Linux 7.0-rc4

[Linus Torvalds]

So last week looked very calm - for a few days.

Then Thursday hit with the networking pull. And then on Friday
everybody else decided to send in their work for the week, with a few
more trickling in over the weekend. End result: what had for a short
few days looked like a nice calm week turned into another "bigger than
usual" release candidate.

To be fair, that "almost everything comes in at the end of the week"
is 100% normal, and none of this is surprising. I was admittedly
hoping that things would start to calm down, but that was not to be.

I no longer really believe that it was the one extra week we had last
release cycle: I'm starting to suspect it's the psychological result
of "hey, new major number", and people are just being a bit more
active as a result.

It's been fairly consistent: while -rc1 was a fairly normal size at
11.5k commits (not counting merges), we have now have rc2..rc4 all
being just a bit larger than usual. Not by a _huge_ amount, by any
means, but enough to be noticeable.

Anyway, while the numbers are a bit larger than is typical for this
stage in the release, it all looks fairly small and benign. For
example, once again the selftest updates show up fairly noticeable in
the diffstat, and the actual kernel diffs look mostly pretty flat and
spread out - so it may be a fair amount of commits, but it's mostly
all small stuff.

Shortlog appended - I don't think there's any particularly odd pattern
here worth pointing out.

                        Linus

---

A1RM4X (1):
      USB: add QUIRK_NO_BOS for video capture several devices

Abel Vesa (1):
      dt-bindings: display: msm: Fix reg ranges and clocks on Glymur

Abhinav Kumar (1):
      drm/msm/dpu: Correct the SA8775P intr_underrun/intr_underrun index

Adrian Hunter (14):
      i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors
      i3c: mipi-i3c-hci: Fix Hot-Join NACK
      i3c: mipi-i3c-hci: Factor out DMA mapping from queuing path
      i3c: mipi-i3c-hci: Consolidate spinlocks
      i3c: mipi-i3c-hci: Fix race in DMA ring enqueue for parallel xfers
      i3c: mipi-i3c-hci: Fix race in DMA ring dequeue
      i3c: mipi-i3c-hci: Fix race between DMA ring dequeue and interrupt handler
      i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue
      i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor
      i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort
      i3c: mipi-i3c-hci: Consolidate common xfer processing logic
      i3c: mipi-i3c-hci: Fix race in DMA error handling in interrupt context
      i3c: mipi-i3c-hci: Fix handling of shared IRQs during early initialization
      i3c: mipi-i3c-hci: Fallback to software reset when bus disable fails

Adrian Ng Ho Yin (1):
      i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach

Akhil P Oommen (3):
      drm/msm/adreno: Add GPU to MODULE_DEVICE_TABLE
      drm/msm/a6xx: Fix the bogus protect error on X2-85
      drm/msm/a8xx: Fix ubwc config related to swizzling

Alan Borzeszkowski (1):
      spi: intel-pci: Add support for Nova Lake mobile SPI flash

Alan Stern (3):
      USB: usbcore: Introduce usb_bulk_msg_killable()
      USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
      USB: core: Limit the length of unkillable synchronous timeouts

Alexandre Courbot (1):
      rust: str: make NullTerminatedFormatter public

Ali Khaledi (1):
      ksmbd: fix use-after-free in proc_show_files due to early rcu_read_unlock

Alice Ryhl (4):
      rust_binder: check ownership before using vma
      rust_binder: avoid reading the written value in offsets array
      rust_binder: call set_notification_done() without proc lock
      rust_binder: use lock_vma_under_rcu() in use_page_slow()

Alok Tiwari (3):
      i40e: fix src IP mask checks and memcpy argument names in cloud filter
      octeontx2-af: devlink: fix NIX RAS reporter recovery condition
      octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status

Andrea Righi (1):
      sched_ext: Document task ownership state machine

Andreas Kemnade (1):
      iio: imu: inv-mpu9150: fix irq ack preventing irq storms

Andrzej Kacprowski (1):
      accel/ivpu: Remove boot params address setting via MMIO register

Anna Schumaker (1):
      NFS: Fix NFS KConfig typos

Antoniu Miclaus (6):
      iio: light: bh1780: fix PM runtime leak on error path
      iio: magnetometer: tlv493d: remove erroneous shift in X-axis data
      iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
      iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas()
      iio: gyro: mpu3050-i2c: fix pm_runtime error handling
      iio: gyro: mpu3050-core: fix pm_runtime error handling

Anup Patel (3):
      RISC-V: KVM: Fix error code returned for Smstateen ONE_REG
      RISC-V: KVM: Fix error code returned for Ssaia ONE_REG
      RISC-V: KVM: Check host Ssaia extension when creating AIA irqchip

Arnaldo Carvalho de Melo (12):
      tools headers: Sync uapi/linux/prctl.h with the kernel source
      perf beauty: Sync linux/mount.h copy with the kernel sources
      perf beauty: Sync UAPI linux/fs.h with kernel sources
      perf beauty: Update the arch/x86/include/asm/irq_vectors.h copy
with the kernel sources
      perf beauty: Update the linux/perf_event.h copy with the kernel sources
      tools headers: Update the linux/gfp_types.h copy with the kernel sources
      tools headers UAPI: Sync linux/kvm.h with the kernel sources
      tools headers x86 cpufeatures: Sync with the kernel sources
      tools headers UAPI: Sync x86's asm/kvm.h with the kernel sources
      tools arch x86: Sync msr-index.h to pick
MSR_{OMR_[0-3],CORE_PERF_GLOBAL_STATUS_SET}
      tools headers: Update the syscall tables and unistd.h, to
support the new 'rseq_slice_yield' syscall
      tools headers UAPI: Update tools' copy of linux/coresight-pmu.h

Arnd Bergmann (2):
      i3c: simplify combined i3c/i2c dependencies
      smb: client: fix sbflags initialization

Artem Lytkin (1):
      staging: sm750fb: add missing pci_release_region on error and removal

Arun R Murthy (1):
      drm/i915/dp: Read ALPM caps after DPCD init

Axel Rasmussen (1):
      Revert "ptdesc: remove references to folios from
__pagetable_ctor() and pagetable_dtor()"

Bart Van Assche (1):
      btrfs: add missing RCU unlock in error path in
try_release_subpage_extent_buffer()

Bastien Curutchet (Schneider Electric) (1):
      net: dsa: microchip: Fix error path in PTP IRQ setup

Ben Dooks (1):
      ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()

Benno Lossin (3):
      rust: pin-init: internal: init: remove
`#[disable_initialized_field_access]`
      rust: pin-init: internal: init: document load-bearing fact of
field accessors
      rust: pin-init: replace shadowed return token by `unsafe`-to-create token

Bharath SM (1):
      smb: client: fix in-place encryption corruption in SMB2_write()

Bjorn Andersson (1):
      remoteproc: sysmon: Correct subsys_name_len type in QMI request

Boris Burkov (1):
      btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create

Breno Leitao (6):
      workqueue: Use POOL_BH instead of WQ_BH when checking pool flags
      workqueue: Rename pool->watchdog_ts to pool->last_progress_ts
      workqueue: Show in-flight work item duration in stall diagnostics
      workqueue: Show all busy workers in stall diagnostics
      workqueue: Add stall detector sample module
      workqueue: Rename show_cpu_pool{s,}_hog{s,}() to reflect broadened scope

CL Wang (1):
      spi: atcspi200: Handle invalid buswidth and fix compiler warning

Carlos Llamas (1):
      rust_binder: fix oneway spam detection

Carlos López (1):
      KVM: x86: synthesize CPUID bits only if CPU capability is set

Carlos Maiolino (1):
      xfs: fix returned valued from xfs_defer_can_append

Carolina Jubran (1):
      net/mlx5: Fix peer miss rules host disabled checks

Casey Connolly (1):
      ASoC: detect empty DMI strings

Chaitanya Kulkarni (1):
      nvmet: move async event work off nvmet-wq

Changqing Li (1):
      tools build: Make in-target rule robust against too long argument error

Chen Ni (4):
      perf annotate: Fix hashmap__new() error checking
      perf ftrace: Fix hashmap__new() error checking
      ASoC: amd: acp3x-rt5682-max9836: Add missing error check for
clock acquisition
      ASoC: amd: acp-mach-common: Add missing error check for clock acquisition

Chen-Yu Tsai (1):
      spi: dt-bindings: sun6i: Allow Dual SPI and Quad SPI for newer SoCs

Cheng-Yang Chou (2):
      sched_ext/selftests: Fix format specifier and buffer length in
file_write_long()
      sched_ext: Documentation: Update sched-ext.rst

Chengfeng Ye (1):
      mctp: route: hold key->lock in mctp_flow_prepare_output()

Chintan Vankar (1):
      net: ethernet: ti: am65-cpsw-nuss: Fix rx_filter value for PTP support

Chris Spencer (1):
      iio: chemical: bme680: Fix measurement wait duration calculation

Christian Loehle (1):
      sched_ext: Documentation: Mention scheduling class precedence

Christoffer Sandberg (1):
      usb/core/quirks: Add Huawei ME906S-device to wakeup quirk

Christophe Leroy (1):
      powerpc/e500: Always use 64 bits PTE

Christophe Leroy (CS GROUP) (1):
      powerpc/uaccess: Fix inline assembly for clang build on PPC32

Chuck Lever (1):
      perf synthetic-events: Fix stale build ID in module MMAP2 records

Cosmin Ratiu (1):
      net/mlx5: Fix deadlock between devlink lock and esw->wq

Cristian Ciocaltea (1):
      drm/amdgpu: Fix kernel-doc comments for some LUT properties

Damien Le Moal (1):
      xfs: remove scratch field from struct xfs_gc_bio

Daniel Golle (1):
      net: dsa: mxl862xx: don't set user_mii_bus

Danilo Krummrich (1):
      gpu: nova-core: gsp: fix UB in DmaGspMem pointer accessors

Darrick J. Wong (2):
      xfs: fix race between healthmon unmount and read_iter
      xfs: fix undersized l_iclog_roundoff values

Dave Hansen (1):
      MAINTAINERS: Remove bouncing T7XX reviewer

David Carlier (1):
      sched_ext: Use READ_ONCE() for scx_slice_bypass_us in scx_bypass()

David Dull (1):
      netfilter: x_tables: guard option walkers against 1-byte tail reads

David Lechner (1):
      drm/sitronix/st7586: fix bad pixel data due to byte swap

Dayu Jiang (1):
      usb: xhci: Prevent interrupt storm on host controller error (HCE)

Dmitrii Dolgov (1):
      tools build: Fix rust cross compilation

Dmitry Baryshkov (1):
      Revert "drm/msm/dpu: try reserving the DSPP-less LM first"

Dongsheng Yang (1):
      MAINTAINERS: update email address of Dongsheng Yang

Dragos Tatulea (2):
      net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ
      net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ

Eric Badger (1):
      xprtrdma: Decrement re_receiving on the early exit paths

Eric Dumazet (2):
      MAINTAINERS: include/net/tc_wrapper.h belongs to TC subsystem
      net: prevent NULL deref in ip[6]tunnel_xmit()

Ethan Tidmore (1):
      iio: adc: ad7768-1: Fix ERR_PTR dereference in ad7768_fill_scale_tbl

Fan Wu (2):
      net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
      usb: renesas_usbhs: fix use-after-free in ISR during device removal

Felix Gu (4):
      power: sequencing: pcie-m2: Fix device node reference leak in probe
      spi: amlogic: spifc-a4: Fix DMA mapping error handling
      spi: atcspi200: Fix double-free in atcspi_configure_dma()
      spi: rockchip-sfc: Fix double-free in remove() callback

Filipe Manana (6):
      btrfs: fix transaction abort on file creation due to name hash collision
      btrfs: fix transaction abort when snapshotting received subvolumes
      btrfs: fix transaction abort on set received ioctl due to item overflow
      btrfs: abort transaction on failure to update root in the
received subvol ioctl
      btrfs: remove unnecessary transaction abort in the received subvol ioctl
      btrfs: remove duplicated definition of btrfs_printk_in_rcu()

Florian Westphal (1):
      netfilter: nf_tables: always walk all pending catchall elements

Fuad Tabba (2):
      KVM: arm64: Fix page leak in user_mem_abort() on atomic fault
      KVM: arm64: Fix vma_shift staleness on nested hwpoison path

Gabor Juhos (1):
      usb: core: don't power off roothub PHYs if phy_set_mode() fails

Gal Pressman (1):
      net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery

Gary Guo (5):
      rust: kbuild: emit dep-info into $(depfile) directly
      rust: build: remap path to avoid absolute path
      rust: ptr: add `KnownSize` trait to support DST size info extraction
      rust: ptr: add projection infrastructure
      rust: dma: use pointer projection infra for `dma_{read,write}` macro

Greg Kroah-Hartman (2):
      staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
      usb: misc: uss720: properly clean up reference in uss720_probe()

Guenter Roeck (1):
      smb/server: Fix another refcount leak in smb2_open()

HONG Yifan (1):
      objtool: Use HOSTCFLAGS for HAVE_XXHASH test

Haibo Chen (1):
      can: dev: keep the max bitrate error at 5%

Haiyue Wang (1):
      mctp: i2c: fix skb memory leak in receive path

Hangbin Liu (2):
      bonding: do not set usable_slaves for broadcast mode
      bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states

Hao Li (1):
      memcg: fix slab accounting in refill_obj_stock() trylock path

Harald Freudenberger (1):
      s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute

Hari Bathini (9):
      powerpc64: make clang cross-build friendly
      powerpc64/ftrace: fix OOL stub count with clang
      powerpc64/ftrace: workaround clang recording GEP in
__patchable_function_entries
      powerpc64/bpf: do not increment tailcall count when prog is NULL
      powerpc64/bpf: fix the address returned by bpf_get_func_ip
      powerpc64/bpf: use consistent tailcall offset in trampoline
      powerpc64/bpf: remove BPF redzone protection in trampoline stack
      powerpc64/bpf: fix handling of BPF stack in exception callback
      powerpc64/bpf: fix kfunc call support

Harry Yoo (1):
      mm/slab: fix an incorrect check in obj_exts_alloc_size()

Heikki Krogerus (1):
      usb: dwc3: pci: add support for the Intel Nova Lake -H

Heiko Carstens (1):
      s390: Revert "s390/irq/idle: Remove psw bits early"

Henrique Carvalho (1):
      smb: client: fix iface port assignment in parse_server_interfaces

Hristo Venev (1):
      ceph: do not skip the first folio of the next object in writeback

Hyunwoo Kim (2):
      netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
      netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

Ian Rogers (1):
      perf annotate loongarch: Fix off-by-one bug in outside check

Ilya Dryomov (3):
      libceph: prevent potential out-of-bounds reads in process_message_header()
      libceph: admit message frames only in CEPH_CON_S_OPEN state
      libceph: reject preamble if control segment is empty

Ivan Lipski (2):
      drm/amd/display: Add missing DCCG register entries for DCN20-DCN316
      drm/amd/display: Check for S0i3 to be done before DCCG init on DCN21

J. Neuschäfer (7):
      dt-bindings: powerpc: Add Freescale/NXP MPC83xx SoCs
      powerpc: 83xx: km83xx: Fix keymile vendor prefix
      powerpc: dts: mpc8313erdb: Use IRQ_TYPE_* macros
      powerpc: dts: mpc8315erdb: Use IRQ_TYPE_* macros
      powerpc: dts: mpc8315erdb: Rename LED nodes to comply with schema
      powerpc: dts: mpc8315erdb: Add missing #cells properties to SPI bus
      powerpc: dts: mpc83xx: Add unit addresses to /memory

Jakub Kicinski (2):
      page_pool: store detach_time as ktime_t to avoid false-negatives
      ipv6: move the disable_ipv6_mod knob to core code

James Clark (2):
      perf cs-etm: Finish removal of ETM_OPT_*
      perf cs-etm: Sync coresight-pmu.h header with the kernel sources

Jan Kiszka (1):
      cpupower: Add support for setting EPP via systemd service

Jann Horn (1):
      io_uring/register: fix comment about task_no_new_privs

Janusz Krzysztofik (1):
      drm/i915: Fix potential overflow of shmem scatterlist length

Jason Xing (1):
      MAINTAINERS: add RELAY entry

Jean-Baptiste Maneyrol (4):
      iio: imu: inv_icm42600: fix odr switch to the same value
      iio: imu: inv_icm42600: fix odr switch when turning buffer off
      iio: imu: inv_icm45600: fix INT1 drive bit inverted
      iio: imu: inv_icm45600: fix regulator put warning when probe fails

Jenny Guanni Qu (1):
      netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()

Jens Axboe (4):
      io_uring/bpf_filter: use bpf_prog_run_pin_on_cpu() to prevent migration
      io_uring: ensure ctx->rings is stable for task work flags manipulation
      io_uring/eventfd: use ctx->rings_rcu for flags checking
      io_uring/kbuf: check if target buffer list is still legacy on recycle

Jessica Liu (2):
      irqchip/riscv-aplic: Do not clear ACPI dependencies on probe failure
      irqchip/riscv-aplic: Register syscore operations only once

Jiakai Xu (4):
      RISC-V: KVM: Fix use-after-free in kvm_riscv_gstage_get_leaf()
      RISC-V: KVM: Fix null pointer dereference in
kvm_riscv_vcpu_aia_rmw_topei()
      RISC-V: KVM: Fix use-after-free in kvm_riscv_aia_aplic_has_attr()
      RISC-V: KVM: Fix potential UAF in kvm_riscv_aia_imsic_has_attr()

Jian Zhang (1):
      net: ncsi: fix skb leak in error paths

Jiasheng Jiang (1):
      usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling

Jiayuan Chen (1):
      bonding: fix type confusion in bond_setup_by_slave()

Jie Deng (1):
      usb: core: new quirk to handle devices with zero configurations

Jim Mattson (1):
      KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM

Johan Hovold (2):
      net: mctp: fix device leak on probe failure
      gpib: lpvo_usb: fix unintended binding of FTDI 8U232AM devices

Johannes Thumshirn (1):
      btrfs: zoned: move btrfs_zoned_reserve_data_reloc_bg() after kthread start

John Hubbard (1):
      rust: cpufreq: suppress clippy::double_parens in Policy doctest

John Johansen (6):
      apparmor: fix: limit the number of levels of policy namespaces
      apparmor: Fix double free of ns_name in aa_replace_profiles()
      apparmor: fix unprivileged local user can do privileged policy management
      apparmor: fix differential encoding verification
      apparmor: fix race on rawdata dereference
      apparmor: fix race between freeing data and fs accessing it

John Keeping (1):
      usb: gadget: f_hid: fix SuperSpeed descriptors

Josh Law (3):
      lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error
      lib/bootconfig: check bounds before writing in __xbc_open_brace()
      lib/bootconfig: fix snprintf truncation check in
xbc_node_compose_key_after()

Josh Poimboeuf (7):
      objtool/klp: Fix detection of corrupt static branch/call entries
      objtool/klp: Disable unsupported pr_debug() usage
      objtool/klp: Avoid NULL pointer dereference when printing code symbol name
      objtool: Fix data alignment in elf_add_data()
      objtool: Fix ERROR_INSN() error message
      objtool: Handle Clang RSP musical chairs
      objtool: Fix another stack overflow in validate_branch()

Jouni Högander (4):
      drm/i915/psr: Repeat Selective Update area alignment
      drm/i915/dsc: Add Selective Update register definitions
      drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters
      drm/i915/psr: Write DSC parameters on Selective Update in ET mode

Junxiao Bi (1):
      scsi: core: Fix error handling for scsi_alloc_sdev()

Junzhong Pan (1):
      usb: gadget: uvc: fix interval_duration calculation

Kai Huang (1):
      KVM: selftests: Increase 'maxnode' for guest_memfd tests

Kaushlendra Kumar (1):
      cpupower: fix swapped power/energy unit labels

Kees Cook (1):
      drm/msm: Adjust msm_iommu_pagetable_prealloc_allocate() allocation type

Kevin Hao (1):
      net: macb: Shuffle the tx ring before enabling tx

Konrad Dybcio (1):
      drm/msm/dpu: Fix LM size on a number of platforms

Krzysztof Kozlowski (1):
      dt-bindings: display/msm: qcom,sm8750-mdss: Fix model typo

Kuen-Han Tsai (9):
      usb: legacy: ncm: Fix NPE in gncm_bind
      usb: gadget: f_ncm: Fix atomic context locking issue
      Revert "usb: gadget: f_ncm: Fix atomic context locking issue"
      Revert "usb: legacy: ncm: Fix NPE in gncm_bind"
      Revert "usb: gadget: f_ncm: align net_device lifecycle with bind/unbind"
      Revert "usb: gadget: u_ether: Add auto-cleanup helper for
freeing net_device"
      Revert "usb: gadget: u_ether: use <linux/hex.h> header file"
      Revert "usb: gadget: u_ether: add gether_opts for config caching"
      usb: gadget: f_ncm: Fix net_device lifecycle with device_move

Laurent Vivier (1):
      qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size

Li RongQing (1):
      KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers()

Lianqin Hu (1):
      ALSA: usb-audio: Add iface reset and delay quirk for SPACETOUCH USB Audio

Linus Torvalds (1):
      Linux 7.0-rc4

Liucheng Lu (1):
      ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk

Liwei Song (1):
      firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled

Lizhi Hou (1):
      accel/amdxdna: Fix runtime suspend deadlock when there is pending job

Long Li (3):
      xfs: remove redundant set null for ip->i_itemp
      xfs: ensure dquot item is deleted from AIL only after log shutdown
      xfs: fix integer overflow in bmap intent sort comparator

Lorenzo Stoakes (Oracle) (1):
      MAINTAINERS, mailmap: update email address for Lorenzo Stoakes

Luca Ceresoli (2):
      drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding
      drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output

Luka Gejak (1):
      staging: rtl8723bs: fix potential out-of-bounds read in
rtw_restruct_wmm_ie

Lukas Gerlach (5):
      KVM: riscv: Fix Spectre-v1 in APLIC interrupt handling
      KVM: riscv: Fix Spectre-v1 in ONE_REG register access
      KVM: riscv: Fix Spectre-v1 in AIA CSR access
      KVM: riscv: Fix Spectre-v1 in floating-point register access
      KVM: riscv: Fix Spectre-v1 in PMU counter access

Lukas Schmid (1):
      iio: potentiometer: mcp4131: fix double application of wiper shift

Manuel Andreas (1):
      KVM: x86: hyper-v: Validate all GVAs during PV TLB flush

Marc Zyngier (5):
      KVM: arm64: Eagerly init vgic dist/redist on vgic creation
      KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault
      KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail
      KVM: arm64: pkvm: Don't reprobe for ICH_VTR_EL2.TDS on CPU hotplug
      usb: cdc-acm: Restore CAP_BRK functionnality to CH343

Marek Behún (1):
      net: dsa: realtek: Fix LED group port bit for non-zero LED group

Mario Limonciello (3):
      drm/amd: Fix NULL pointer dereference in device cleanup
      drm/amd: Fix a few more NULL pointer dereference in device cleanup
      drm/amd: Set num IP blocks to 0 if discovery fails

Marios Makassikis (1):
      smb: server: fix use-after-free in smb2_open()

Mark Brown (1):
      spi: cadence-qspi: Fix requesting of APB and AHB clocks on JH7110

Mark Harmstone (2):
      btrfs: print-tree: add remap tree definitions
      btrfs: read key again after incrementing slot in move_existing_remaps()

Markus Mayer (1):
      perf build: Prevent "argument list too long" error

Masami Hiramatsu (Google) (3):
      bootconfig: Add bootconfig tests about braces
      kprobes: avoid crash when rmmod/insmod after ftrace killed
      kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()

Massimiliano Pellizzer (5):
      apparmor: validate DFA start states are in bounds in unpack_pdb
      apparmor: fix memory leak in verify_header
      apparmor: replace recursive profile removal with iterative approach
      apparmor: fix side-effect bug in match_char() macro usage
      apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

Mathias Nyman (1):
      xhci: Fix NULL pointer dereference when reading portli debugfs files

Matt Vollrath (1):
      e1000/e1000e: Fix leak in DMA error cleanup

Maurizio Lombardi (1):
      nvme-core: do not pass empty queue_limits to blk_mq_alloc_queue()

Max Kellermann (3):
      ceph: fix i_nlink underrun during async unlink
      ceph: add a bunch of missing ceph_path_info initializers
      ceph: fix memory leaks in ceph_mdsc_build_path()

Mehul Rao (4):
      ublk: fix NULL pointer dereference in ublk_ctrl_set_size()
      ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
      net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
      tipc: fix divide-by-zero in tipc_sk_filter_connect()

Miaoqian Lin (1):
      rxrpc, afs: Fix missing error pointer check after
rxrpc_kernel_lookup_peer()

Mieczyslaw Nalewaj (1):
      net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets

Miguel Ojeda (1):
      rust: kbuild: allow `unused_features`

Mika Westerberg (1):
      dt-bindings: i2c: dw: Update maintainer

Mike Rapoport (Microsoft) (1):
      tools/testing: fix testing/vma and testing/radix-tree build

Ming Lei (1):
      ublk: don't clear GD_SUPPRESS_PART_SCAN for unprivileged daemons

Muhammad Amirul Asyraf Mohamad Jamian (1):
      firmware: stratix10-svc: Add Multi SVC clients support

Nam Cao (1):
      powerpc/pseries: Correct MSI allocation tracking

Namhyung Kim (1):
      KVM: VMX: Fix a wrong MSR update in add_atomic_switch_msr()

Namjae Jeon (2):
      ksmbd: fix use-after-free by using call_rcu() for oplock_info
      ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()

Nicolai Buchwitz (1):
      net: bcmgenet: fix broken EEE by converting to phylib-managed state

Nikolay Aleksandrov (1):
      drivers: net: ice: fix devlink parameters get without irdma

Nilay Shroff (1):
      powerpc/iommu: fix lockdep warning during PCI enumeration

Nuno Sá (1):
      iio: buffer: Fix wait_queue not being removed

Oleksij Rempel (5):
      iio: dac: ds4424: reject -128 RAW value
      net: usb: lan78xx: fix silent drop of packets with checksum errors
      net: usb: lan78xx: fix TX byte statistics for small packets
      net: usb: lan78xx: skip LTM configuration for LAN7850
      net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect

Oliver Neukum (3):
      usb: yurex: fix race in probe
      usb: mdc800: handle signal and read racing
      usb: class: cdc-wdm: fix reordering issue in read code path

Paolo Bonzini (6):
      KVM: VMX: check validity of VMCS controls when returning from SMM
      KVM: SVM: check validity of VMCB controls when returning from SMM
      selftests: kvm: extract common functionality out of smm_test.c
      selftests: kvm: add a test that VMX validates controls on RSM
      KVM: x86: clarify leave_smm() return value
      Documentation: kvm: fix formatting of the quirks table

Patrisious Haddad (1):
      net/mlx5: Fix crash when moving to switchdev mode

Paul Moses (1):
      net-shapers: don't free reply skb after genlmsg_reply()

Paulo Alcantara (2):
      smb: client: fix atomic open with O_DIRECT & O_SYNC
      smb: client: fix open handle lookup in cifs_open()

Pavan Chebbi (1):
      bnxt_en: Fix RSS table size check when changing ethtool channels

Peng Fan (3):
      remoteproc: imx_rproc: Fix unreachable platform prepare_ops
      regulator: pca9450: Correct interrupt type
      regulator: pca9450: Correct probed name for PCA9452

Pengyu Luo (3):
      drm/msm/dsi: fix hdisplay calculation when programming dsi registers
      drm/msm/dsi/phy: fix hardware revision
      drm/msm/dsi: fix pclk rate calculation for bonded dsi

Peter Collingbourne (1):
      perf disasm: Fix off-by-one bug in outside check

Peter Ujfalusi (1):
      ASoC: codecs: rt1011: Use component to get the dapm context in
spk_mode_put

Peter Yin (1):
      i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter

Petr Oros (2):
      iavf: fix PTP use-after-free during reset
      iavf: fix incorrect reset handling in callbacks

Phil Sutter (1):
      netfilter: nf_tables: Fix for duplicate device in netdev hooks

Philip Yang (1):
      drm/amdkfd: Unreserve bo if queue update failed

Pratyush Yadav (Google) (2):
      mm: memfd_luo: always make all folios uptodate
      mm: memfd_luo: always dirty all folios

Qing Wang (1):
      slab: fix memory leak when refill_sheaf() fails

RD Babiera (1):
      usb: typec: altmode/displayport: set displayport signaling rate
in configure message

Radim Krčmář (1):
      RISC-V: KVM: fix off-by-one array access in SBI PMU

Radu Sabau (1):
      iio: imu: adis: Fix NULL pointer dereference in adis_init

Rafael J. Wysocki (2):
      ACPI: video: Switch over to auxiliary bus type
      sched: idle: Make skipping governor callbacks more consistent

Raju Rangoju (3):
      amd-xgbe: fix link status handling in xgbe_rx_adaptation
      amd-xgbe: prevent CRC errors during RX adaptation with AN disabled
      amd-xgbe: reset PHY settings before starting PHY

Randy Dunlap (2):
      uaccess: correct kernel-doc parameter format
      mm/mmu_notifier: clean up mmu_notifier.h kernel-doc

Raphael Zimmer (2):
      libceph: Use u32 for non-negative values in ceph_monmap_decode()
      libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()

Raul Pazemecxas De Andrade (1):
      mm/damon/core: clear walk_control on inactive context in damos_walk()

Ravi Hothi (1):
      ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start

Ricardo B. Marlière (3):
      net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
      bpf: bpf_out_neigh_v4: Fix nd_tbl NULL dereference when IPv6 is disabled
      bpf: bpf_out_neigh_v6: Fix nd_tbl NULL dereference when IPv6 is disabled

Richard Fitzgerald (1):
      firmware: cs_dsp: Fix fragmentation regression in firmware download

Ritesh Harjani (IBM) (2):
      mm/hugetlb.c: use __pa() instead of virt_to_phys() in early
bootmem alloc code
      powerpc/mem: Move CMA reservations to arch_mm_preinit

Rob Herring (Arm) (3):
      remoteproc: qcom_wcnss: Fix reserved region mapping failure
      powerpc: dts: fsl: Drop unused .dtsi files
      powerpc/prom_init: Fixup missing #size-cells on PowerMac media-bay nodes

Roberto Bergantinos Corpas (1):
      nfs: return EISDIR on nfs3_proc_create if d_alias is a dir

Sabrina Dubroca (2):
      neighbour: restore protocol != 0 check in pneigh update
      selftests: rtnetlink: add neighbour update test

Sayali Patil (2):
      powerpc: fix KUAP warning in VMX usercopy path
      powerpc/selftests/copyloops: extend selftest to exercise
__copy_tofrom_user_power7_vmx

Sean Christopherson (7):
      KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay
      Documentation: KVM: Formalizing taking vcpu->mutex *outside* of
kvm->slots_lock
      KVM: PPC: e500: Fix build error due to using kmalloc_obj() with wrong type
      KVM: PPC: e500: Rip out "struct tlbe_ref"
      KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with
in-kernel APIC
      KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
      KVM: selftests: Verify SEV+ guests can read and write EFER, CR0,
CR4, and CR8

Sebastian Andrzej Siewior (1):
      cgroup: Don't expose dead tasks in cgroup

Sen Wang (1):
      ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays

Sergey Senozhatsky (1):
      zram: rename writeback_compressed device attr

SeungJu Cheon (1):
      iio: frequency: adf4377: Fix duplicated soft reset mask

Seungjin Bae (1):
      usb: gadget: f_mass_storage: Fix potential integer overflow in
check_command_size_in_blocks()

Shashank Balaji (1):
      x86/apic: Disable x2apic on resume if the kernel expects so

Sheetal (1):
      ASoC: tegra: Add support for Tegra238 soundcard

Shenghao Yang (1):
      drm/gud: fix NULL crtc dereference on display disable

Shiraz Saleem (1):
      net/mana: Null service_wq on setup error to prevent double destroy

Shuangpeng Bai (1):
      serial: caif: hold tty->link reference in ldisc_open and ser_release

Shyam Prasad N (1):
      cifs: make default value of retrans as zero

Sourabh Jain (2):
      powerpc/kexec/core: use big-endian types for crash variables
      powerpc/crash: adjust the elfcorehdr size

Stefan Haberland (2):
      s390/dasd: Move quiesce state with pprc swap
      s390/dasd: Copy detected format information to secondary device

Steven Rostedt (1):
      time/jiffies: Mark jiffies_64_to_clock_t() notrace

Sun YangKai (1):
      btrfs: hold space_info->lock when clearing periodic reclaim ready

Sungwoo Kim (2):
      nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
      nvme-pci: Fix race bug in nvme_poll_irqdisable()

Takashi Iwai (1):
      ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2
mixer interfaces

Tejun Heo (1):
      sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags

Thomas Fourier (1):
      drm/msm: Fix dma_free_attrs() buffer size

Thomas Gleixner (4):
      sched/mmcid: Prevent CID stalls due to concurrent forks
      sched/mmcid: Handle vfork()/CLONE_VM correctly
      sched/mmcid: Remove pointless preempt guard
      sched/mmcid: Avoid full tasklist walks

Thomas Weißschuh (1):
      drm/msm/dpu: Don't use %pK through printk (again)

Thomas Zimmermann (1):
      drm/loongson: Mark driver as orphaned

Thorsten Blum (2):
      ksmbd: Don't log keys in SMB3 signing and encryption key generation
      nvme: Annotate struct nvme_dhchap_key with __counted_by

Tim Kovalenko (1):
      gpu: nova-core: fix stack overflow in GSP memory allocation

Tom Ryan (1):
      io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops

Tzung-Bi Shih (1):
      remoteproc: mediatek: Unprepare SCP clock during system suspend

Uzair Mughal (1):
      ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390

Viktor Malik (1):
      powerpc, perf: Check that current->mm is alive before getting
user callchain

Ville Syrjälä (1):
      drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL

Vivian Wang (2):
      net: spacemit: Fix error handling in emac_alloc_rx_desc_buffers()
      net: spacemit: Fix error handling in emac_tx_mem_map()

Vladimir Oltean (2):
      net: dsa: sja1105: reorder sja1105_reload_cbs() and
phylink_replay_link_end()
      net: dsa: sja1105: ensure phylink_replay_link_end() will not be missed

Vladimir Riabchun (1):
      scsi: qla2xxx: Completely fix fcport double free

Vlastimil Babka (SUSE) (1):
      MAINTAINERS: add co-maintainer and reviewer for SLAB ALLOCATOR

Vyacheslav Vahnenko (1):
      USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed

Waiman Long (1):
      cgroup/cpuset: Call rebuild_sched_domains() directly in hotplug

Wang Shuaiwei (1):
      scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend

Wang Yechao (1):
      RISC-V: KVM: Skip THP support check during dirty logging

Wei Fang (2):
      net: enetc: fix incorrect fallback PHY address handling
      net: enetc: do not skip setting LaBCR[MDIO_PHYAD_PRTAD] for addr 0

Weiming Shi (2):
      net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
on TEQL slave xmit
      net: add xmit recursion limit to tunnel xmit functions

Wenyuan Li (1):
      can: hi311x: hi3110_open(): add check for hi3110_power_enable()
return value

Xingui Yang (1):
      scsi: hisi_sas: Fix NULL pointer exception during user_scan()

Xu Yang (2):
      Revert "tcpm: allow looking for role_sw device in the main node"
      usb: roles: get usb role switch from parent only for usb-b-connector

Yang Wang (3):
      drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v13
      drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14
      drm/amdgpu: fix gpu idle power consumption issue for gfx v12

Yasin Lee (2):
      iio: proximity: hx9023s: fix assignment order for __counted_by
      iio: proximity: hx9023s: Protect against division by zero in set_samp_freq

Ye Bin (1):
      smb/client: only export symbol for 'smb2maperror-test' module

Yuan Tan (1):
      netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels

Zenghui Yu (Huawei) (4):
      KVM: arm64: nv: Check S2 limits based on implemented PA size
      KVM: arm64: nv: Report addrsz fault at level 0 with a bad VTTBR.BADDR
      KVM: arm64: nv: Inject a SEA if failed to read the descriptor
      KVM: arm64: Remove the redundant ISB in __kvm_at_s1e2()

Zhang Heng (2):
      ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone
      ALSA: hda/realtek: add quirk for ASUS UM6702RC

Zhang Rui (1):
      cpupower: Add intel_pstate turbo boost support for Intel platforms

Zi Yan (2):
      mm/cma: move put_page_testzero() out of VM_WARN_ON in cma_release()
      mm/huge_memory: fix a folio_split() race condition with folio_try_get()

Zilin Guan (1):
      usb: xhci: Fix memory leak in xhci_disable_slot()

Ziyi Guo (1):
      usb: image: mdc800: kill download URB on timeout

hongao (1):
      xfs: Remove redundant NULL check after __GFP_NOFAIL

matteo.cotifava (2):
      ASoC: soc-core: drop delayed_work_pending() check before flush
      ASoC: soc-core: flush delayed work before removing DAIs and widgets

sunliming (1):
      drm/msm/dpu: Fix smatch warnings about variable dereferenced before check

zhidao su (3):
      sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update
      sched_ext: Use READ_ONCE() for lock-free reads of module param variables
      sched_ext: Use WRITE_ONCE() for the write side of scx_enable
helper pointer

Álvaro Fernández Rojas (1):
      net: sfp: improve Huawei MA5671a fixup