Linux 7.0-rc7

[Linus Torvalds]

No big surprises this week - rc7 continues the trend of being somewhat
larger than usual, but without anything that really stands out or
looks worrisome.

About half the patch is drivers - gpu, networking, usb and sound are
probably the biggest contributors, and that all looks very normal. The
rest looks pretty regular too: with core networking and kernel fixes,
some filesystem work, and various other bits and pieces: selftests,
arch fixes, documentation and crypto.

Things look set for a final release next weekend, but please keep
testing.  The Easter bunny is watching,

               Linus

---

Adam Crosser (1):
      gpib: fix use-after-free in IO ioctl handlers

Alan Stern (2):
      USB: dummy-hcd: Fix locking/synchronization error
      USB: dummy-hcd: Fix interrupt synchronization error

Aldo Conte (1):
      iio: light: veml6070: fix veml6070_read() return value

Aleksandr Nogikh (1):
      x86/kexec: Disable KCOV instrumentation after load_segments()

Alex Deucher (1):
      drm/amdgpu/pm: drop SMU driver if version not matched messages

Alexander Popov (1):
      wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free

Alexander Savenko (1):
      ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9

Alexander Usyskin (1):
      mei: me: reduce the scope on unexpected reset

Alexei Starovoitov (1):
      bpf: Fix regsafe() for pointers to packet

Alexey Velichayshiy (1):
      wifi: iwlwifi: mvm: fix potential out-of-bounds read in
iwl_mvm_nd_match_info_handler()

Alice Ryhl (1):
      rust_binder: use AssertSync for BINDER_VM_OPS

Andrea Righi (1):
      sched_ext: Fix stale direct dispatch state in ddsp_dsq_id

Andrei Kuchynski (2):
      usb: typec: Remove alt->adev.dev.class assignment
      usb: typec: thunderbolt: Set enter_vdo during initialization

Antoniu Miclaus (5):
      iio: adc: ade9000: move mutex init before IRQ registration
      iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0
      iio: imu: adis16550: fix swapped gyro/accel filter functions
      iio: dac: ad5770r: fix error return in ad5770r_read_raw()
      iio: accel: adxl313: add missing error check in predisable

Ard Biesheuvel (2):
      lis3lv02d: Omit IRQF_ONESHOT if no threaded handler is provided
      arm64: Use static call trampolines when kCFI is enabled

Ariana Lazar (1):
      iio: dac: mcp47feb02: Fix Vref validation [1-999] case

Arvind Yadav (1):
      drm/xe/madvise: Accept canonical GPU addresses in xe_vm_madvise_ioctl

Asim Viladi Oglu Manizada (1):
      ksmbd: fix OOB write in QUERY_INFO for compound requests

Askar Safin (1):
      .get_maintainer.ignore: add myself

Barnabás Pőcze (1):
      gpiolib: clear requested flag if line is invalid

Bart Van Assche (1):
      Input: synaptics-rmi4 - fix a locking bug in an error path

Bartosz Golaszewski (3):
      gpio: shared: call gpio_chip::of_xlate() if set
      gpio: shared: handle pins shared by child nodes of devices
      gpio: shared: shorten the critical section in gpiochip_setup_shared()

Berk Cem Goksel (1):
      ALSA: caiaq: fix stack out-of-bounds read in init_card

Billy Tsai (1):
      iio: adc: aspeed: clear reference voltage bits before configuring vref

Buday Csaba (1):
      net: fec: fix the PTP periodic output sysfs interface

Cen Zhang (1):
      Bluetooth: SCO: fix race conditions in sco_sock_connect()

Changwoo Min (2):
      PM: EM: Fix NULL pointer dereference when perf domain ID is not found
      sched_ext: Fix is_bpf_migration_disabled() false negative on
non-PREEMPT_RCU

Charlie Jenkins (1):
      selftests: riscv: Add braces around EXPECT_EQ()

Chen Ni (1):
      drm/sysfb: Fix efidrm error handling and memory type mismatch

Cheng-Yang Chou (1):
      sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl()

Christian Eggers (1):
      nvmem: imx: assign nvmem_cell_info::raw_len

Christoffer Sandberg (1):
      Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042
quirk table

Chunyang Chen (1):
      iio: adc: ti-ads1018: fix type overflow for data rate

Corey Hickey (1):
      hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI

Cosmin Tanislav (2):
      counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
      counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member

Dag Smedberg (1):
      ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP

Daniel Borkmann (2):
      bpf: Fix incorrect pruning due to atomic fetch precision tracking
      selftests/bpf: Add more precision tracking tests for atomics

Daniele Ceraolo Spurio (4):
      drm/xe/pxp: Clean up termination status on failure
      drm/xe/pxp: Remove incorrect handling of impossible state during suspend
      drm/xe/pxp: Clear restart flag in pxp_start after jumping back
      drm/xe/pxp: Don't allow PXP on older PTL GSC FWs

Dave Penkler (1):
      gpib: Fix fluke driver s390 compile issue

David Carlier (1):
      net: ti: icssg-prueth: fix missing data copy and wrong recycle
in ZC RX dispatch

David Lechner (7):
      iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
      iio: add IIO_DECLARE_QUATERNION() macro
      iio: orientation: hid-sensor-rotation: fix quaternion alignment
      iio: orientation: hid-sensor-rotation: add timestamp hack to not
break userspace
      iio: adc: ti-adc161s626: fix buffer read on big-endian
      iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
      iio: light: vcnl4035: fix scan buffer on big-endian

Deepanshu Kartikey (1):
      comedi: dt2815: add hardware detection to prevent crash

Dimitri Daskalakis (3):
      eth: fbnic: Account for page fragments when updating BDQ tail
      eth: fbnic: Fix debugfs output for BDQ's with page frags
      eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64

Dipayaan Roy (1):
      net: mana: Fix RX skb truesize accounting

Dmitry Torokhov (3):
      iio: adc: ti-ads7950: normalize return value of gpio_get
      iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get()
      x86/platform/geode: Fix on-stack property data use-after-return bug

Donet Tom (4):
      drm/amdkfd: Align expected_queue_size to PAGE_SIZE
      drm/amd: Fix MQD and control stack alignment for non-4K
      drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
      drm/amdkfd: Fix queue preemption/eviction failures by aligning
control stack size to GPU page size

Dustin L. Howett (1):
      ALSA: hda/realtek: add quirk for Framework F111:000F

Edward Adam Davis (1):
      comedi: runflags cannot determine whether to reclaim chanlist

Emanuele Ghidoli (1):
      spi: cadence-qspi: Fix exec_mem_op error handling

Emmanuel Grumbach (1):
      wifi: iwlwifi: mvm: don't send a 6E related command when not supported

Eric Biggers (2):
      crypto: tegra - Add missing CRYPTO_ALG_ASYNC
      lib/crypto: chacha: Zeroize permuted_state before it leaves scope

Eric Dumazet (3):
      ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
      ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
      ipv6: avoid overflows in ip6_datagram_send_ctl()

Ernestas Kulik (1):
      USB: serial: option: add MeiG Smart SRM825WN

Ethan Tidmore (4):
      iio: gyro: mpu3050: Fix incorrect free_irq() variable
      iio: gyro: mpu3050: Fix irq resource leak
      iio: gyro: mpu3050: Move iio_device_register() to correct location
      iio: gyro: mpu3050: Fix out-of-sequence free_irq()

Fedor Pchelkin (2):
      net: macb: fix clk handling on PCI glue driver removal
      net: macb: properly unregister fixed rate clocks

Felix Gu (15):
      iio: adc: ti-ads1119: Fix unbalanced pm reference count in
ds1119_single_conversion()
      iio: pressure: abp2030pa: Remove IRQF_ONESHOT from devm_request_irq()
      iio: dac: mcp47feb02: Fix mutex used before initialization
      iio: adc: ad4062: Replace IRQF_ONESHOT with IRQF_NO_THREAD
      iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD
      iio: adc: ti-ads1119: Reinit completion before
wait_for_completion_timeout()
      iio: proximity: rfd77402: Fix completion race condition in IRQ mode
      dwc3: google: Fix PM domain leak in dwc3_google_probe()
      iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode
      gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio()
      spi: stm32-ospi: Fix resource leak in remove() callback
      spi: stm32-ospi: Fix reset control leak on probe error
      spi: stm32-ospi: Fix DMA channel leak on stm32_ospi_dma_setup() failure
      spi: amlogic: spifc-a4: unregister ECC engine on probe failure
and remove() callback
      usb: misc: usbio: Fix URB memory leak on submit failure

Florian Westphal (3):
      netfilter: nfnetlink_log: account for netlink header size
      netfilter: x_tables: ensure names are nul-terminated
      netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr

Francesco Lavra (2):
      iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
      iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only

Frank Li (1):
      dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to
fix common property warning

Fredric Cover (1):
      fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

Frej Drejhammar (1):
      USB: serial: io_edgeport: add support for Blackbox IC135A

Gabor Juhos (1):
      usb: core: phy: avoid double use of 'usb3-phy'

Gaurav Batra (1):
      powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs

Geert Uytterhoeven (1):
      misc/mei: INTEL_MEI should depend on X86 or DRM_XE

Geoffrey D. Bennett (1):
      ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP

Gilson Marquato Júnior (1):
      ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx

Giorgi Tchankvetadze (2):
      iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power
      iio: adc: ade9000: fix wrong return type in streaming push

Greg Kroah-Hartman (1):
      drm/ioc32: stop speculation on the drm_compat_ioctl path

Guan-Yu Lin (2):
      usb: core: use dedicated spinlock for offload state
      usb: host: xhci-sideband: delegate offload_usage tracking to class drivers

Guangshuo Li (3):
      auxdisplay: line-display: fix NULL dereference in linedisp_release
      cpufreq: governor: fix double free in
cpufreq_dbs_governor_init() error path
      usb: ulpi: fix double free in ulpi_register_interface() error path

Guoyu Su (1):
      net: use skb_header_pointer() for TCPv4 GSO frag_off check

Hangbin Liu (1):
      ipv6: fix data race in fib6_metric_set() using cmpxchg

Harald Freudenberger (1):
      s390/zcrypt: Fix memory leak with CCA cards used as accelerator

Heitor Alves de Siqueira (1):
      usb: usbtmc: Flush anchored URBs in usbtmc_release

Herbert Xu (2):
      crypto: algif_aead - Revert to operating out-of-place
      crypto: authencesn - Do not place hiseq at end of dst for
out-of-place decryption

Horia Geantă (2):
      crypto: caam - fix DMA corruption on long hmac keys
      crypto: caam - fix overflow on long hmac keys

Ian Abbott (4):
      comedi: ni_atmio16d: Fix invalid clean-up after failed attach
      comedi: me4000: Fix potential overrun of firmware buffer
      comedi: me_daq: Fix potential overrun of firmware buffer
      comedi: Reinit dev->spinlock between attachments to low-level drivers

Ian Rogers (1):
      perf/x86: Fix potential bad container_of in intel_pmu_hw_config

Ionut Nechita (1):
      drm/amd/display: Wire up dcn10_dio_construct() for all
pre-DCN401 generations

Ivan Vera (1):
      nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy

JP Hein (1):
      USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam

Jamie Gibbons (1):
      dt-bindings: gpio: fix microchip #interrupt-cells

Jan Kara (2):
      mpage: Provide variant of mpage_writepages() with own optional
folio handler
      udf: Fix race between file type conversion and writeback

Jason Gunthorpe (2):
      iommu: Do not call drivers for empty gathers
      iommupt: Fix short gather if the unmap goes into a large mapping

Jens Axboe (2):
      io_uring: protect remaining lockless ctx->rings accesses with RCU
      io_uring/bpf_filters: retain COW'ed settings on parse failures

Jessica Liu (1):
      irqchip/riscv-aplic: Restrict genpd notifier to device tree only

Jiayuan Chen (1):
      net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak

Jihed Chaibi (1):
      ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
rollback on failure

Jimmy Hu (1):
      usb: gadget: uvc: fix NULL pointer dereference during unbind race

Jisheng Zhang (1):
      riscv: make runtime const not usable by modules

Johan Hovold (1):
      gpib: lpvo_usb: fix memory leak on disconnect

Johannes Berg (1):
      wifi: iwlwifi: mld: correctly set wifi generation data

Jonathan Cavitt (1):
      drm/xe/xe_pagefault: Disallow writes to read-only VMAs

Jonathan Rissanen (1):
      Bluetooth: hci_h4: Fix race during initialization

Josh Poimboeuf (1):
      iio: imu: bmi160: Remove potential undefined behavior in
bmi160_config_pin()

Julian Braha (1):
      ASoC: Intel: boards: fix unmet dependency on PINCTRL

Juno Choi (1):
      usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()

Junrui Luo (2):
      drm/amdgpu: validate doorbell_offset in user queue creation
      drm/amdgpu/userq: fix memory leak in MQD creation error paths

Junxi Qian (1):
      io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()

Justin Chen (1):
      usb: ehci-brcm: fix sleep during atomic

Keenan Dong (2):
      Bluetooth: MGMT: validate LTK enc_size on load
      Bluetooth: MGMT: validate mesh send advertising payload length

Konrad Dybcio (1):
      thunderbolt: Fix property read in nhi_wake_supported()

Kuen-Han Tsai (9):
      usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
      usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
      usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
      usb: gadget: f_rndis: Protect RNDIS options with mutex
      usb: gadget: u_ncm: Add kernel-doc comments for struct f_ncm_opts
      usb: gadget: f_ecm: Fix net_device lifecycle with device_move
      usb: gadget: f_eem: Fix net_device lifecycle with device_move
      usb: gadget: f_subset: Fix net_device lifecycle with device_move
      usb: gadget: f_rndis: Fix net_device lifecycle with device_move

Kumar Kartikeya Dwivedi (1):
      bpf: Fix grace period wait for tracepoint bpf_link

Kuninori Morimoto (1):
      ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list

Kuniyuki Iwashima (1):
      bpf: sockmap: Fix use-after-free of sk->sk_socket in
sk_psock_verdict_data_ready().

Li Xiasong (1):
      mptcp: fix soft lockup in mptcp_recvmsg()

Liam Mitchell (1):
      Input: bcm5974 - recover from failed mode switch

Liav Mordouch (1):
      vt: discard stale unicode buffer on alt screen exit after resize

Lijo Lazar (1):
      drm/amdgpu: Fix wait after reset sequence in S4

Linus Torvalds (2):
      i915: don't use a vma that didn't match the context VM
      Linux 7.0-rc7

Liu Ying (1):
      drm/bridge: Fix refcount shown via debugfs for encoder_bridges_show()

Lorenzo Bianconi (2):
      net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue()
      net: airoha: Delay offloading until all net_devices are fully registered

Luiz Augusto von Dentz (1):
      Bluetooth: hci_sync: Fix UAF in le_read_features_complete

Luka Gejak (2):
      net: hsr: serialize seq_blocks merge across nodes
      net: hsr: fix VLAN add unwind on slave errors

Maarten Lankhorst (1):
      Revert "drm: Fix use-after-free on framebuffers and property
blobs when calling drm_dev_unplug"

Maciej W. Rozycki (5):
      MIPS: SiByte: Bring back cache initialisation
      MIPS: Fix the GCC version check for `__multi3' workaround
      MIPS: Always record SEGBITS in cpu_data.vmbits
      MIPS: mm: Suppress TLB uniquification on EHINV hardware
      MIPS: mm: Rewrite TLB uniquification for the hidden bit feature

Marek Behún (1):
      net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta

Martin Schiller (2):
      net/x25: Fix potential double free of skb
      net/x25: Fix overflow when accumulating packets

Matthew Brost (2):
      drm/xe: Disable garbage collector work item on SVM close
      drm/xe: Avoid memory allocations in xe_device_declare_wedged()

Miao Li (1):
      usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive

Michael Chan (2):
      bnxt_en: Refactor some basic ring setup and adjustment logic
      bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode()

Michael Zimmermann (1):
      usb: gadget: f_hid: move list and spinlock inits from bind to alloc

Michal Piekos (1):
      net: stmmac: skip VLAN restore when VLAN hash ops are missing

Mikulas Patocka (1):
      crypto: deflate - fix spurious -ENOSPC

Nathan Rebello (1):
      usb: typec: ucsi: validate connector number in ucsi_notify_common()

Nicolas Pitre (1):
      vt: resize saved unicode buffer on alt screen exit after resize

Norbert Szetei (1):
      crypto: af-alg - fix NULL pointer dereference in scatterwalk

Oleh Konko (3):
      Bluetooth: hci_event: move wake reason storage into validated
event handlers
      Bluetooth: SMP: force responder MITM requirements before
building the pairing response
      Bluetooth: SMP: derive legacy responder STK authentication from MITM state

Oliver Neukum (1):
      cdc-acm: new quirk for EPSON HMD

Pablo Neira Ayuso (4):
      netfilter: flowtable: strictly check for maximum number of actions
      netfilter: ctnetlink: ignore explicit helper on new expectations
      netfilter: x_tables: restrict xt_check_match/xt_check_target
extensions for NFPROTO_ARP
      netfilter: nf_tables: reject immediate NF_QUEUE verdict

Pagadala Yesu Anjaneyulu (1):
      wifi: iwlwifi: mld: Fix MLO scan timing

Paolo Abeni (1):
      ipv6: prevent possible UaF in addrconf_permanent_addr()

Paul Walmsley (2):
      riscv: kgdb: fix several debug register assignment bugs
      riscv: use _BITUL macro rather than BIT() in ptrace uapi and kselftests

Pauli Virtanen (5):
      Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
      Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
      Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails
      Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
      Bluetooth: hci_event: fix potential UAF in
hci_le_remote_conn_param_req_evt

Pavan Chebbi (1):
      bnxt_en: Restore default stat ctxs for ULP when resource is available

Pengpeng Hou (4):
      wifi: wl1251: validate packet IDs before indexing tx_frames
      net/ipv6: ioam6: prevent schema length wraparound in trace fill
      bnxt_en: set backing store type from query type
      NFC: pn533: bound the UART receive buffer

Peter Zijlstra (2):
      sched/fair: Fix zero_vruntime tracking fix
      sched/debug: Fix avg_vruntime() usage

Petr Mladek (1):
      workqueue: Better describe stall check

Phil Willoughby (1):
      ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex

Prike Liang (1):
      drm/amdgpu: fix the idr allocation flags

Qi Tang (4):
      io_uring/rsrc: reject zero-length fixed buffer import
      netfilter: nf_conntrack_helper: pass helper to expect cleanup
      netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
      bpf: reject direct access to nullable PTR_TO_BUF pointers

Qingfang Deng (1):
      netdevsim: fix build if SKB_EXTENSIONS=n

Rafael J. Wysocki (2):
      thermal: core: Address thermal zone removal races with resume
      thermal: core: Fix thermal zone device registration error path

Randy Dunlap (3):
      gpio: timberdale: repair kernel-doc comments
      gpio: nomadik: repair some kernel-doc comments
      lis3lv02d: fix kernel-doc warnings

Reshma Immaculate Rajkumar (2):
      wifi: ath11k: Pass the correct value of each TID during a stop
AMPDU session
      wifi: ath12k: Pass the correct value of each TID during a stop
AMPDU session

Rong Zhang (1):
      MIPS: Loongson64: env: Check UARTs passed by LEFI cautiously

Sabrina Dubroca (1):
      mpls: add seqcount to protect the platform_label{,s} pair

Sachin Mokashi (1):
      ASoC: Intel: ehl_rt5660: Use the correct rtd->dev device in hw_params

Saeed Mahameed (2):
      net/mlx5: Avoid "No data available" when FW version queries fail
      net/mlx5: Fix switchdev mode rollback in case of failure

Sanman Pradhan (6):
      hwmon: (tps53679) Fix array access with zero-length block read
      hwmon: (pxe1610) Check return value of page-select write in probe
      hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")
      hwmon: (tps53679) Fix device ID comparison and printing in
tps53676_identify()
      hwmon: (occ) Fix division by zero in occ_show_power_1()
      hwmon: (occ) Fix missing newline in occ_show_extended()

Sebastian Urban (1):
      usb: gadget: dummy_hcd: fix premature URB completion when ZLP
follows partial transfer

Shay Drory (1):
      net/mlx5: lag: Check for LAG device before creating debugfs

Shengyu Qu (1):
      Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode

Shenwei Wang (1):
      gpio: mxc: map Both Edge pad wakeup to Rising Edge

Sherry Yang (1):
      iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inline

Shiji Yang (1):
      mips: ralink: update CPU clock index

Simon Trimmer (1):
      ASoC: amd: ps: Fix missing leading zeros in subsystem_device SSID log

Song Liu (1):
      workqueue: Fix false positive stall reports

Sourav Nayak (1):
      ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx

Srinivas Pandruvada (1):
      iio: hid-sensors: Use software trigger

Srinivasan Shanmugam (1):
      drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()

Srujana Challa (1):
      virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN

Stefan Wiehler (1):
      mips: mm: Allocate tlb_vpn array atomically

Stefano Garzarella (1):
      vsock: initialize child_ns_mode_locked in vsock_net_init()

Stuart Hayhurst (1):
      ALSA: hda/intel: Add MSI X870E Tomahawk to denylist by DMI ID

Sunil V L (1):
      ACPI: RIMT: Add dependency between iommu and devices

Suraj Gupta (2):
      net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec
      net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets

Sven Eckelmann (Plasma Cloud) (1):
      net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled

Taegu Ha (1):
      usb: gadget: f_uac1_legacy: validate control request size

Takashi Iwai (4):
      ALSA: ctxfi: Fix missing SPDIFI1 index handling
      ALSA: ctxfi: Check the error for index mapping
      ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED)
      ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization

Tejun Heo (5):
      cgroup: Wait for dying tasks to leave on rmdir
      selftests/cgroup: Don't require synchronous populated update on task exit
      cgroup: Fix cgroup_drain_dying() testing the wrong condition
      sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to
balance callback
      selftests/sched_ext: Add cyclic SCX_KICK_WAIT stress test

Thomas Bogendoerfer (1):
      tg3: Fix race for querying speed/duplex

Thomas Richter (1):
      s390/cpum_sf: Cap sampling rate to prevent lsctl exception

Thomas Zimmermann (1):
      drm/ast: dp501: Fix initialization of SCU2C

Tomas Glozar (1):
      rtla: Fix build without libbpf header

Tzung-Bi Shih (1):
      gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()

Valek Andrej (1):
      iio: accel: fix ADXL355 temperature signature value

Varun R Mallya (1):
      bpf: Reject sleepable kprobe_multi programs at attach time

Ville Syrjälä (3):
      drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
      drm/i915/cdclk: Do the full CDCLK dance for min_voltage_level changes
      drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP

Vivian Wang (1):
      riscv: patch: Avoid early phys_to_page()

Vladimir Zapolskiy (1):
      interconnect: qcom: sm8450: Fix NULL pointer dereference in
icc_link_nodes()

Waiman Long (2):
      cgroup/cpuset: Simplify setsched decision check in task
iteration loop of cpuset_can_attach()
      cgroup/cpuset: Skip security check for hotplug induced v1 task migration

Wang Jun (1):
      auxdisplay: lcd2s: add error handling for i2c transfers

Wanquan Zhong (1):
      USB: serial: option: add support for Rolling Wireless RW135R-GL

Wei Fang (5):
      net: enetc: reset PIR and CIR if they are not equal when
initializing TX ring
      net: enetc: add graceful stop to safely reinitialize the TX Ring
      net: enetc: do not access non-existent registers on pseudo MAC
      net: enetc: check whether the RSS algorithm is Toeplitz
      net: enetc: do not allow VF to configure the RSS key

Weiming Shi (1):
      rds: ib: reject FRMR registration before IB connection is established

Willy Tarreau (4):
      Documentation: minor updates to the security contacts
      Documentation: explain how to find maintainers addresses for
security reports
      Documentation: clarify the mandatory and desirable info for
security reports
      Documentation: fix two typos in latest update to the security report howto

Xiang Mei (7):
      net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
      selftests/tc-testing: add test for HFSC divide-by-zero in rtsc_min()
      net: bonding: fix use-after-free in bond_xmit_broadcast()
      bridge: mrp: reject zero test interval to avoid OOM panic
      net/sched: cls_fw: fix NULL pointer dereference on shared blocks
      net/sched: cls_flow: fix NULL pointer dereference on shared blocks
      selftests/tc-testing: add tests for cls_fw and cls_flow on shared blocks

Xiaolei Wang (1):
      usb: dwc3: imx8mp: fix memory leak on probe failure path

Xingjing Deng (2):
      misc: fastrpc: possible double-free of cctx->remote_heap
      misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe

Xu Yang (2):
      usb: hcd: queue wakeup_work to system_freezable_wq workqueue
      dt-bindings: connector: add pd-disable dependency

Yang Yang (3):
      bridge: br_nd_send: linearize skb before parsing ND options
      bridge: br_nd_send: validate ND option lengths
      vxlan: validate ND option lengths in vxlan_na_create

Yasuaki Torimaru (1):
      wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation

Yifan Wu (1):
      netfilter: ipset: drop logically empty buckets in mtype_del

Yochai Eisenrich (2):
      net: ipv6: ndisc: fix ndisc_ra_useropt to initialize
nduseropt_padX fields to zero to prevent an info-leak
      net: sched: cls_api: fix tc_chain_fill_node to initialize
tcm_info to zero to prevent an info-leak

Yongchao Wu (2):
      usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
      usb: cdns3: gadget: fix state inconsistency on gadget init failure

Youssef Samir (1):
      accel/qaic: Handle DBC deactivation if the owner went away

Yucheng Lu (1):
      net/sched: sch_netem: fix out-of-bounds access in packet corruption

Yufan Chen (1):
      net: ftgmac100: fix ring allocation unwind on open failure

Zhang Heng (5):
      ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx
      ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15
      ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 16X OLED M7601RM
      ALSA: hda/realtek: add quirk for HP Laptop 15-fc0xxx
      ALSA: hda/realtek: add quirk for Acer Swift SFG14-73

Zhengchuan Liang (1):
      net: ipv6: flowlabel: defer exclusive option free until RCU teardown

Zishun Yi (1):
      riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set

Zoltan Illes (1):
      Input: xpad - add support for Razer Wolverine V3 Pro

hkbinbin (1):
      Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync

robbieko (1):
      btrfs: fix incorrect return value after changing leaf in
lookup_extent_data_ref()

songxiebing (1):
      ALSA: hda/realtek: Add quirk for Lenovo Yoga Slim 7 14AKP10