gregkh/linux@378bd9cc837c media: cedrus: clean up media device on probe failure
gregkh/linux@83dfbd30944d media: cedrus: Fix missing cleanup in error path
gregkh/linux@0af8945fcae7 media: cedrus: skip invalid H.264 reference list entries
gregkh/linux@1ee2b2b189dd media: chips-media: wave5: Move src_buf Removal to finish_encode
gregkh/linux@c5ccb01eb110 media: cx231xx: fix devres lifetime
gregkh/linux@83540d86d717 media: cx23885: add ioremap return check and cleanup
gregkh/linux@4bacfda44d36 media: i2c: alvium: fix critical pointer access in alvium_ctrl_init
gregkh/linux@4e4759803eca media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection for overlapping ranges
gregkh/linux@c1e25524045d media: marvell-cam: fix missing pci_disable_device() on remove
gregkh/linux@2cf0171ad594 media: meson: vdec: Fix memory leak in error path of vdec_open
gregkh/linux@bab9d5a67d4d media: msi2500: Return queued buffers on start_streaming() failure
gregkh/linux@99e539fca8c8 media: nuvoton: npcm-video: fix error handling in npcm_video_init()
gregkh/linux@b092d690a9b2 media: nuvoton: npcm-video: fix memory leaks in probe and remove
gregkh/linux@f04ec9860542 media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe
gregkh/linux@c0c8a8a7b3fb media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure
gregkh/linux@211f168fc3c6 media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path
gregkh/linux@ba7e1b06cbda media: nxp: imx8-isi: Fix potential out-of-bounds issues
gregkh/linux@885ee4d244fd media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding
gregkh/linux@8d753c8c37af media: pci: dm1105: Free allocated workqueue
gregkh/linux@acc789b21730 media: pwc: Drain fill_buf on start_streaming() failure
gregkh/linux@5d7cc2634c38 media: pwc: Return queued buffers on start_streaming() failure
gregkh/linux@870b41c3e2ea media: qcom: camss: Fix RDI streaming for CSID GEN2
gregkh/linux@7ef9f1659404 media: radio-si476x: Unregister v4l2_device on probe failure
gregkh/linux@24bef237eef8 media: rtl2832: fix use-after-free in rtl2832_remove()
gregkh/linux@0b08c0403cf6 media: rtl2832_sdr: Return queued buffers on start_streaming() failure
gregkh/linux@e1ef361ee31d media: saa7134: Fix a possible memory leak in saa7134_video_init1
gregkh/linux@6c6f22b7e6cb media: stm32: dcmi: unregister notifier on probe failure
gregkh/linux@a8abecc638a7 media: sun4i-csi: Return queued buffers on start_streaming() failure
gregkh/linux@1c017efcd318 media: tegra-video: vi: fix invalid u32 return value in format lookup
gregkh/linux@7d383357905d media: ti: vpe: unwind v4l2 device registration on probe error
gregkh/linux@8991676539e0 media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()
gregkh/linux@dbaf0e0023e2 media: v4l2-ctrls: validate HEVC active reference counts
gregkh/linux@caea6bc68c92 media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()
gregkh/linux@92eb32d020dc media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming nicely
gregkh/linux@dface5239bc7 media: vb2: use ssize_t for vb2_read/vb2_write
gregkh/linux@0e3702ff358e media: vidtv: fix reference leak on failed device registration
gregkh/linux@726a4880f4c9 media: vimc: fix reference leak on failed device registration
gregkh/linux@fc802c49070a media: vivid: add vivid_update_reduced_fps()
gregkh/linux@abaec6747304 media: vivid: check for vb2_is_busy() when toggling caps
gregkh/linux@4385092a86b9 media: vivid: fix cleanup bugs in vivid_init()
gregkh/linux@3b26a2eeace2 media: vpif_capture: fix OF node reference imbalance
gregkh/linux@24f0cabf1735 ALSA: seq: close a re-opened queue timer in the destructor
gregkh/linux@cd461bcfcdf8 ALSA: timer: drain a slave's callback before its master detaches it
gregkh/linux@996c24377eea ALSA: timer: don't re-enter an instance callback that is still running
gregkh/linux@5a65fd472241 wifi: ath6kl: fix OOB access from firmware ADDBA window size
gregkh/linux@45011e4d9ba3 wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
gregkh/linux@4d410320e8ae wifi: wilc1000: validate assoc response length before subtracting header
gregkh/linux@88c98ef247a3 wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
gregkh/linux@ecf995b82819 wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
gregkh/linux@0c8c4cd0ca60 wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses
gregkh/linux@5a045c2f0fbf wifi: brcmfmac: make release_scratchbuffers idempotent
gregkh/linux@630fdca3f243 staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
gregkh/linux@667fb3bc0d34 staging: rtl8723bs: fix inverted HT40 secondary channel offset
gregkh/linux@a351f68fb248 Bluetooth: hci_sync: Protect UUID list traversal
gregkh/linux@a82a9d3891f5 Bluetooth: RFCOMM: Fix session UAF in set_termios
gregkh/linux@dfc2a00742af exec: fix unsigned loop counter wrap in transfer_args_to_stack()
gregkh/linux@2dd0298905e9 binfmt_misc: set have_execfd only once the interpreter is opened
gregkh/linux@3fabb5d51e6d platform/loongarch: laptop: Explicitly reset bl_powered state when suspend
gregkh/linux@95b3886ba1b8 rust: allow clippy::unwrap_or_default globally
gregkh/linux@c1d6a5a031e9 objtool/rust: add one more noreturn Rust function for Rust 1.99.0
gregkh/linux@65344614a120 LoongArch: Fix oops during single-step debugging
gregkh/linux@4b40e590efb3 LoongArch: Move jump_label_init() before parse_early_param()
gregkh/linux@f18992be262d LoongArch: Retrieve CPU package ID from PPTT when available
gregkh/linux@35b68e24c5a6 cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
gregkh/linux@fff6e5ff0318 firmware: stratix10-svc: fix memory leaks and list corruption bugs
gregkh/linux@d84151567b47 x86/boot/compressed: Disable jump tables
gregkh/linux@086a9ae3c5df comedi: comedi_parport: deal with premature interrupt
gregkh/linux@0338313104a3 uio_hv_generic: Bind to FCopy device by default
gregkh/linux@06f4fc7033ef serial: sc16is7xx: implement gpio get_direction() callback
gregkh/linux@600dcd548fb2 serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
gregkh/linux@c88c030a324c mei: bus: access mei_device under device_lock on cleanup
gregkh/linux@26e27b8dcef1 intel_th: fix MSC output device reference leak
gregkh/linux@4aa3f7d48e91 misc: nsm: only unlock nsm_dev on post-lock error paths
gregkh/linux@1996639f824c misc: nsm: pin the module while the device is open
gregkh/linux@201a01102c52 tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
gregkh/linux@594e1cf3f736 tracing: Fix resource leak on mmiotrace trace_pipe close
gregkh/linux@1355b7db2cb6 tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()
gregkh/linux@37a228fbc70b tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()
gregkh/linux@4ed3968302df tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
gregkh/linux@691858b1ad59 tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()
gregkh/linux@b7afd2a80593 arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
gregkh/linux@739a0353ec1d Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"
gregkh/linux@3cd4bb2f134b mptcp: decrement subflows counter on failed passive join
gregkh/linux@4433ef3e06d2 mptcp: only set DATA_FIN when a mapping is present
gregkh/linux@74e8f3e7114f sctp: don't free the ASCONF's own transport in DEL-IP processing
gregkh/linux@626bda8cfe43 sctp: avoid auth_enable sysctl UAF during netns teardown
gregkh/linux@8ff78591d309 sctp: close UDP tunnel sockets during netns teardown
gregkh/linux@03b417afce19 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
gregkh/linux@8add3a5ea9a4 ceph: fix refcount leak in ceph_readdir()
gregkh/linux@d60de8253c85 libceph: bound get_version reply decode to front len
gregkh/linux@143ba49ead77 libceph: Fix multiplication overflow in decode_new_up_state_weight()
gregkh/linux@3767c9f0c1bb libceph: guard missing CRUSH type name lookup
gregkh/linux@75e82e8944ac libceph: refresh auth->authorizer_buf{,_len} after authorizer update
gregkh/linux@cd0d41bc5696 libceph: Reject monmaps advertising zero monitors
gregkh/linux@826cd1de5802 libceph: reject zero bucket types in crush_decode
gregkh/linux@d3dc8889d39a libceph: remove debugfs files before client teardown
gregkh/linux@a46bfa01e01d amt: fix use-after-free in AMT delayed works
gregkh/linux@b4851556b047 ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP
gregkh/linux@21eaf5594a33 binfmt_elf_fdpic: only honour the first PT_INTERP
gregkh/linux@834ddf899484 fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
gregkh/linux@deff41898a5a fscrypt: Add missing superblock check in find_or_insert_direct_key()
gregkh/linux@90be137813e1 ftrace: Add global mutex to serialize trace_parser access
gregkh/linux@fb4fad9105c8 iomap: fix out-of-bounds bitmap_set() with zero-length range
gregkh/linux@d3e6e1d89a20 iommu/vt-d: Disallow SVA if page walk is not coherent
gregkh/linux@17f78c0c0d41 phonet: pep: fix use-after-free in pep_get_sb()
gregkh/linux@32d10c46bfde vxlan: require CAP_NET_ADMIN in the device netns for changelink
gregkh/linux@44401f7dd994 net: slip: serialize receive against buffer reallocation
gregkh/linux@9de5518fc1fa geneve: require CAP_NET_ADMIN in the device netns for changelink
gregkh/linux@46453b16f38e net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
gregkh/linux@a5bbaddf6985 net/iucv: fix use-after-free of a severed iucv_path
gregkh/linux@c698b2735613 net/mlx5e: Use sender devcom for MPV master-up
gregkh/linux@610678d4be94 net/x25: fix use-after-free in x25_kill_by_neigh()
gregkh/linux@107e1a469f53 net: gro: fix double aggregation of flush-marked skbs
gregkh/linux@67a7614bde31 net: hip04: fix RX buffer leak on build_skb failure
gregkh/linux@557b2fb7db4b proc: Fix broken error paths for namespace links
gregkh/linux@7d517b255f66 ice: fix PTP Call Trace during PTP release
gregkh/linux@2419aa740810 rbd: Reset positive result codes to zero in object map update path
gregkh/linux@243f1614ef2a ksmbd: defer destroy_previous_session() until after NTLM authentication
gregkh/linux@fe2f8d5a77ad ice: reject out-of-range ptype in ice_parser_profile_init
gregkh/linux@7af40b1df6e9 ice: use READ_ONCE() to access cached PHC time
gregkh/linux@7097a0280b17 ila: reload IPv6 header after pskb_may_pull in checksum adjust
gregkh/linux@dd4754194a70 mac802154: hold an interface reference across the scan worker
gregkh/linux@de80808f37d9 mac802154: llsec: reject frames shorter than the authentication tag
gregkh/linux@68819427bc07 mctp: serial: handle zero-length frames to prevent rx buffer overflow
gregkh/linux@fbfa3ad2ad6f openvswitch: fix GSO userspace truncation underflow
gregkh/linux@7e9fbd7f96bc pppoe: reload header pointer after dev_hard_header()
gregkh/linux@fe3a7320711e rtase: Workaround for TX hang caused by hardware packet parsing
gregkh/linux@bbb7db8c74b0 tcp: initialize standalone TCP-AO response padding
gregkh/linux@dd29891ed840 tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
gregkh/linux@51346a8f4c05 vsock/virtio: collapse receive queue under memory pressure
gregkh/linux@2c54dff57606 vxlan: mdb: Fix source list corruption on a failed replace
gregkh/linux@2c2aed1c7c92 drm/amd/pm: fix amdgpu_pm_info power display units
gregkh/linux@5ec34e4b1d06 drm/amd/pm: make pp_features read-only when scpm is enabled
gregkh/linux@6c8cfdc2321c drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()
gregkh/linux@7aeef42b657d drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()
gregkh/linux@eef69b826b20 drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()
gregkh/linux@2404600dca5c drm/amdgpu/gfx8: drop unecessary BUG_ON()
gregkh/linux@cfb028252775 drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()
gregkh/linux@d74a6351d3f6 drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
gregkh/linux@ca50e541191f drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
gregkh/linux@a6d7065b91a1 drm/amdgpu/vce: fix integer overflow in image size
gregkh/linux@ff6aa542d91d drm/amdgpu/vcn4: avoid rereading IB param length
gregkh/linux@4ed6d08c4a59 drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
gregkh/linux@a00946b5ab7c drm/amdgpu: fix division by zero with invalid uvd dimensions
gregkh/linux@5c0a82283271 drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
gregkh/linux@a343d028ad6c drm/amdgpu: fix aperture mapping leak
gregkh/linux@b3adc697752b drm/amd/pm: fix smu13 power limit range calculation
gregkh/linux@2a2c98141e0a bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops
gregkh/linux@81d469c0e027 net: qrtr: ns: Raise node count limit to 512
gregkh/linux@fb3dc8e6da46 ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
gregkh/linux@0bf38372821b ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL
gregkh/linux@b057a851129c ksmbd: bound DACL dedup walk to copied ACEs
gregkh/linux@62d80d7c2d94 ksmbd: validate ACE size against SID sub-authorities
gregkh/linux@97a688563be7 fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
gregkh/linux@00a9ace09d91 drm/amd/display: Fix DTB DTO updates breaking live pixel rate sources
gregkh/linux@e92e3b08728c io_uring/rw: fix missing ERESTARTSYS conversion in read paths
gregkh/linux@1913cbe452ac net: pcs: xpcs: fix SGMII state reading
gregkh/linux@0c317349b4ba gve: fix Rx queue stall on alloc failure
gregkh/linux@962cd5103b68 rust: allow suspicious_runtime_symbol_definitions lint for Rust >= 1.98
gregkh/linux@c927b73a5694 mm/damon/core: validate ranges in damon_set_regions()
gregkh/linux@06a4beeeec8f mm/damon/core: disallow overlapping input ranges for damon_set_regions()
gregkh/linux@415cd5ab28f8 iommufd: Reject invalid read count in iommufd_fault_fops_read()
gregkh/linux@a38e0714affc iommufd: Break the loop on failure in iommufd_fault_fops_read()
gregkh/linux@b10011fabbf1 iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read()
gregkh/linux@b50e6cd2395c fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
gregkh/linux@00691ce3993e i2c: davinci: Unregister cpufreq notifier on probe failure
gregkh/linux@664a7a0d0401 VFS/audit: introduce kern_path_parent() for audit
gregkh/linux@09fe3937ce8e audit: widen ino fields to u64
gregkh/linux@ee599511e294 audit: use 'unsigned int' instead of 'unsigned'
gregkh/linux@7d1f66c69898 audit: fix recursive locking deadlock in audit_dupe_exe()
gregkh/linux@ef5a34753293 i2c: i801: fix hardware state machine corruption in error path
gregkh/linux@86c11d5091e1 ALSA: hda: conexant: Remove mic bias threshold override
gregkh/linux@93a1a5930b13 ALSA: hda: Fix cached processing coefficient verbs
gregkh/linux@a387436beaef rxrpc: Pull out certain app callback funcs into an ops table
gregkh/linux@dfa0b2bbc5e5 rxrpc: serialize kernel accept preallocation with socket teardown
gregkh/linux@00501a30f24a xfs: factor out xfs_attr3_leaf_init
gregkh/linux@281babb61f6f xfs: don't replace the wrong part of the cow fork
gregkh/linux@25d510602596 fbcon: Rename struct fbcon_ops to struct fbcon_par
gregkh/linux@72e51d07ba1a fbcon: Use correct type for vc_resize() return value
gregkh/linux@4a3c1b86e7f3 rxrpc: Fix CPU time starvation in I/O thread
gregkh/linux@6dadc365d461 rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack
gregkh/linux@09c59a82298f rxrpc: Use irq-disabling spinlocks between app and I/O thread
gregkh/linux@b4a7e615a521 rxrpc: Fix notification vs call-release vs recvmsg
gregkh/linux@7ac42f7d6355 rxrpc: Fix socket notification race
gregkh/linux@b9e100815f4b tipc: restrict socket queue dumps in enqueue tracepoints
gregkh/linux@24a128a31c15 vduse: Use fixed 4KB bounce pages for non-4KB page size
gregkh/linux@3d8189a41ed3 vduse: remove unused vaddr parameter of vduse_domain_free_coherent
gregkh/linux@1ae4d40bfea3 vduse: take out allocations from vduse_dev_alloc_coherent
gregkh/linux@5e88c1bc3a41 VDUSE: avoid leaking information to userspace
gregkh/linux@540cedea31d5 octeontx2: Annotate mmio regions as __iomem
gregkh/linux@f8608bfbf4aa octeontx2-vf: clear stale mailbox IRQ state before request_irq()
gregkh/linux@6db9f4adc219 octeontx2-pf: clear stale mailbox IRQ state before request_irq()
gregkh/linux@05fa602d6adc arm64: dts: qcom: correct RBR opp entry
gregkh/linux@1fd54584f396 arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort controllers
gregkh/linux@540e2fd59d56 ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable
gregkh/linux@faa97a1a6cab ASoC: mediatek: mt8192: Check runtime resume during probe
gregkh/linux@a5624d88f3b2 ASoC: mediatek: mt8183-afe-pcm: Shorten memif_data table using macros
gregkh/linux@5f9f96039631 ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses
gregkh/linux@9e19567ff00a ASoC: mediatek: mt8183-afe-pcm: use local dev pointer in driver callbacks
gregkh/linux@2e6f49b7a544 ASoC: mediatek: mt8183: Check runtime resume during probe
gregkh/linux@82501bc3094f netfilter: nf_conntrack_sip: remove net variable shadowing
gregkh/linux@c199ed687c00 netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
gregkh/linux@e6260f136a59 netfilter: bitwise: rename some boolean operation functions
gregkh/linux@b1344877fb6d netfilter: nf_tables: Remove unused nft_reduce_is_readonly()
gregkh/linux@15a314804595 netfilter: nf_tables: remove register tracking infrastructure
gregkh/linux@568931f26af4 netfilter: nft_fib: reject fib expression on the netdev egress hook
gregkh/linux@1c44c262a0c2 gpu: Move DRM buddy allocator one level up (part two)
gregkh/linux@4289531106ee gpu/buddy: bail out of try_harder when alignment cannot be honoured
gregkh/linux@332a51aa7101 NFSD: pass nfsd_file to nfsd_iter_read()
gregkh/linux@7bc5b3db8d30 sunrpc: allocate a separate bvec array for socket sends
gregkh/linux@363886a762c9 SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists
gregkh/linux@2746214efb8f SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
gregkh/linux@69baa01c9410 remoteproc: xlnx: Check remote core state
gregkh/linux@5c32ae4a91fb mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
gregkh/linux@2c09f27232e7 mm/sparse-vmemmap: fix vmemmap accounting underflow
gregkh/linux@bd754f08eca1 landlock: Prepare to use credential instead of domain for fowner
gregkh/linux@7a92e9fd1d49 landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path
gregkh/linux@6cf9a80ecaeb mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages
gregkh/linux@01928835d808 mtd: maps: vmu-flash: fix fault in unaligned fixup
gregkh/linux@7b834ac7c98e mm: prepare to move subsection_map_init() to mm/sparse-vmemmap.c
gregkh/linux@324a66f757b4 mm/sparse-vmemmap: fix DAX vmemmap accounting with optimization
gregkh/linux@73c83efe5cfb dma: dw-edma: Fix build warning in dw_edma_pcie_probe()
gregkh/linux@7881511845ae dmaengine: dw-edma: Fix confusing cleanup.h syntax
gregkh/linux@a1042599fa8f dmaengine: dw-edma-pcie: Reject devices without driver data
gregkh/linux@e569563aa39c i2c: imx: separate atomic, dma and non-dma use case
gregkh/linux@c882e8cc68fb i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
gregkh/linux@25ded30dcef7 xfrm: Use nested-BH locking for nat_keepalive_sk_ipv[46]
gregkh/linux@d0a4dc7efa82 xfrm: nat_keepalive: avoid double free on send error
gregkh/linux@08d7668d0295 tcp: defer md5sig_info kfree past RCU grace period in tcp_connect
gregkh/linux@22ebec736373 tcp: Decrement tcp_md5_needed static branch
gregkh/linux@8eb2eb09cfa7 nvmet: Introduce nvmet_req_transfer_len()
gregkh/linux@80bf7b7f676e nvmet-auth: reject short AUTH_RECEIVE buffers
gregkh/linux@8016a7da0e06 ovl: use linked upper dentry in copy-up tmpfile
gregkh/linux@c86fc475a887 block: add helper add_disk_final()
gregkh/linux@b6c9a75de731 block: remove redundant GD_NEED_PART_SCAN in add_disk_final()
gregkh/linux@50af3e51dc70 dm-integrity: fix leaking uninitialized kernel memory
gregkh/linux@3277e56be44b cleanup: add a scoped version of CLASS()
gregkh/linux@3ce94fc540f0 cleanup: fix scoped_class()
gregkh/linux@cf71329cf971 cred: add kernel_cred() helper
gregkh/linux@fd5aaed92afd cred: add scoped_with_kernel_creds()
gregkh/linux@d3eb8451d529 dm: avoid leaking the caller's thread keyring via the table device file
gregkh/linux@066b59e84f90 wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
gregkh/linux@1f0d56d3f1e8 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
gregkh/linux@6080189291d9 net: mana: Validate the packet length reported by the NIC
gregkh/linux@7f68f7928484 net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink
gregkh/linux@84d3753d4bf2 gve: fix header buffer corruption with header-split and HW-GRO
gregkh/linux@877a24300678 gpio: mt7621: avoid corruption of shared interrupt trigger state
gregkh/linux@54535692bec9 octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
gregkh/linux@aca8acbf8314 bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
gregkh/linux@76ef70e768f9 bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
gregkh/linux@e2a3b77df6ae ipmi: fix refcount leak in i_ipmi_request()
gregkh/linux@4d13e2596077 net/mlx5: HWS, Rearrange to prevent forward declaration
gregkh/linux@a751ccdc6ea9 net/mlx5: HWS, fix matcher leak on resize target setup failure
gregkh/linux@5e023fe2569e octeontx2-pf: fix SQB pointer leak on init failure
gregkh/linux@b1607f0ee5f5 ata: libata-core: Reject an invalid concurrent positioning ranges count
gregkh/linux@b2fe9e140aa9 fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
gregkh/linux@2143fdc0ce27 net: macb: drop in-flight Tx SKBs on close
gregkh/linux@9df1aa26b679 net: ipa: fix SMEM state handle leaks in SMP2P init
gregkh/linux@a8444cca514e Bluetooth: Add PA_LINK to distinguish BIG sync and PA sync connections
gregkh/linux@e4187cea8e42 Bluetooth: hci_core: Fix not accounting for BIS/CIS/PA links separately
gregkh/linux@003691ad75ea afs: Improve server refcount/active count tracing
gregkh/linux@05c8b604efaa afs: Make afs_lookup_cell() take a trace note
gregkh/linux@9033fd960d51 afs: Drop the net parameter from afs_unuse_cell()
gregkh/linux@8fb0d541494a rxrpc: Allow the app to store private data on peer structs
gregkh/linux@39ba6af83a7f afs: Use the per-peer app data provided by rxrpc
gregkh/linux@d6aa05cd9958 afs: Fix afs_server ref accounting
gregkh/linux@f28c9fcc763f afs: Simplify cell record handling
gregkh/linux@fa4ccdccf148 afs: Fix dynamic lookup to fail on cell lookup failure
gregkh/linux@4d8a2fe88478 afs: Fix lack of locking around modifications of net->cells_dyn_ino
gregkh/linux@b6032b9ca783 USB: gadget: Use str_enable_disable-like helpers
gregkh/linux@a4178bb366a1 USB: gadget: fsl-udc: fix dev_printk() device
gregkh/linux@f0bbebc70323 usb: musb: omap2430: clean up probe error handling
gregkh/linux@58d1c81c0b54 usb: musb: omap2430: Do not put borrowed of_node in probe
gregkh/linux@250995d809e8 net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query
gregkh/linux@37f93f895117 gpu: Fix uninitialized buddy for built-in drivers
gregkh/linux@fff759c782f7 rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link
gregkh/linux@7efac5980b68 rxrpc: Fix locking issues with the peer record hash
gregkh/linux@795be20d1b69 wifi: nl80211: fix nl80211_start_radar_detection return value
gregkh/linux@5a94edc62869 net: ethernet: Remove accidental duplication in Kconfig file
gregkh/linux@92d8336f089c afs: Set vllist to NULL if addr parsing fails
gregkh/linux@5fcf6940617e dpll: fix clock quality level reporting
gregkh/linux@bd18d2cbc937 afs: Fix delayed allocation of a cell's anonymous key
gregkh/linux@42e3917cdbdc afs: handle CB.InitCallBackState3 requests without a server record
gregkh/linux@f146e5b5da5f Bluetooth: hci_conn: Fix running bis_cleanup for hci_conn->type PA_LINK
gregkh/linux@64a03b042623 Bluetooth: hci_conn: Fix not cleaning up Broadcaster/Broadcast Source
gregkh/linux@02eb0cc4e8bc Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections
gregkh/linux@488e808e3fa5 Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
gregkh/linux@2cba7165319f afs: Fix uninit var in afs_alloc_anon_key()
gregkh/linux@7508916b4b55 KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
gregkh/linux@833291ee7784 Linux 6.12.101