Changes since previous version:
gregkh/linux@95f47331dfde Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size
gregkh/linux@5dcce34c57d5 net/sched: cls_fw: fix NULL dereference of "old" filters before change()
gregkh/linux@c4f840437e76 net: mctp: ensure our nlmsg responses are initialised
gregkh/linux@e125f5980b73 net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked
gregkh/linux@03ba8faee0d0 drm: Remove plane hsub/vsub alignment requirement for core helpers
gregkh/linux@23acc565186e net: cpsw_new: Fix potential unregister of netdev that has not been registered yet
gregkh/linux@2dfdaaf7d933 nfc: llcp: Fix use-after-free in llcp_sock_release()
gregkh/linux@0b45c31746e1 nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
gregkh/linux@2a41b1b31c61 xfrm: Check for underflow in xfrm_state_mtu
gregkh/linux@54a44acca9da nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
gregkh/linux@b92d8657e84b tools/bootconfig: Cleanup bootconfig footer size calculations
gregkh/linux@716ac4571ce8 tools/bootconfig: Fix buf leaks in apply_xbc
gregkh/linux@dd206819f210 netfilter: synproxy: refresh tcphdr after skb_ensure_writable
gregkh/linux@5c381df73e89 netfilter: xt_cpu: prefer raw_smp_processor_id
gregkh/linux@dad9ebf81079 netfilter: ebtables: fix OOB read in compat_mtw_from_user
gregkh/linux@e915445942af tun: free page on short-frame rejection in tun_xdp_one()
gregkh/linux@2638a9c15219 tun: free page on build_skb failure in tun_xdp_one()
gregkh/linux@d781fb9c28ee net: netlink: fix sending unassigned nsid after assigned one
gregkh/linux@d353fc106e0f net: netlink: don't set nsid on local notifications
gregkh/linux@64c96e497d5a net/smc: Do not re-initialize smc hashtables
gregkh/linux@1fc30bd4e55e net/iucv: fix locking in .getsockopt
gregkh/linux@5b23a2ff379e ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()
gregkh/linux@1cea86c07bbc ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors
gregkh/linux@09a37dca090c net: hsr: fix potential OOB access in supervision frame handling
gregkh/linux@bf8b3f34c37c tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6
gregkh/linux@8d435d68d71f vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()
gregkh/linux@7f4f7efe7f30 tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()
gregkh/linux@d8cc3e747b00 ASoC: codecs: simple-mux: Fix enum control bounds check
gregkh/linux@d630c4b25f36 Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()
gregkh/linux@41e8478c4cd8 bonding: refuse to enslave CAN devices
gregkh/linux@6ed7ebe22e9c ethtool: eeprom: add more safeties to EEPROM Netlink fallback
gregkh/linux@3618b34942b7 ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
gregkh/linux@c2afd2613fda Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success
gregkh/linux@e6833e737a51 Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
gregkh/linux@12811ab65637 gpio: rockchip: convert bank->clk to devm_clk_get_enabled()
gregkh/linux@da7e4a1aaf39 net: mana: Add NULL guards in teardown path to prevent panic on attach failure
gregkh/linux@8e9b56051d24 sctp: fix race between sctp_wait_for_connect and peeloff
gregkh/linux@b014a63d2f2c ipv6: fix possible infinite loop in rt6_fill_node()
gregkh/linux@3948a7d92f76 ipv6: fix possible infinite loop in fib6_select_path()
gregkh/linux@7ee03fe551a7 net: skbuff: fix pskb_carve leaking zcopy pages
gregkh/linux@040fe8eb3462 batman-adv: v: stop OGMv2 on disabled interface
gregkh/linux@dc4e3983d60d batman-adv: tvlv: abort OGM send on tvlv append failure
gregkh/linux@341e8559bc0f batman-adv: tt: reject oversized local TVLV buffers
gregkh/linux@efb62458c94d batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
gregkh/linux@6448a49344e8 batman-adv: tvlv: reject oversized TVLV packets
gregkh/linux@5afe162d0847 batman-adv: iv: recover OGM scheduling after forward packet error
gregkh/linux@56b5419ee713 selftests: forwarding: lib: Add helpers for checksum handling
gregkh/linux@74a766340554 batman-adv: tp_meter: directly shut down timer on cleanup
gregkh/linux@211ea59988e1 batman-adv: tt: fix TOCTOU race for reported vlans
gregkh/linux@ea4f75764143 batman-adv: tt: avoid empty VLAN responses
gregkh/linux@8ff9c59d1b7b batman-adv: bla: avoid double decrement of bla.num_requests
gregkh/linux@e7790ab16571 mm/page_alloc: clear page->private in free_pages_prepare()
gregkh/linux@00ae988e226b selftests/bpf: add generic BPF program tester-loader
gregkh/linux@7bdd8ddca7fd selftests/bpf: Convert test_global_funcs test to test_loader framework
gregkh/linux@37e29f02de61 Revert "selftests/bpf: Workaround strict bpf_lsm return value check."
gregkh/linux@96f4d5dddafd Revert "selftests/bpf: Add tests for opts variants of bpf_get_fd_by_id()"
gregkh/linux@fe9b40f62855 selftests/bpf: Add read_build_id function
gregkh/linux@c0cc1a3deb8c bpf: Fix a few selftest failures due to llvm18 change
gregkh/linux@391b79565abd selftests/bpf: Update bpf_clone_redirect expected return code
gregkh/linux@b3c29b16df94 selftests/bpf: enhance align selftest's expected log matching
gregkh/linux@5cb54cecee50 Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test"
gregkh/linux@53893155422c selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
gregkh/linux@b90e131022ab selftests/bpf: S/iptables/iptables-legacy/ in the bpf_nf and xdp_synproxy test
gregkh/linux@4c7fdb9d3710 net/packet: convert po->tp_tx_has_off to an atomic flag
gregkh/linux@65456547b80c net/packet: convert po->tp_loss to an atomic flag
gregkh/linux@668603b31023 net/packet: convert po->has_vnet_hdr to an atomic flag
gregkh/linux@76cb434a6a43 net/packet: convert po->running to an atomic flag
gregkh/linux@1490f82353bd net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
gregkh/linux@b23d885cd8e5 drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register
gregkh/linux@2ecab21fe9c6 drm/dp: Add eDP 1.5 bit definition
gregkh/linux@64b53bab733f drm/i915/psr: Read Intel DPCD workaround register
gregkh/linux@f796e6cb4b74 drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used
gregkh/linux@cbb826d5ae85 Revert "RDMA/rxe: Fix double free in rxe_srq_from_init"
gregkh/linux@9abff51163aa RDMA/rxe: Fix double free in rxe_srq_from_init
gregkh/linux@3c6cc9f2ca65 net: gro: don't merge zcopy skbs
gregkh/linux@8fdfbb112de7 phy: mscc: Use PHY_ID_MATCH_VENDOR to minimize PHY ID table
gregkh/linux@7ff6caba3413 phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X
gregkh/linux@b140a4464f51 hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with pmbus_lock
gregkh/linux@57d1dd644e21 hwmon: (pmbus/adm1266) serialize sequencer_state debugfs read with pmbus_lock
gregkh/linux@e327a2a1fd37 hwmon: (pmbus/adm1266) serialize NVMEM blackbox read with pmbus_lock
gregkh/linux@babf1943a40b iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
gregkh/linux@6526f8684f72 usb: typec: ucsi: ccg: reject firmware images without a ':' record header
gregkh/linux@14670fd7934a usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO
gregkh/linux@6ffdbcd7a02f usb: typec: altmodes/displayport: validate count before reading Status Update VDO
gregkh/linux@6899f5b6d7b8 usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()
gregkh/linux@cea949203fae usb: typec: ucsi: validate connector number in ucsi_connector_change()
gregkh/linux@161ea0e5236f USB: serial: safe_serial: fix memory corruption with small endpoint
gregkh/linux@30ea7cb231c7 Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free()
gregkh/linux@6e78dfa86135 HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse
gregkh/linux@a32d1ac08fc9 Bluetooth: btusb: Allow firmware re-download when version matches
gregkh/linux@1648a3c7f4e1 hpfs: fix a crash if hpfs_map_dnode_bitmap fails
gregkh/linux@af24e202b543 ipc: limit next_id allocation to the valid ID range
gregkh/linux@ca5b0781946d auxdisplay: line-display: fix OOB read on zero-length message_store()
gregkh/linux@deb8493a8fa5 Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()
gregkh/linux@8894c2010435 Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn
gregkh/linux@cc3832b19f86 Bluetooth: HIDP: fix missing length checks in hidp_input_report()
gregkh/linux@c57ea90f203c Bluetooth: ISO: fix UAF in iso_recv_frame
gregkh/linux@d9cbf7144ec5 Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock
gregkh/linux@d16548be2ea5 parport: Fix race between port and client registration
gregkh/linux@14c758047ede USB: cdc-acm: Fix bit overlap and move quirk definitions to header
gregkh/linux@2f1082f03488 wireguard: send: append trailer after expanding head
gregkh/linux@380a3fef43ce iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux
gregkh/linux@28d00cb388a3 iio: dac: max5821: fix return value check in powerdown sync
gregkh/linux@8559bfce2345 iio: dac: ad5686: fix input raw value check
gregkh/linux@efc9171a9c88 iio: dac: ad5686: acquire lock when doing powerdown control
gregkh/linux@f87d185a3e87 iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
gregkh/linux@b64dd5f3b389 iio: gyro: itg3200: fix i2c read into the wrong stack location
gregkh/linux@6db1ecafae57 iio: ssp_sensors: cancel delayed work_refresh on remove
gregkh/linux@8ead8fbf9f29 iio: temperature: tsys01: fix broken PROM checksum validation
gregkh/linux@fbe1dc2fcc94 iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL
gregkh/linux@958dd07f68bd iio: light: cm3323: fix reg_conf not being initialized correctly
gregkh/linux@d2759d49860b iio: buffer: hw-consumer: fix use-after-free in error path
gregkh/linux@4e7d32189d62 USB: serial: omninet: fix memory corruption with small endpoint
gregkh/linux@5621ae4b5394 usb: cdns3: gadget: fix request skipping after clearing halt
gregkh/linux@7a33790076f6 usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles
gregkh/linux@9fe1d84f7e2c usb: dwc2: Fix use after free in debug code
gregkh/linux@331d49b4e1c9 Input: elan_i2c - validate firmware size before use
gregkh/linux@aeb95146848d bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
gregkh/linux@23c0e230eab3 macsec: fix replay protection at XPN lower-PN wrap
gregkh/linux@9e883eaa878f ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
gregkh/linux@05d38ab43340 ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params
gregkh/linux@1a11eb7431e3 ipv6: exthdrs: refresh nh after handling HAO option
gregkh/linux@44d2ff7d2178 ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().
gregkh/linux@08464413e628 ipv6: validate extension header length before copying to cmsg
gregkh/linux@8dfabcba6a94 xfrm: input: hold netns during deferred transport reinjection
gregkh/linux@d9c5eecdb3c7 ip6: vti: Use ip6_tnl.net in vti6_changelink().
gregkh/linux@5716a293fb19 HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
gregkh/linux@19a62f810d4d iommu, debugobjects: avoid gcc-16.1 section mismatch warnings
gregkh/linux@37382293f174 nfc: hci: fix out-of-bounds read in HCP header parsing
gregkh/linux@fe4637983433 xfrm: route MIGRATE notifications to caller's netns
gregkh/linux@28fd7bef88f2 xfrm: ah: use skb_to_full_sk in async output callbacks
gregkh/linux@f5547bebc416 netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
gregkh/linux@894c007540bf ASoC: qcom: q6asm-dai: close stream only when running
gregkh/linux@dfe41957bfbb ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks
gregkh/linux@36519e3d941f xfrm: esp: restore combined single-frag length gate
gregkh/linux@1017e1c6c6c4 Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
gregkh/linux@42cea62eeffc Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490
gregkh/linux@ba7c11d7d3ca comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest()
gregkh/linux@3721dd22cad6 comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest()
gregkh/linux@c8a70b5af8cd counter: Fix refcount leak in counter_alloc() error path
gregkh/linux@daea997bb244 tty: serial: pch_uart: add check for dma_alloc_coherent()
gregkh/linux@faa3de2d10e9 usb: chipidea: core: convert ci_role_switch to local variable
gregkh/linux@3616bad4a47b usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval
gregkh/linux@9d583f23f431 USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers
gregkh/linux@7d9575c42907 usb: storage: Add quirks for PNY Elite Portable SSD
gregkh/linux@1036ac614899 usbip: vudc: Fix use after free bug in vudc_remove due to race condition
gregkh/linux@ae87f505917e usb: usbtmc: check URB actual_length for interrupt-IN notifications
gregkh/linux@b80002d7ece3 usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize
gregkh/linux@fce91cc6f7ef USB: serial: option: add MeiG SRM813Q
gregkh/linux@90b3954d4d15 USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL
gregkh/linux@37e54d1b986d USB: serial: belkin_sa: validate interrupt status length
gregkh/linux@44f9bab8df77 USB: serial: cypress_m8: validate interrupt packet headers
gregkh/linux@41d9673941ee USB: serial: keyspan: fix missing indat transfer sanity check
gregkh/linux@ccbec56f2f9a USB: serial: mxuport: fix memory corruption with small endpoint
gregkh/linux@a093f3e0c03d USB: serial: mct_u232: fix missing interrupt-in transfer sanity check
gregkh/linux@c5b9fdb1e8dd usb: gadget: net2280: Fix double free in probe error path
gregkh/linux@396d4795796b usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports
gregkh/linux@af32dbb2ca0b usb: gadget: f_fs: copy only received bytes on short ep0 read
gregkh/linux@9fee50c4e1e4 thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()
gregkh/linux@de618299190b thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
gregkh/linux@80a0cd307205 scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker
gregkh/linux@29f126f09e34 scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
gregkh/linux@efe633e600a0 scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
gregkh/linux@82454e6f21e5 scsi: target: iscsi: Validate CHAP_R length before base64 decode
gregkh/linux@bc573752f3da drm/hyperv: validate resolution_count and fix WIN8 fallback
gregkh/linux@f5251226551b drm/hyperv: validate VMBus packet size in receive callback
gregkh/linux@df73f3bc731a drm/i915: Fix potential UAF in TTM object purge
gregkh/linux@518dc2581fa5 drm/amd/pm/si: Disregard vblank time when no displays are connected
gregkh/linux@48f26924692b serial: altera_jtaguart: handle uart_add_one_port() failures
gregkh/linux@8facc6a6de74 serial: sh-sci: fix memory region release in error path
gregkh/linux@698501f1f5b5 serial: zs: Fix swapped RI/DSR modem line transition counting
gregkh/linux@325a69440936 serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma
gregkh/linux@e4dcb5d63603 drm/amdkfd: fix NULL pointer bug in svm_range_set_attr
gregkh/linux@28e559b36407 drm/amdkfd: Check for pdd drm file first in CRIU restore path
gregkh/linux@2c41284dceee serial: dz: Fix bootconsole message clobbering at chip reset
gregkh/linux@3d8ecb566bb3 serial: zs: Fix bootconsole handover lockup
gregkh/linux@db21020efee3 serial: zs: Switch to using channel reset
gregkh/linux@5906e22bfd87 HID: core: Add printk_ratelimited variants to hid_warn() etc
gregkh/linux@121dc93ae1fc HID: pass the buffer size to hid_report_raw_event
gregkh/linux@d63e45af4bac HID: core: Fix size_t specifier in hid_report_raw_event()
gregkh/linux@b7ab0841142e RDMA/rxe: Complete the rxe_cleanup_task backport
gregkh/linux@6ab1e9ae0995 USB: serial: digi_acceleport: fix memory corruption with small endpoints
gregkh/linux@625649fad714 xhci: tegra: Fix ghost USB device on dual-role port unplug
gregkh/linux@faa0deee2721 netfilter: nf_tables: restore set elements when delete set fails
gregkh/linux@52e18ae0c47c USB: serial: cypress_m8: fix memory corruption with small endpoint
gregkh/linux@3ff7ffb43f68 serial: dz: Fix bootconsole handover lockup
gregkh/linux@0a80e6ecaf66 bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
gregkh/linux@41e58bd74240 usb: core: Fix SuperSpeed root hub wMaxPacketSize
gregkh/linux@c3e3fddda6b5 bpf: Free reuseport cBPF prog after RCU grace period.
gregkh/linux@39e295a91e80 USB: serial: mct_u232: fix memory corruption with small endpoint
gregkh/linux@b22fd53b2ceb dmaengine: idxd: Fix not releasing workqueue on .release()
gregkh/linux@8e0840ee2285 Disable -Wattribute-alias for clang-23 and newer
gregkh/linux@943e318eedbe i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
gregkh/linux@53baa63a4183 ipv6: mcast: Fix use-after-free when processing MLD queries
gregkh/linux@35a221178396 net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
gregkh/linux@ae847ab29ded tee: optee: prevent use-after-free when the client exits before the supplicant
gregkh/linux@fac8bbbca90c netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
gregkh/linux@7d4f50045117 ipvs: clear the svc scheduler ptr early on edit
gregkh/linux@debc57b83d5b netfilter: synproxy: add mutex to guard hook reference counting
gregkh/linux@0afc802160af netfilter: conntrack_irc: fix possible out-of-bounds read
gregkh/linux@b7e91939ba9b netfilter: bridge: make ebt_snat ARP rewrite writable
gregkh/linux@d886945fcb0f dm cache policy smq: check allocation under invalidate lock
gregkh/linux@1f1b98fea6b9 net/sched: act_api: use RCU with deferred freeing for action lifecycle
gregkh/linux@4485d7961752 6lowpan: fix off-by-one in multicast context address compression
gregkh/linux@d42935c129b9 drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
gregkh/linux@e84dcde61b95 pcnet32: stop holding device spin lock during napi_complete_done
gregkh/linux@51156815f80f net: Annotate sk->sk_write_space() for UDP SOCKMAP.
gregkh/linux@d8dcd14aa886 net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
gregkh/linux@e2cb6798931c net: lan743x: permit VLAN-tagged packets up to configured MTU
gregkh/linux@88cf133151dd net: fec: fix pinctrl default state restore order on resume
gregkh/linux@1f73f92f6625 Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
gregkh/linux@f7093ac233c1 Bluetooth: MGMT: validate advertising TLV before type checks
gregkh/linux@0d637136ce89 Bluetooth: RFCOMM: validate skb length in MCC handlers
gregkh/linux@cf4e6e0a2657 Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling
gregkh/linux@2b83afb19293 Bluetooth: bnep: reject short frames before parsing
gregkh/linux@c016118b9e51 Bluetooth: fix memory leak in error path of hci_alloc_dev()
gregkh/linux@10b7eae26dbb Bluetooth: MGMT: Fix backward compatibility with userspace
gregkh/linux@89343ff12b31 ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
gregkh/linux@cb90b0e39f81 ptp: vclock: Switch from RCU to SRCU
gregkh/linux@6541e77b4e49 octeontx2-af: npc: Fix CPT channel mask in npc_install_flow
gregkh/linux@a3c2ac3ae045 vxlan: vnifilter: send notification on VNI add
gregkh/linux@1d8b9e30446f vxlan: vnifilter: fix spurious notification on VNI update
gregkh/linux@8da95cb6ad7d ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
gregkh/linux@cc98717e591a net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
gregkh/linux@3c0741a441a7 sctp: purge outqueue on stale COOKIE-ECHO handling
gregkh/linux@f4b7bae90277 ipmi: Fix rcu_read_unlock to srcu_read_unlock in handle_read_event_rsp
gregkh/linux@f8d720bc2e35 signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
gregkh/linux@43c2067bb3fc time: Fix off-by-one in settimeofday() usec validation
gregkh/linux@d842f26a167e ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
gregkh/linux@486666c2c271 fs/ntfs3: Return error for inconsistent extended attributes
gregkh/linux@7c97366f5dac usb: gadget: f_ncm: Fix net_device lifecycle with device_move
gregkh/linux@f9f987472f4b usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
gregkh/linux@fd470f0a97b8 net: skbuff: fix missing zerocopy reference in pskb_carve helpers
gregkh/linux@3f52a86a482a tap: free page on error paths in tap_get_user_xdp()
gregkh/linux@86e68cc983a1 KVM: arm64: Remove VPIPT I-cache handling
gregkh/linux@59726d4608e2 arm64: tlb: Allow XZR argument to TLBI ops
gregkh/linux@2500ea43d88c arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI
gregkh/linux@5dd4773dbc25 iomap: don't revert iov_iter on partially completed buffered writes
gregkh/linux@25c8c7fb3b0b xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
gregkh/linux@95bda3eac0b1 netlabel: validate unlabeled address and mask attribute lengths
gregkh/linux@5ee9bbe2af2f ASoC: wm_adsp: Fix NULL dereference when removing firmware controls
gregkh/linux@3747de241a66 tcp: restrict SO_ATTACH_FILTER to priv users
gregkh/linux@bb85342b3db9 net/mlx4: avoid GCC 10 __bad_copy_from() false positive
gregkh/linux@474293d90880 net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
gregkh/linux@9c67b44edb35 ipv6: sit: reload inner IPv6 header after GSO offloads
gregkh/linux@971b1b37774f net: openvswitch: fix possible kfree_skb of ERR_PTR
gregkh/linux@d68e8fb36998 r8152: reduce the control transfer of rtl8152_get_version()
gregkh/linux@27395285578d r8152: Block future register access if register access fails
gregkh/linux@30b071675bcb r8152: handle the return value of usb_reset_device()
gregkh/linux@d796cfd06074 sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
gregkh/linux@ad9a0374ee6d net: guard timestamp cmsgs to real error queue skbs
gregkh/linux@6e4615164d18 net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion
gregkh/linux@47fb3c2b4203 ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
gregkh/linux@76f4992f5571 rds: mark snapshot pages dirty in rds_info_getsockopt()
gregkh/linux@fbfde85308b9 netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
gregkh/linux@b28e2fcad3db netfilter: x_tables: avoid leaking percpu counter pointers
gregkh/linux@befb8968a2ab netfilter: nf_log: validate MAC header was set before dumping it
gregkh/linux@46fc15a044e9 netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
gregkh/linux@a3ad9b5767c8 net: mvpp2: sync RX data at the hardware packet offset
gregkh/linux@ec8e1e5842bc net: mvpp2: limit XDP frame size to the RX buffer
gregkh/linux@29382dd2a53c net: mvpp2: Add metadata support for xdp mode
gregkh/linux@a03cdcedb2cb net: mvpp2: refill RX buffers before XDP or skb use
gregkh/linux@68e4496c3aed net: mvpp2: build skb from XDP-adjusted data on XDP_PASS
gregkh/linux@9e1196d27ef4 netfilter: ctnetlink: ensure safe access to master conntrack
gregkh/linux@fd87d6966041 drm/vc4: fix krealloc() memory leak
gregkh/linux@5e9ee18b27fd netfilter: nft_tunnel: fix use-after-free on object destroy
gregkh/linux@10b0e832cc05 Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
gregkh/linux@b20e8a98dd29 Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
gregkh/linux@7496b380a269 mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation
gregkh/linux@14469860e2e3 drm/i915/gem: Fix phys BO pread/pwrite with offset
gregkh/linux@b7063c7426ea ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL
gregkh/linux@8c6c691bf062 xfrm: espintcp: do not reuse an in-progress partial send
gregkh/linux@cfd634f6dfd4 USB: serial: io_ti: fix heap overflow in get_manuf_info()
gregkh/linux@2fd64bf0ad66 USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()
gregkh/linux@63aac892be3b USB: serial: option: add usb-id for Dell Wireless DW5826e-m
gregkh/linux@14147b796368 USB: serial: kl5kusb105: fix bulk-out buffer overflow
gregkh/linux@b2214914e461 ALSA: timer: Fix UAF at snd_timer_user_params()
gregkh/linux@bc555e1f3160 drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info()
gregkh/linux@0b9ee09d5e84 RDMA/srp: bound SRP_RSP sense copy by the received length
gregkh/linux@263779a6beff udp: clear skb->dev before running a sockmap verdict
gregkh/linux@f897cdfb15e8 ARM: socfpga: Fix OF node refcount leak in SMP setup
gregkh/linux@23cdd0532ea1 ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O
gregkh/linux@c0b8c148a775 ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow
gregkh/linux@16b3065a517c mptcp: fix retransmission loop when csum is enabled
gregkh/linux@68364963e5ba mptcp: close TOCTOU race while computing rcv_wnd
gregkh/linux@bf364b0f10b2 mptcp: allow subflow rcv wnd to shrink
gregkh/linux@13e1c4d52e28 mptcp: sockopt: check timestamping ret value
gregkh/linux@fc0ec2fc02df wifi: nl80211: reject oversized EMA RNR lists
gregkh/linux@ea0b03d52881 vsock/vmci: fix sk_ack_backlog leak on failed handshake
gregkh/linux@59c5a3e69c76 bnxt_en: Fix NULL pointer dereference
gregkh/linux@bd22740d7f14 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
gregkh/linux@ed5996c5906a pidfd: refuse access to tasks that have started exiting harder
gregkh/linux@9dbf1b2fadfc fuse: reject fuse_notify() pagecache ops on directories
gregkh/linux@a50b8adb9cdb i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()
gregkh/linux@62e05a9a9f9f i2c: stm32f7: fix timing computation ignoring i2c-analog-filter
gregkh/linux@b9869f3fc716 i2c: tegra: Fix NOIRQ suspend/resume
gregkh/linux@9f351f9516dc Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK)
gregkh/linux@f7c0ae3a765f Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard
gregkh/linux@1f0d01e35dbb ipc/shm: serialize orphan cleanup with shm_nattch updates
gregkh/linux@d42679eef34d misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context
gregkh/linux@0a3b87293fbd misc: fastrpc: fix use-after-free race in fastrpc_map_create
gregkh/linux@708c17b52c60 misc: fastrpc: fix DMA address corruption due to find_vma misuse
gregkh/linux@1904767e3e11 net/mlx5: Reorder completion before putting command entry in cmd_work_handler
gregkh/linux@66693957bacd net: bonding: fix NULL pointer dereference in bond_do_ioctl()
gregkh/linux@3b0c22e0060d net: mv643xx: fix OF node refcount
gregkh/linux@29d940026dce net: rds: clear i_sends on setup unwind
gregkh/linux@055267adf448 octeontx2-af: fix memory leak in rvu_setup_hw_resources()
gregkh/linux@a0ee522c8c30 mmc: core: Fix host controller programming for fixed driver type
gregkh/linux@bf50c6afe356 mmc: litex_mmc: Set mandatory idle clocks before CMD0
gregkh/linux@734ba73c5e92 mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC
gregkh/linux@e61949fe5617 mmc: sdhci: add signal voltage switch in sdhci_resume_host
gregkh/linux@5425de8bd6e9 sctp: diag: reject stale associations in dump_one path
gregkh/linux@9662eb040151 sctp: stream: fully roll back denied add-stream state
gregkh/linux@99d9dbad1463 thunderbolt: Reject zero-length property entries in validator
gregkh/linux@1912be23daf4 thunderbolt: Bound root directory content to block size
gregkh/linux@89ae04365e01 thunderbolt: Clamp XDomain response data copy to allocation size
gregkh/linux@a770e6292309 thunderbolt: Validate XDomain request packet size before type cast
gregkh/linux@033dfa63bf6b thunderbolt: Limit XDomain response copy to actual frame size
gregkh/linux@02b98a788428 slimbus: qcom-ngd-ctrl: fix OF node refcount
gregkh/linux@dc4d5c57e012 slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock
gregkh/linux@6ccbf3a5bf76 drm/amdgpu: restart the CS if some parts of the VM are still invalidated
gregkh/linux@964e50ef7b8f drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
gregkh/linux@5f8b39452fb1 drm/amd/display: Clamp VBIOS HDMI retimer register count to array size
gregkh/linux@a2de1d71891a drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
gregkh/linux@b15825deac1a drm/amd/display: Use krealloc_array() in dal_vector_reserve()
gregkh/linux@32dbd5ce4be3 fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
gregkh/linux@3e1b69f02e71 mm/hugetlb: avoid false positive lockdep assertion
gregkh/linux@60a364944c28 mm/damon/ops-common: call folio_test_lru() after folio_get()
gregkh/linux@459771c9cf30 mm/huge_memory: update file PMD counter before folio_put()
gregkh/linux@f56f25da0029 f2fs: use kfree() instead of kvfree() to free some memory
gregkh/linux@299eb6381d61 f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally
gregkh/linux@0d40b26377f8 f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
gregkh/linux@f20adc4ef742 ksmbd: require minimum ACE size in smb_check_perm_dacl()
gregkh/linux@c2abdebf7200 smb: client: validate the whole DACL before rewriting it in cifsacl
gregkh/linux@c8a8e8639284 LoongArch: Add spectre boundry for syscall dispatch table
gregkh/linux@8b85c47e5fbf arm64/mm: Enable batched TLB flush in unmap_hotplug_range()
gregkh/linux@234071b4318f lib: test_hmm: evict device pages on file close to avoid use-after-free
gregkh/linux@a88f5391dc68 wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
gregkh/linux@6a170aeddb71 spi: imx: Convert to platform remove callback returning void
gregkh/linux@c7c40c3e7b9f spi: imx: fix use-after-free on unbind
gregkh/linux@d4eb861adde5 thermal: core: Fix thermal zone governor cleanup issues
gregkh/linux@0ee911fa7c42 ALSA: aoa: Use guard() for mutex locks
gregkh/linux@61cba0b56cc9 ALSA: aoa: i2sbus: clear stale prepared state
gregkh/linux@467389f3dff4 media: rc: ttusbir: respect DMA coherency rules
gregkh/linux@51785c20e5e9 ALSA: aoa: Skip devices with no codecs in i2sbus_resume()
gregkh/linux@0e84aa8fc23c media: rc: igorplugusb: heed coherency rules
gregkh/linux@604f4ec9a234 sched: Use u64 for bandwidth ratio calculations
gregkh/linux@6e3675251fce net: qrtr: ns: Limit the maximum number of lookups
gregkh/linux@b18ee1114d72 net: qrtr: ns: Change servers radix tree to xarray
gregkh/linux@25d580a46b07 net: qrtr: ns: Free the node during ctrl_cmd_bye()
gregkh/linux@b0e6cd8eb845 net: mctp: fix don't require received header reserved bits to be zero
gregkh/linux@ed29887286ab net: qrtr: ns: Limit the total number of nodes
gregkh/linux@1406c4e0ed1e net: bridge: use a stable FDB dst snapshot in RCU readers
gregkh/linux@e0401de43dac spi: fix resource leaks on device setup failure
gregkh/linux@4fda0d6b45fa fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
gregkh/linux@ed2d6442e611 xfs: fix a resource leak in xfs_alloc_buftarg()
gregkh/linux@e8474cfbac9a udf: fix partition descriptor append bookkeeping
gregkh/linux@3bc337697c66 hfsplus: fix uninit-value by validating catalog record size
gregkh/linux@c554ddc87af4 hfsplus: fix held lock freed on hfsplus_fill_super()
gregkh/linux@118ff71ff09e erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
gregkh/linux@79ffcbeac6bc ceph: only d_add() negative dentries when they are unhashed
gregkh/linux@7d30ebfd97c5 printk: add print_hex_dump_devel()
gregkh/linux@a9207798fe61 crypto: caam - guard HMAC key hex dumps in hash_digest_key
gregkh/linux@eefbff1f1358 net: stmmac: avoid shadowing global buf_sz
gregkh/linux@b31b6652f7b9 net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
gregkh/linux@fdeb95b1fc7d net: stmmac: Prevent NULL deref when RX memory exhausted
gregkh/linux@36ff36223530 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
gregkh/linux@18fed0a20950 wifi: mac80211: remove station if connection prep fails
gregkh/linux@d616bb10de79 wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
gregkh/linux@b02143ea1319 usb: dwc3: Move GUID programming after PHY initialization
gregkh/linux@b6ebc7df8490 net: ipv4: stop checking crypto_ahash_alignmask
gregkh/linux@be9ebdbbee05 net: ipv6: stop checking crypto_ahash_alignmask
gregkh/linux@1dae77078ceb xfrm: ah: account for ESN high bits in async callbacks
gregkh/linux@2c617848ae6e xfrm: defensively unhash xfrm_state lists in _xfrm_state_delete
gregkh/linux@b3d0e07b4294 spi: synquacer: Convert to platform remove callback returning void
gregkh/linux@58a4bfada515 spi: synquacer: switch to use modern name
gregkh/linux@9858a35467f8 spi: syncuacer: fix controller deregistration
gregkh/linux@bfe2bc16505f spi: sun4i: Convert to platform remove callback returning void
gregkh/linux@69cfcf6c100a spi: sun4i: switch to use modern name
gregkh/linux@82c9f6132321 spi: sun4i: fix controller deregistration
gregkh/linux@7c632193bea2 spi: Convert to SPI_CONTROLLER_HALF_DUPLEX
gregkh/linux@acf78e991194 spi: spi-ti-qspi: Convert to platform remove callback returning void
gregkh/linux@6a50fa737471 spi: spi-ti-qspi: switch to use modern name
gregkh/linux@1ec70732b2a3 spi: ti-qspi: fix controller deregistration
gregkh/linux@5cfc001ccac7 spi: zynq-qspi: Convert to platform remove callback returning void
gregkh/linux@8967340e4ee1 spi: spi-zynq: Do not check for 0 return after calling platform_get_irq()
gregkh/linux@3f4918f01fc3 spi: zynq-qspi: switch to use modern name
gregkh/linux@dd73824a4da6 spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled()
gregkh/linux@fc8ebba63e99 spi: zynq-qspi: fix controller deregistration
gregkh/linux@c7787a7f83a2 spi: sun6i: fix controller deregistration
gregkh/linux@3a3bc210b278 spi: s3c64xx: Use devm_clk_get_enabled()
gregkh/linux@29e219a18e21 spi: s3c64xx: fix NULL-deref on driver unbind
gregkh/linux@b00d5034cbcf mtd: spi-nor: core: fix implicit declaration warning
gregkh/linux@231b8e1f604f mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
gregkh/linux@96fcd0fe59cf spi: tegra114: fix controller deregistration
gregkh/linux@5b6795e4f5bf spi: tegra20-sflash: fix controller deregistration
gregkh/linux@bb1aae517989 spi: uniphier: Convert to platform remove callback returning void
gregkh/linux@e2e22eefb1f5 spi: uniphier: switch to use modern name
gregkh/linux@819b3fbd5a27 spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
gregkh/linux@f309c4d22d51 spi: uniphier: fix controller deregistration
gregkh/linux@ec35d8fea544 mm/hugetlb_cma: round up per_node before logging it
gregkh/linux@307c5d0f36a5 net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
gregkh/linux@25f896d6753d spi: microchip-core-qspi: Convert to platform remove callback returning void
gregkh/linux@3dd86af2b697 spi: microchip-core-qspi: Use helper function devm_clk_get_enabled()
gregkh/linux@3398bbe3b2d9 spi: microchip-core-qspi: fix controller deregistration
gregkh/linux@524a60793959 fbcon: Avoid OOB font access if console rotation fails
gregkh/linux@d7312e024b60 spi: topcliff-pch: Convert to platform remove callback returning void
gregkh/linux@d69a4a6813fd btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
gregkh/linux@e4f9863a1cf9 tracing/probes: Limit size of event probe to 3K
gregkh/linux@37a7ddb002d8 btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type()
gregkh/linux@c2d59527cba6 btrfs: fix double free in create_space_info_sub_group() error path
gregkh/linux@52e485ed0dcb pmdomain: core: Fix detach procedure for virtual devices in genpd
gregkh/linux@f9dc3be8f403 smb: client: validate dacloffset before building DACL pointers
gregkh/linux@e34f3ab7a044 smb: client: Use FullSessionKey for AES-256 encryption key derivation
gregkh/linux@6acbb2f6dff2 btrfs: fix missing last_unlink_trans update when removing a directory
gregkh/linux@01f5793f1215 mptcp: fastclose msk when linger time is 0
gregkh/linux@12f85388dd2f mptcp: pm: prio: skip closed subflows
gregkh/linux@43be5142cf76 mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
gregkh/linux@f843e426e73e mptcp: pm: ADD_ADDR rtx: allow ID 0
gregkh/linux@b35605e1f1e8 mptcp: pm: ADD_ADDR rtx: fix potential data-race
gregkh/linux@a79b97e5e1c9 mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
gregkh/linux@c671d729f247 f2fs: fix incorrect file address mapping when inline inode is unwritten
gregkh/linux@f76a6908aec3 f2fs: fix false alarm of lockdep on cp_global_sem lock
gregkh/linux@cebc46b8c236 spi: st-ssc4: switch to use modern name
gregkh/linux@1e50084c98cd spi: st-ssc4: fix controller deregistration
gregkh/linux@81c53c7e4f56 spi: lantiq-ssc: fix controller deregistration
gregkh/linux@f8a8358832f3 cgroup/cpuset: Reset DL migration state on can_attach() failure
gregkh/linux@07bfd1acafa6 genetlink: Use internal flags for multicast groups
gregkh/linux@9919021a3b79 smb: client: require net admin for CIFS SWN netlink
gregkh/linux@77438d954d1c Bluetooth: hci_qca: Convert timeout from jiffies to ms
gregkh/linux@e81446b559db mm/memory: fix spurious warning when unmapping device-private/exclusive pages
gregkh/linux@14fdd61e38bd Bluetooth: Init sk_peer on bt_sock_alloc
gregkh/linux@4ec17782fd18 Bluetooth: serialize accept_q access
gregkh/linux@c5580114e049 net: hsr: defer node table free until after RCU readers
gregkh/linux@09cbfd4b81ae ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
gregkh/linux@50de0a172bef ice: fix VF queue configuration with low MTU values
gregkh/linux@2d358c9b0878 mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient
gregkh/linux@7738739067e0 selftests: mptcp: drop nanoseconds width specifier
gregkh/linux@f4aee5c8b207 octeontx2-af: replace deprecated strncpy with strscpy
gregkh/linux@93d3dc81098c octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
gregkh/linux@d557903bd3b4 mptcp: reset rcv wnd on disconnect
gregkh/linux@1759ffc6b9b3 mptcp: do not drop partial packets
gregkh/linux@d972aad6362b platform/x86/intel/vsec: Add private data for per-device data
gregkh/linux@5d0b3f8f9651 platform/x86/intel/vsec: Create wrapper to walk PCI config space
gregkh/linux@75270a3707ed platform/x86/intel/vsec: Make driver_data info const
gregkh/linux@101f8c70121c platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery
gregkh/linux@94192b057933 octeontx2-pf: avoid double free of pool->stack on AQ init failure
gregkh/linux@9fdb9fb45d93 spi: qup: switch to use modern name
gregkh/linux@9e673affb92c spi: qup: fix error pointer deref after DMA setup failure
gregkh/linux@0199c9d57861 arm64: tlb: Flush walk cache when unsharing PMD tables
gregkh/linux@bea3f906a91c phy: tegra: xusb: Disable trk clk when not in use
gregkh/linux@ee9f753be2a9 phy: tegra: xusb: Fix per-pad high-speed termination calibration
gregkh/linux@d81a4491979c iio: adc: fix the return value handle for platform_get_irq()
gregkh/linux@7e645a458260 iio: adc: npcm: Convert to platform remove callback returning void
gregkh/linux@a1ec042950c2 iio: adc: npcm: fix unbalanced clk_disable_unprepare()
gregkh/linux@59f80b945f2c iio: gyro: adis16260: fix division by zero in write_raw
gregkh/linux@e72d91ebbc02 iio: chemical: scd30: Use guard(mutex) to allow early returns
gregkh/linux@c7a740bf7555 iio: chemical: scd30: fix division by zero in write_raw
gregkh/linux@4f1818fae183 usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure
gregkh/linux@16d01a1925a1 iio: dac: ad5686: fix ref bit initialization for single-channel parts
gregkh/linux@f6c7eb3317e8 ALSA: firewire-motu: Protect register DSP event queue positions
gregkh/linux@d5dc1c4fb274 serial: samsung_tty: Use port lock wrappers
gregkh/linux@f5e1f9bc61cf tty: serial: samsung: use u32 for register interactions
gregkh/linux@f4c3e63fa863 tty: serial: samsung: Remove redundant port lock acquisition in rx helpers
gregkh/linux@00cd5245040e usb: dwc3: xilinx: fix error handling in zynqmp init error paths
gregkh/linux@632fd888fe33 usb: musb: omap2430: Fix use-after-free in omap2430_probe()
gregkh/linux@7630f74a2727 usb: gadget: f_hid: tidy error handling in hidg_alloc
gregkh/linux@75dacecfd0b5 usb: gadget: f_hid: fix device reference leak in hidg_alloc()
gregkh/linux@cb0a675ad276 usb: typec: ucsi: Check if power role change actually happened before handling
gregkh/linux@0a84ab927193 thunderbolt: property: Cap recursion depth in __tb_property_parse_dir()
gregkh/linux@2c824aa91a6b tty: serial: qcom-geni-serial: remove unused symbols
gregkh/linux@07634e3ad4bd tty: serial: qcom-geni-serial: align #define values
gregkh/linux@e074cf9ef4f4 serial: qcom-geni: fix UART_RX_PAR_EN bit position
gregkh/linux@6e22a1cdcc82 scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
gregkh/linux@cb82a6ccd348 usb: typec: ucsi: Don't update power_supply on power role change if not connected
gregkh/linux@d19ddef8c327 netfilter: nft_fib: fix stale stack leak via the OIFNAME register
gregkh/linux@695c59cf7bf7 hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf
gregkh/linux@4f7053569606 mm/hugetlb: rename isolate_hugetlb() to folio_isolate_hugetlb()
gregkh/linux@68c476f5b863 mm/migrate: don't call folio_putback_active_hugetlb() on dst hugetlb folio
gregkh/linux@9545778a8a34 mm/hugetlb: rename folio_putback_active_hugetlb() to folio_putback_hugetlb()
gregkh/linux@44b106b18cb0 mm/memory-failure: fix missing ->mf_stats count in hugetlb poison
gregkh/linux@fc3ff42cb0cb mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison
gregkh/linux@2536175f459e RDMA/umem: fix kernel-doc warnings
gregkh/linux@fd72863491c8 RDMA: Move DMA block iterator logic into dedicated files
gregkh/linux@cc644d5608e3 RDMA/umem: Fix truncation for block sizes >= 4G
gregkh/linux@768f665f3685 ipvs: skip ipv6 extension headers for csum checks
gregkh/linux@33f0370bb7ce blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init
gregkh/linux@58943b7ea356 batman-adv: stop tp_meter sessions during mesh teardown
gregkh/linux@8bfc8328c61d batman-adv: tp_meter: fix tp_num leak on kmalloc failure
gregkh/linux@3d980c588d8e ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6
gregkh/linux@7bf35a0237d0 perf build: Conditionally define NDEBUG
gregkh/linux@e7e693b1235e perf parse-events: Make YYDEBUG dependent on doing a debug build
gregkh/linux@3f96330889ae perf build: Disable fewer bison warnings
gregkh/linux@522472d1b3fa tools build: Add 3-component logical version comparators
gregkh/linux@23f04cf82748 perf build: Remove -Wno-unused-but-set-variable from the flex flags when building with clang < 13.0.0
gregkh/linux@439ad847edf9 KVM: arm64: Wake-up from WFI when iqrchip is in userspace
gregkh/linux@1d9449d628a6 ipmi:ssif: Fix a shutdown race
gregkh/linux@e662be2d0d05 ipmi:ssif: Clean up kthread on errors
gregkh/linux@83d603e3fd6a mm/damon/core: use time_in_range_open() for damos quota window start
gregkh/linux@f421e831c48c mm/damon/core: disallow time-quota setting zero esz
gregkh/linux@acebb35525b0 usb: typec: tcpm: reset internal port states on soft reset AMS
gregkh/linux@6d63615c796c lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
gregkh/linux@341ec347c7bf ipmi:ssif: Remove unnecessary indention
gregkh/linux@4390b3d84571 ipmi:ssif: NULL thread on error
gregkh/linux@221f900f4ef2 mm/damon/core: implement damon_kdamond_pid()
gregkh/linux@2f32fb0e0c32 mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values
gregkh/linux@2f54908fae21 mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values
gregkh/linux@309abbddeca0 drm/v3d: Reject empty multisync extension to prevent infinite loop
gregkh/linux@5880b247813c arm64: cputype: Add NVIDIA Olympus definitions
gregkh/linux@3797678ac6d0 arm64: cputype: Add C1-Ultra definitions
gregkh/linux@69d268fbddef arm64: cputype: Add C1-Premium definitions
gregkh/linux@7c3ad9365079 arm64: errata: Mitigate TLBI errata on various Arm CPUs
gregkh/linux@90ff607552ba arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
gregkh/linux@0d1f1a388b68 arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU
gregkh/linux@67a0c3ed190f Revert "selftest/ptp: update ptp selftest to exercise the gettimex options"
gregkh/linux@e87e1071e518 fbdev: vt8500lcdfb: Fix dma_free_coherent() cpu_addr parameter
gregkh/linux@516f38446262 apparmor: validate default DFA states are in bounds
gregkh/linux@c7e6b2e9fbd0 x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function
gregkh/linux@cc62578b65e4 r8152: Hold the rtnl_lock for all of reset
gregkh/linux@e7d45270855b selftests/bpf: Fix bpf_nf selftest failure
gregkh/linux@1bd9886861ac bootconfig: Fix negative seeks on 32-bit with LFS enabled
gregkh/linux@1adf022ea016 media: rc: ttusbir: fix inverted error logic
gregkh/linux@297e1bc4a915 batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown
gregkh/linux@aa22590a16e5 media: rc: igorplugusb: fix control request setup packet
gregkh/linux@f6324b4240cf ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops
gregkh/linux@7c7c17abf8eb batman-adv: tp_meter: fix race condition in send error reporting
gregkh/linux@9b6440aa76fe batman-adv: tp_meter: avoid role confusion in tp_list
gregkh/linux@063f43361e88 netfilter: require Ethernet MAC header before using eth_hdr()
gregkh/linux@fdb6fcb41cc7 Linux 6.1.176