Linux 7.1-rc5

[Linus Torvalds]

To the surprise of absolutely nobody by now, rc5 is pretty big. Quite
a bit bigger than rc5's have traditionally been.

I'm not entirely happy about it - most of this is totally trivial
stuff to random drivers, which obviously makes it all less scary, but
at the same time I'm really not convinced the churn is worth it at rc5
time. These things are "fixes", sure, but at the same time a lot of
them are simply so irrelevant that I think they'd be better off in a
linux-next tree and get merged during the merge window.

So I think I'll start being a bit more hardnosed about this kind of
unnecessary churn this late in the game. We are supposed to look for
*regressions*. Non-critical fixes to long-standing issues are simply
not appropriate for this late in the release cycle.

End result: this is too big, and this is the heads-up that I'll be
pushing back on pointless pull requests with fixes that just aren't
that important. And yes, several of these series were triggered by AI
code review.

Because fixes or not - and trivial or not - these kinds of large rc
weeks are *not* conducive to long-term stability.  Trivial fixes may
be trivial, and have a pretty low chance of causing problems, but "low
chance" is still not "zero chance".

So people: start looking closer at your pull requests, and ask
yourself: "Is this really a regression or serious enough that it
shouldn't just go into the development pile?".

             Linus

---

Abdun Nihaal (1):
      net: wwan: iosm: fix potential memory leaks in ipc_imem_init()

Abdurrahman Hussain (14):
      hwmon: (pmbus/adm1266) seed timestamp from the real-time clock
      hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX
      hwmon: (pmbus/adm1266) reject implausible blackbox record_count
      hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer
      hwmon: (pmbus/adm1266) include adapter number in GPIO line label
      hwmon: (pmbus/adm1266) bounce blackbox records through a
protocol-sized buffer
      hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR
      hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read
in get_multiple
      hwmon: (pmbus/adm1266) reject short block-read responses in the
GPIO accessors
      hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()
      hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()
      hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with pmbus_lock
      hwmon: (pmbus/adm1266) serialize NVMEM blackbox read with pmbus_lock
      hwmon: (pmbus/adm1266) serialize sequencer_state debugfs read
with pmbus_lock

Aditya Garg (1):
      net: mana: validate rx_req_idx to prevent out-of-bounds array access

Ahmed Yaseen (1):
      platform/x86: asus-armoury: fix mini-LED mode get/set on MODE2 devices

Alan Liu (1):
      drm/amdgpu/vpe: Force collaborate sync after TRAP

Alexander A. Klimov (3):
      ASoC: codecs: fs210x: fix possible buffer overflow
      smb: smbdirect: divide, not multiply, milliseconds by 1000
      io_uring/nop: pass all errors to userspace

Alexander Koskovich (2):
      pinctrl: qcom: eliza: Fix QDSS trace clock/control pingroup names
      drm/msm: Fix GMEM_BASE for A650

Alexander Sverdlin (1):
      regulator: tps65219: fix irq_data.rdev not being assigned

Alexandra Winter (1):
      s390/topology: Use zero-based numbering for containing entities

Alexandru Hossu (1):
      wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs

Alice Mikityanska (1):
      udp: gso: Fix handling checksum in __udp_gso_segment

Alistair Popple (1):
      mm/memory: fix spurious warning when unmapping
device-private/exclusive pages

Amir Shetaia (1):
      drm/amdgpu: reject non-user addresses early in GEM_USERPTR ioctl

Andy Shevchenko (1):
      ASoC: cs35l56: Drop malformed default N from Kconfig

Ankit Nautiyal (1):
      drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP

Antonio Quartulli (1):
      ovpn: fix race between deleting interface and adding new peer

Ard Biesheuvel (1):
      efi: Allocate runtime workqueue before ACPI init

Armin Wolf (4):
      platform/x86: uniwill-laptop: Properly initialize charging threshold
      platform/x86: uniwill-laptop: Accept charging threshold of 0
      platform/x86: uniwill-laptop: Fix behavior of "force" module param
      platform/x86: uniwill-laptop: Do not enable the charging limit
even when forced

Arnd Bergmann (2):
      bpf: make bpf_session_is_return() reference optional
      platform/x86: bitland-mifs-wmi: add CONFIG_LEDS_CLASS dependency

Aryan Kushwaha (1):
      ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Plus 14

Asim Viladi Oglu Manizada (1):
      smb: client: reject userspace cifs.spnego descriptions

Balamurugan C (1):
      ASoC: Intel: soc-acpi: Add entry for sof_es8336 in NVL match table.

Baochen Qiang (1):
      wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing

Bartosz Golaszewski (9):
      pinctrl: mediatek: moore: implement gpio_chip::get_direction()
      driver core: platform: remove software node on release()
      gpio: cdev: check if uAPI v2 config attributes are correctly zeroed
      gpio: aggregator: fix a potential use-after-free
      gpio: aggregator: remove the software node when deactivating the
aggregator
      gpio: sim: lock device when calling device_is_bound()
      gpio: aggregator: lock device when calling device_is_bound()
      gpio: virtuser: lock device when calling device_is_bound()
      device property: set fwnode->secondary to NULL in fwnode_init()

Bibo Mao (1):
      LoongArch: KVM: Move some variable declarations to paravirt.h

Biju Das (1):
      pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for
high pins during suspend/resume

Boris Brezillon (1):
      drm/gem: Make the GEM LRU lock part of drm_device

Boris Burkov (5):
      btrfs: always drop root->inodes lock before cond_resched()
      btrfs: check for subvolume before deleting squota qgroup
      btrfs: fix squota accounting during enable generation
      btrfs: clamp to avoid squota underflow
      btrfs: swallow btrfs_record_squota_delta() ENOENT

Breno Leitao (1):
      fs/select: reject negative timeval components in kern_select()

Caleb Sander Mateos (1):
      bio-integrity-fs: pass data iter to bio_integrity_verify()

Carlos López (1):
      virt: sev-guest: Explicitly leak pages in unknown state

Ce Sun (1):
      drm/amdgpu: avoid integer overflow in VA range check

Chaitanya Kumar Borah (1):
      drm/i915/display: Copy color pipeline from plane in the primary
joiner pipe

Charles Keepax (2):
      ASoC: soc-acpi-intel-ptl-match: Make Chrome matches conditional
      ASoC: Intel: soc-acpi-intel-ptl-match: Remove unnecessary cs42l43 match

Chen Ni (1):
      drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table

ChenXiaoSong (1):
      smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close

Christian A. Ehrhardt (1):
      lib: kunit_iov_iter: fix test fail on powerpc

Christian König (2):
      drm/amdgpu: rework userq reset work handling
      drm/amdgpu: fix handling in amdgpu_userq_create

Christian Marangi (1):
      net: airoha: Fix NPU RX DMA descriptor bits

Christoph Hellwig (1):
      xfs: fix a buffer lookup against removal race

Chuck Lever (1):
      tls: Preserve sk_err across recvmsg() when data has been copied

Claudio Imbrenda (5):
      KVM: s390: vsie: Fix memory leak when unshadowing
      KVM: s390: Fix leaking kvm_s390_mmu_cache in case of errors
      KVM: s390: vsie: Fix unshadowing logic
      KVM: s390: vsie: Fix redundant rmap entries
      KVM: s390: Properly reset zero bit in PGSTE

Cole Leavitt (1):
      wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled

Conor Dooley (1):
      riscv: dts: microchip: fix icicle i2c pinctrl configuration

Cosmin Tanislav (1):
      irqchip/renesas-rzt2h: Use pm_runtime_put_sync() in probe error path

Cunlong Li (1):
      cgroup: rstat: relax NMI guard after switch to try_cmpxchg

Cássio Gabriel (4):
      ASoC: sdw_utils: Check speaker component string allocation
      ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging
      ALSA: ua101: Reject too-short USB descriptors
      ALSA: scarlett2: Allow flash writes ending at segment boundary

DaeMyung Kang (15):
      ntfs: use base mft_no when looking up base inode for extent record
      ntfs: redirty folio when ntfs_write_mft_block() runs out of memory
      ntfs: capture mft mirror sync errors in ntfs_write_mft_block()
      ntfs: wait for sync mft writes to complete
      ntfs: fix copy length in ntfs_bdev_write() for non-page-aligned start
      ntfs: avoid use-after-free of index inode in ntfs_inode_sync_filename()
      ntfs: fix default_upcase refcount underflow and UAF on fs_context teardown
      ntfs: fix out-of-bounds write in ntfs_rl_collapse_range() merge path
      ntfs: fix out-of-bounds write in ntfs_index_walk_down()
      ntfs: avoid leaking uninitialised bytes in new security descriptors
      ntfs: validate MFT attrs_offset against bytes_in_use
      ntfs: fix MFT bitmap scan 2^32 boundary check
      ntfs: validate attribute name bounds before returning it
      ntfs: fix empty_buf and ra lifetime bugs in ntfs_empty_logfile()
      ntfs: restore $MFT mirror contents check

Damien Le Moal (1):
      block: avoid use-after-free in disk_free_zone_resources()

Daniel Golle (3):
      net: dsa: mt7530: fix FDB entries not aging out with short timeout
      net: dsa: mt7530: preserve VLAN tags on trapped link-local frames
      net: dsa: mt7530: fix CPU port VLAN not being reset to unaware

Daniel J Blueman (1):
      drm/msm: Fix shrinker deadlock

David Carlier (7):
      ovpn: tcp - use cached peer pointer in ovpn_tcp_close()
      ovpn: respect peer refcount in CMD_NEW_PEER error path
      phy: apple: atc: Fix typec switch/mux leak on unbind
      tracing: Avoid NULL return from hist_field_name() on truncation
      Bluetooth: ISO: drop ISO_END frames received without prior ISO_START
      net: devmem: reject dma-buf bind with non-page-aligned size or SG length
      tracing: Fix nr_subbufs initialization in simple_ring_buffer_init_mm()

David Francis (2):
      drm/amdkfd: Check bounds on allocate_doorbell
      drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id

David Hildenbrand (Arm) (2):
      mm/page_alloc: fix initialization of tags of the huge zero folio
with init_on_free
      mm: fix __vm_normal_page() to handle missing support for
pmd_special()/pud_special()

David Howells (26):
      netfs: Fix cancellation of a DIO and single read subrequests
      netfs: Fix missing locking around retry adding new subreqs
      netfs: Fix missing barriers when accessing stream->subrequests locklessly
      netfs: Fix netfs_read_to_pagecache() to pause on subreq failure
      netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
      netfs: Fix zeropoint update where i_size > remote_i_size
      netfs: Fix potential uninitialised var in netfs_extract_user_iter()
      netfs: Fix overrun check in netfs_extract_user_iter()
      netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone
      netfs: Defer the emission of trace_netfs_folio()
      netfs: Fix streaming write being overwritten
      netfs: Fix potential deadlock in write-through mode
      netfs: Fix read-gaps to remove netfs_folio from filled folio
      netfs: Fix write streaming disablement if fd open O_RDWR
      netfs: Fix early put of sink folio in netfs_read_gaps()
      netfs: Fix leak of request in netfs_write_begin() error handling
      netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
      netfs: Fix partial invalidation of streaming-write folio
      netfs: Fix folio->private handling in netfs_perform_write()
      netfs: Fix netfs_read_folio() to wait on writeback
      netfs, afs: Fix write skipping in dir/link writepages
      afs: Fix the locking used by afs_get_link()
      cifs: Fix undefined variables
      crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks
      rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg
      rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer

Dawei Feng (3):
      octeontx2-pf: fix double free in rvu_rep_rsrc_init()
      octeontx2-pf: avoid double free of pool->stack on AQ init failure
      qed: fix double free in qed_cxt_tables_alloc()

Deepanshu Kartikey (1):
      drm/virtio: use uninterruptible resv lock for plane updates

Denis Benato (4):
      platform/x86: asus-armoury: add support for FX607VU
      platform/x86: asus-armoury: add support for G614FR
      platform/x86: asus-armoury: add support for FA401EA
      platform/x86: asus-armoury: add support for GU605CP

Dmitry Baryshkov (4):
      drm/msm/dsi: don't dump registers past the mapped region
      drm/msm/dpu: don't mix devm and drmm functions
      drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx
      drm/msm/snapshot: fix dumping of the unaligned regions

Dragos Tatulea (2):
      IB/IPoIB: ndo_set_rx_mode_async conversion
      net/mlx5e: xsk: Fix unlocked writing to ICOSQ

Edward Adam Davis (1):
      RDMA/nldev: Add mutual exclusion in nldev_dellink()

Edward Parker (1):
      net: dsa: mt7530: untag VLAN-aware bridge PVID

Emmanuel Grumbach (2):
      wifi: iwlwifi: mld: disconnect only after 6 beacons without Rx
      wifi: mac80211: don't override max_amsdu_subframes

Eric Dumazet (4):
      ipv4: icmp: reject broadcast/multicast routes
      ipv4: use WARN_ON_ONCE() in ip_rt_bug()
      tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
      net: bridge: prevent too big nested attributes in br_fill_linkxstats()

Eric Naim (1):
      ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5

Erni Sri Satya Vennela (1):
      net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

Felix Gu (3):
      phy: spacemit: Remove incorrect clk_disable() in spacemit_usb2phy_init()
      drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
      spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()

Ferry Meng (1):
      ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow

Florian Eckert (1):
      MAINTAINERS: Remove Chuanhua Lei as PCIe intel-gw maintainer

Florian Fainelli (1):
      PCI: brcmstb: Assign pcie->gen from of_pci_get_max_link_speed()

Florian Westphal (2):
      netfilter: nf_conntrack_helper: fix possible null deref during error log
      netfilter: nft_inner: release local_lock before re-enabling softirqs

Francesco Saverio Pavone (1):
      ALSA: pcm_drm_eld: rate-limit ELD parsing errors

Frank Li (1):
      pinctrl: imx1: Allow parsing DT without function nodes

Fredric Cover (1):
      smb: client: change allocation requirements in DUP_CTX_STR macro

Gabor Juhos (1):
      phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL
register access

Gal Pressman (2):
      net/mlx5e: Don't leak RSS context in case of error
      udp: Fix UDP length on last GSO_PARTIAL segment

Gang Yan (1):
      mptcp: update window_clamp on subflows when SO_RCVBUF is set

Gao Xiang (1):
      erofs: fix managed cache race for unaligned extents

Gary C Wang (1):
      ASoC: soc-acpi-intel-arl-match: add rt712_l0_rt1320_l3 support

Geert Uytterhoeven (1):
      arm64: dts: renesas: r8a78000: Fix SCIF brg_int clocks

Greg Kroah-Hartman (1):
      sysfs: don't remove existing directory on update failure

Grzegorz Nitka (3):
      ice: ptp: serialize E825 PHY timer start with PTP lock
      ice: ptp: use primary NAC semaphore on E825
      ice: restore PTP Rx timestamp config after ethtool set-channels

Guangshuo Li (1):
      RDMA/rtrs: Fix use-after-free in path file creation cleanup

Guannan Wang (1):
      bpf: Use array_map_meta_equal for percpu array inner map replacement

Guenter Roeck (1):
      ARM: integrator: Fix early initialization

Guilherme Giacomo Simoes (1):
      x86/vdso: Fix incorrect size in munmap() on map_vdso() failure

Guixin Liu (1):
      scsi: target: tcm_loop: Fix NULL ptr dereference

Gustavo Sousa (3):
      drm/xe: Define CACHE_MODE_1 as MCR register
      drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1
      drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4

Hans Zhang (1):
      MAINTAINERS: Remove Jianjun Wang as PCIe mediatek maintainer

Haoze Xie (1):
      netfilter: nf_queue: hold bridge skb->dev while queued

Hardik Prakash (1):
      pinctrl-amd: enable IRQ for WACF2200 touchscreen on Lenovo Yoga 7 14AGP11

Harry Wentland (3):
      drm/amd/display: Fix integer overflow in bios_get_image()
      drm/amd/display: Validate GPIO pin LUT table size before iterating
      drm/amd/display: Validate payload length and link_index in
dc_process_dmub_aux_transfer_async

Hasan Basbunar (1):
      modpost: prevent stack buffer overflow in do_input_entry() and
do_dmi_entry()

Heechan Kang (2):
      io_uring/waitid: clear waitid info before copying it to userspace
      fwctl: pds: Validate RPC input size before parsing

Helen Koike (1):
      debugobjects: Do not fill_pool() if pi_blocked_on

Henrique Carvalho (1):
      smb: client: protect tc_count increment in
smb2_find_smb_sess_tcon_unlocked()

Henry Tseng (1):
      cpufreq: intel_pstate: Use HYBRID_SCALING_FACTOR_ADL for Bartlett Lake

Hisam Mehboob (1):
      KVM: selftests: elf: Include <endian.h> instead of <bits/endian.h>

Hongling Zeng (2):
      fs: Fix return in jfs_mkdir and orangefs_mkdir
      cachefiles: Fix error return when vfs_mkdir() fails

Huacai Chen (1):
      LoongArch: Remove unused code to avoid build warning

Hyunchul Lee (1):
      ntfs: match ntfs_resident_attr_min_value_length with $AttrDef

Hyunwoo Kim (1):
      net: skbuff: propagate shared-frag marker through frag-transfer helpers

Ido Schimmel (2):
      bridge: mcast: Fix a possible use-after-free when removing a bridge port
      selftests: bridge_vlan_mcast: Test toggling of multicast snooping

Ihor Matushchak (1):
      regulator: Kconfig: fix a typo in help

Illia Ostapyshyn (2):
      scripts/gdb: mm: cast untyped symbols in x86_page_ops
      scripts/gdb: slab: update field names of struct kmem_cache

Ilya Dryomov (1):
      rbd: eliminate a race in lock_dwork draining on unmap

Ilya Maximets (2):
      openvswitch: vport: fix race between linking and the device notifier
      tools: ynl: support listening on all nsids

Ingyu Jang (1):
      ASoC: ti: omap-dmic: Fix IS_ERR() vs NULL check bug in
omap_dmic_select_fclk()

Ivan Vecera (1):
      dpll: zl3073x: fix memory leak on pin registration failure

Jacob Keller (1):
      ice: fix locking around wait_event_interruptible_locked_irq

Jai Luthra (1):
      riscv: dts: starfive: jh7110: Drop CAMSS node

Jairaj Arava (1):
      ASoC: Intel: sof_sdw: Add support for nvlrvp in NVL platform

Jakub Kicinski (3):
      net: shaper: annotate the data races
      net: shaper: rework the VALID marking (again)
      MAINTAINERS: add missing entry for Bluetooth include files

Jang Pyohwan (1):
      ASoC: Intel: soc-acpi: add LG Gram 16Z90U RT713 + single RT1320 quirk

Jann Horn (2):
      af_unix: Fix UAF read of tail->len in unix_stream_data_wait()
      Bluetooth: bnep: Fix UAF read of dev->name

Jason Gunthorpe (2):
      RDMA/core: Move the _ib_copy_validate_udata* functions to ib_core_uverbs
      RDMA/core: Do not read wild stack memory in uverbs_get_handler_fn()

Jasper Smet (1):
      ASoC: amd: acp: Add DMI quirk for ASUS Zenbook S16 UM5606GA

Jens Axboe (2):
      io_uring/net: punt IORING_OP_BIND async if it needs file create
      io_uring/timeout: splice timed out link in timeout handler

Jeongjun Park (1):
      ASoC: codecs: pcm512x: fix null-ptr dereference in
pcm512x_overclock_xxx_put()

Jeremy Erazo (1):
      smb: client: use data_len for SMB2 READ encrypted folioq copy

Jeremy Laratro (2):
      ksmbd: fix null pointer dereference in proc_show_files()
      ksmbd: fix null pointer dereference in compare_guid_key()

Jeroen Massar (1):
      net/mlx5: Do not restore destination-less TC rules

Jia Zhu (1):
      erofs: fix metabuf leak in inode xattr initialization

Jiajia Liu (1):
      Bluetooth: btmtk: fix urb->setup_packet leak in error paths

Jiakai Xu (3):
      RISC-V: KVM: Fix invalid HVA warning in steal-time recording
      RISC-V: KVM: Fix NULL pointer dereference in SBI v0.1 SEND_IPI handler
      RISC-V: KVM: Fix sign extension for MMIO loads

Jianpeng Chang (1):
      dma-mapping: move dma_map_resource() sanity check into debug code

Jiexun Wang (1):
      Bluetooth: serialize accept_q access

Johan Hovold (4):
      spi: ep93xx: fix error pointer deref after DMA setup failure
      spi: qup: fix error pointer deref after DMA setup failure
      spi: sprd: fix error pointer deref after DMA setup failure
      spi: ti-qspi: fix use-after-free after DMA setup failure

Johannes Berg (4):
      wifi: iwlwifi: mvm: fix driver-set TX rates on old devices
      wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o BSS vif
      wifi: mac80211: fix MLE defragmentation
      wifi: mac80211: fix multi-link element inheritance

Johannes Thumshirn (1):
      zonefs: handle integer overflow in zonefs_fname_to_fno

John Walker (1):
      wifi: cfg80211: advance loop vars in cfg80211_merge_profile()

Jonas Jelonek (1):
      net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()

Jose Ignacio Tornos Martinez (1):
      ice: fix VF queue configuration with low MTU values

Jouni Högander (3):
      drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register
      drm/i915/psr: Read Intel DPCD workaround register
      drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used

Jozsef Kadlecsik (4):
      netfilter: ipset: fix a potential dump-destroy race
      netfilter: ipset: Fix data race between add and list header in
all hash types
      netfilter: ipset: Fix data race between add and dump in all hash types
      netfilter: ipset: annotate "pos" for concurrent readers/writers

Julian Anastasov (1):
      ipvs: avoid possible loop in ip_vs_dst_event on resizing

Julien Chauveau (1):
      drm/bridge: it66121: acquire reset GPIO in probe

Junxi Qian (1):
      fuse: fix writeback array overflow when max_pages is one

Junyi Liu (2):
      ksmbd: fix durable reconnect error path file lifetime
      ksmbd: validate SID in parent security descriptor during ACL inheritance

Junyoung Jang (1):
      fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap

Justin Iurman (2):
      ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
      ipv6: ioam: refresh hdr pointer before ioam6_event()

K Prateek Nayak (6):
      cpufreq/amd-pstate: Grab "amd_pstate_driver_lock" when toggling
dynamic_epp
      cpufreq/amd-pstate: Return -ENOMEM on failure to allocate profile_name
      cpufreq/amd-pstate: Allow writes to dynamic_epp when state isn't modified
      cpufreq/amd-pstate: Reorder notifier unregistration and floor perf reset
      cpufreq/amd-pstate: Use "epp_default_dc" as default when
dynamic_epp is disabled
      cpufreq/amd-pstate-ut: Drop policy reference before driver switch

KP Singh (2):
      bpf: Reject NULL data/sig in bpf_verify_pkcs7_signature
      libbpf: fix off-by-one in emit_signature_match jump offset

Kang Yang (1):
      wifi: ath10k: skip WMI and beacon transmission when device is wedged

Kartik Nair (1):
      wifi: cfg80211: wext: validate chandef in monitor mode

Kean Ren (2):
      hwmon: (lenovo-ec-sensors): Convert to devm_request_region()
      hwmon: (lenovo-ec-sensors): Fix EC "MCHP" signature validation logic

Keith Busch (3):
      nvme-pci: fix dma_vecs leak on p2p memory
      nvme-pci: fix dma mapping leak on data setup error
      blk-mq: pop cached request if it is usable

Kiran K (1):
      Bluetooth: btintel_pcie: Fix incorrect MAC access programming

Kohei Enju (2):
      igc: set tx buffer type for SMD frames
      igc: fix potential skb leak in igc_fpe_xmit_smd_frame()

Konrad Dybcio (1):
      firmware: psci: Set pm_set_resume/suspend_via_firmware() for
SYSTEM_SUSPEND

Krishnamoorthi M (1):
      spi: amd: Set correct bus number in ACPI probe path

Krzysztof Kozlowski (6):
      ARM: realtek: MAINTAINERS: Include pin controller drivers
      dt-bindings: display/msm: dp-controller: Correct SM8650 IO range
      dt-bindings: display/msm: dp-controller: Allow DAI on SM8650 and others
      dt-bindings: display/msm: sm8650: Correct VBIF range in example
      dt-bindings: display/msm: sm8750-mdss: Correct DPU and DP ranges
in example
      dt-bindings: display/msm: qcom,eliza-mdss: Correct DPU and DP
ranges in example

Kumar Kartikeya Dwivedi (2):
      bpf: Check global subprog exception paths
      selftests/bpf: Cover global subprog exception leaks

Kyle Farnung (1):
      wifi: ath11k: clear shared SRNG pointer state on restart

Lad Prabhakar (2):
      pinctrl: renesas: rzg2l: Fix SMT register cache handling
      dt-bindings: display/msm: Fix typo in clock-names property

Li Xiasong (2):
      mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient
      selftests: mptcp: join: cover ADD_ADDR tx drop and list progress

Lijo Lazar (1):
      drm/amdgpu: Fix discovery offset check under VF

Linus Torvalds (1):
      Linux 7.1-rc5

Lizhi Hou (1):
      accel/amdxdna: Remove mmap and export support for ubuf

Lord Ulf Henrik Holmberg (1):
      RDMA/bnxt_re: zero shared page before exposing to userspace

Lorenzo Bianconi (2):
      netfilter: br_netfilter: Reallocate headroom if necessary in
neigh_hh_bridge()
      net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback

Louis-Alexis Eyraud (4):
      drm/mediatek: mtk_hdmi_ddc_v2: Fix non-static global variable
      drm/mediatek: mtk_hdmi_v2: Fix non-static global variable
      drm/mediatek: mtk_cec: Fix non-static global variable
      drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable

Luiz Augusto von Dentz (1):
      Bluetooth: hci_sync: Fix not setting mask for
HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE

Luiz Capitulino (1):
      selftests/mm: run_vmtests.sh: fix destructive tests invocation

Lukas Wunner (1):
      platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery

Luxiao Xu (1):
      batman-adv: fix tp_meter counter underflow during shutdown

Mac Chiang (3):
      ASoC: Intel: soc-acpi-intel-arl-match: Reorder ACPI machine tables
      ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC
      ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC

Maciej W. Rozycki (5):
      Revert "drivers: net: 3com: 3c509: Remove this driver"
      ethernet: 3c509: Fix AUI transceiver type selection
      ethernet: 3c509: Add GPL 2.0 SPDX license identifier
      ethernet: 3c509: Update documentation to match MAINTAINERS
      ethernet: 3c509: Fix most coding style issues

Mahadevan P (1):
      drm/msm/dpu: Fix Kaanapali CWB register configuration

Maoyi Xie (3):
      rds_tcp: close NULL deref window in rds_tcp_set_callbacks
      ALSA: timer: avoid past-the-end iterator in snd_timer_dev_register()
      ALSA: seq: avoid past-the-end iterator in snd_seq_create_port()

Marcin Szycik (1):
      ice: fix setting promisc mode while adding VID filter

Marco Elver (1):
      nios2: Implement _THIS_IP_ using inline asm

Marek Szyprowski (1):
      irqchip/exynos-combiner: Switch to raw_spinlock

Marek Vasut (10):
      arm64: dts: renesas: draak/ebisu-panel: Fix missing cells and reg in DTO
      arm64: dts: renesas: salvator-panel: Fix missing cells and reg in DTO
      arm64: dts: renesas: rz-smarc-cru-csi-ov5645: Fix missing cells
and reg in CSI2 subnode
      arm64: dts: renesas: rz-smarc-du-adv7513-smarc: Fix missing
cells and reg in DU subnode
      ARM: dts: renesas: r8a7778: Add missing unit address to bus node
      ARM: dts: renesas: r8a7779: Add missing unit address to bus node
      ARM: dts: renesas: r8a7792: Add missing unit address to bus node
      ARM: dts: renesas: r7s72100: Add missing unit address to bus node
      ARM: dts: renesas: genmai: Drop superfluous cells
      ARM: dts: renesas: rskrza1: Drop superfluous cells

Mario Limonciello (2):
      ASoC: SOF: amd: Fix error code handling in psp_send_cmd()
      cpufreq/amd-pstate: Drop Kconfig option for dynamic EPP

Marius Hoch (2):
      efi: sysfb_efi: Extend quirk to cover IdeaPad Duet 3 10IGL5-LTE
      ALSA: hda/realtek: Add LED quirk for HP ProBook 430 G6

Masami Hiramatsu (Google) (2):
      ring-buffer: Flush and stop persistent ring buffer on panic
      tracing: Do not call map->ops->elt_free() if elt_alloc() fails

Matt Fleming (1):
      net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover

Matthew Leach (1):
      wifi: ath11k: fix peer resolution on rx path when peer_id=0

Matthieu Baerts (NGI0) (2):
      selftests: mptcp: drop nanoseconds width specifier
      selftests: rds: config: disable modules

Maulik Shah (2):
      pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615
      pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150

Maíra Canal (2):
      drm/v3d: Fix use-after-free of CPU job query arrays on error path
      drm/v3d: Release indirect CSD GEM reference on CPU job free

Michael Bommarito (14):
      Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer
      RDMA/siw: Reject MPA FPDU length underflow before signed receive math
      net: ifb: report ethtool stats over num_tx_queues
      scsi: isci: Fix use-after-free in device removal path
      ipv4: raw: reject IP_HDRINCL packets with ihl < 5
      net: hsr: defer node table free until after RCU readers
      io_uring: propagate array_index_nospec opcode into req->opcode
      ixgbevf: fix use-after-free in VEPA multicast source pruning
      KVM: arm64: vgic-its: Reject restored DTE with out-of-range
num_eventid_bits
      KVM: arm64: vgic: Free private_irqs when init fails after allocation
      wifi: mac80211: consume only present negotiated TTLM maps
      Bluetooth: MGMT: validate Add Extended Advertising Data length
      l2tp: use list_del_rcu in l2tp_session_unhash
      smb: client: require net admin for CIFS SWN netlink

Michael Grzeschik (1):
      MAINTAINERS: Update address for Michael Grzeschik

Michal Wajdeczko (2):
      drm/xe/memirq: Update interrupt handler logic
      drm/xe/vf: Fix signature of print functions

Mike Christie (1):
      scsi: sd: Fix return code handling in sd_spinup_disk()

Mike Rapoport (Microsoft) (2):
      MAINTAINERS: add tree for KDUMP and KEXEC
      MAINTAINERS: add kexec@ list to LIVE UPDATE ENTRY

Mikko Perttunen (1):
      drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

Mingyu Wang (1):
      Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

Minh Nguyen (1):
      vsock/vmci: fix UAF when peer resets connection during handshake

Minxi Hou (1):
      ALSA: hda/realtek: Add quirk for HP Z66 G6 14 laptop

Miri Korenblit (1):
      wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

Mohanram Meenakshisundaram (1):
      drm/xe/pf: Fix CFI failure in debugfs access

Moriya Itzchaki (1):
      wifi: iwlwifi: use correct function to read STEP_URM register

Muchun Song (2):
      mm/memory_hotplug: fix memory block reference leak on remove
      drivers/base/memory: fix memory block reference leak in poison accounting

Namhyung Kim (7):
      perf trace: Sync linux/socket.h with the kernel source
      perf trace: Sync uapi/linux/fs.h with the kernel source
      perf trace: Sync uapi/linux/mount.h with the kernel source
      perf trace: Sync uapi/linux/sched.h with the kernel source
      perf build: Add make check-headers target
      perf trace: Add beautifier script for fsmount flags
      perf trace: Update beautifier script for clone flags

Namjae Jeon (2):
      ntfs: fix variable dereferenced before check ni and attr in
ntfs_attrlist_entry_add()
      ntfs: fix variable dereferenced before check ni in ntfs_attr_open()

Nan Li (1):
      netfilter: ipset: stop hash:* range iteration at end

Nathan Chancellor (2):
      HID: core: Fix size_t specifier in hid_report_raw_event()
      drm/msm: Restore second parameter name in purge() and evict()

Neil Armstrong (1):
      drm/msm/dpu: fix UV scanlines calculation for YUV UBWC formats

Nerijus Bendžiūnas (1):
      net: phy: skip EEE advertisement write when autoneg is disabled

Nicolai Buchwitz (3):
      net: phy: honor eee_disabled_modes in phy_support_eee()
      net: phy: honor eee_disabled_modes in phy_advertise_eee_all()
      net: bcmgenet: keep RBUF EEE/PM disabled

Nicolas Escande (3):
      wifi: ath11k: fix error path leaks in some WMI WOW calls
      wifi: ath11k: fix error path leaks in some WMI calls
      wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()

Nikhil P. Rao (3):
      pds_core: fix error handling in pdsc_devcmd_wait
      pds_core: fix debugfs_lookup dentry leak and error handling
      pds_core: ensure null-termination for firmware version strings

Niklas Cassel (4):
      ata: libata-scsi: improve readability of ata_scsi_qc_issue()
      ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT
      ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS
      ata: libata-scsi: do not needlessly defer commands when using PMP with FBS

Nimrod Oren (1):
      selftests: net: Fix checksums in xdp_native

Niranjana Vishwanathapura (1):
      drm/xe/multi_queue: Fix secondary queue error case

Nitin Rawat (1):
      phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix

Oliver Neukum (1):
      media: rc: ttusbir: fix inverted error logic

Oliver White (1):
      platform/surface: aggregator_registry: omit battery & AC nodes
on Surface Laptop 7

Or Har-Toov (1):
      net/mlx5: Skip disabled vports when setting max TX speed

Osama Abdelkader (4):
      riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM
      riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM
      drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe
      drm/bridge: megachips: remove bridge when irq request fails

Pankaj Raghav (1):
      fs: fix forced iversion increment on lazytime timestamp updates

Paolo Abeni (1):
      mptcp: reset rcv wnd on disconnect

Paul E. McKenney (1):
      srcu: Don't queue workqueue handlers to never-online CPUs

Pauli Virtanen (1):
      Bluetooth: btmtk: accept too short WMT FUNC_CTRL events

Paulo Alcantara (1):
      netfs: fix error handling in netfs_extract_user_iter()

Peter Oberparleiter (1):
      s390/cio: Restore GFP_DMA for CHSC allocation

Peter Ujfalusi (2):
      MAINTAINERS: ASoC/ti: Remove myself and add Sen Wang as maintainer
      MAINTAINERS: ASoC: Intel/SOF: Remove Ranjani Sridharan as maintainer

Peter Zijlstra (2):
      x86/kvm/vmx: Move IRQ/NMI dispatch from KVM into x86 core
      x86/kvm/vmx: Fix VMX vs hrtimer_rearm_deferred()

Petr Tesarik (1):
      dma-direct: fix use of max_pfn

Prathamesh Deshpande (1):
      net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA

Qing Ming (1):
      cgroup/rstat: validate cpu before css_rstat_cpu() access

Qing Wang (1):
      mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache()

Rafael J. Wysocki (24):
      cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E
      platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL
      platform/x86: hp_accel: Check ACPI_COMPANION() against NULL
      platform/x86: intel-hid: Check ACPI_HANDLE() against NULL
      platform/x86: intel_sar: Check ACPI_HANDLE() against NULL
      platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL
      platform/surface: surfacepro3_button: Check ACPI_COMPANION()
      ACPI: battery: Fix system wakeup on critical battery status
      platform/x86: acer-wireless: Check ACPI_COMPANION() against NULL
      platform/x86: asus-laptop: Check ACPI_COMPANION() against NULL
      platform/x86: dell/dell-rbtn: Check ACPI_COMPANION() against NULL
      platform/x86: eeepc-laptop: Check ACPI_COMPANION() against NULL
      platform/x86: fujitsu: Check ACPI_COMPANION() against NULL
      platform/x86: fujitsu-tablet: Check ACPI_COMPANION() against NULL
      platform/x86: intel/rst: Check ACPI_COMPANION() against NULL
      platform/x86: intel/smartconnect: Check ACPI_HANDLE() against NULL
      platform/x86: lg-laptop: Check ACPI_COMPANION() against NULL
      platform/x86: panasonic-laptop: Check ACPI_COMPANION() against NULL
      platform/x86: sony-laptop: Check ACPI_COMPANION() against NULL
      platform/x86: system76: Check ACPI_COMPANION() against NULL
      platform/x86: toshiba_acpi: Check ACPI_COMPANION() against NULL
      platform/x86: toshiba_bluetooth: Check ACPI_COMPANION() against NULL
      platform/x86: toshiba_haps: Check ACPI_COMPANION() against NULL
      platform/x86: wireless-hotkey: Check ACPI_COMPANION() against NULL

Ralf Lici (2):
      selftests: ovpn: reduce remaining ping flood counts
      ovpn: disable BHs when updating device stats

Ratheesh Kannoth (1):
      octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs

Ricardo Neri (1):
      Documentation: intel_pstate: Fix description of asymmetric
packing with SMT

Richard Fitzgerald (5):
      ASoC: cs35l56: Check for successful runtime-resume in cs35l56_dsp_work()
      ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()
      ASoC: cs-amp-lib: Fix wrong sizeof() in _cs_amp_set_efi_calibration_data()
      ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup()
      ASoC: cs-amp-lib: Fix typo in error message: write -> read

Rob Clark (2):
      drm/msm/a6xx: Restore sysprof_active
      drm/msm: Correct modparam description

Rob Herring (Arm) (1):
      ASoC; dt-bindings: mediatek,mt8173-rt5650-rt5514: Fix
mediatek,audio-codec constraints

Robbie Ko (1):
      btrfs: mark file extent range dirty after converting prealloc extents

Robertus Diawan Chris (1):
      ASoC: soc-utils: Add missing va_end in snd_soc_ret()

Rong Tao (1):
      efi: efi.h: Remove extra semicolon

Rosen Penev (1):
      net: ag71xx: check error for platform_get_irq

Ruide Cao (1):
      batman-adv: fix fragment reassembly length accounting

Ruijie Li (1):
      batman-adv: clear current gateway during teardown

Sabrina Dubroca (1):
      net: gro: don't merge zcopy skbs

Safa Karakuş (1):
      Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()

Sam Daly (1):
      octeontx2-af: CGX: add bounds check to cgx_speed_mbps index

Samuele Mariotti (1):
      sched_ext: Fix spurious WARN on stale ops_state in ops_dequeue()

Saurav Sachidanand (2):
      i2c: tegra: fix pm_runtime leak on mutex_lock failure
      i2c: tegra: make tegra_i2c_mutex_unlock() return void

Sean Christopherson (2):
      KVM: x86: Return the VM's configured APIC bus frequency when queried
      KVM: selftests: Verify that KVM returns the configured APIC cycle length

SeongJae Park (2):
      mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
      mm/damon: fix damos_stat tracepoint format for sz_applied

Sergio Boglione (1):
      ALSA: hda/realtek: Add quirk for HP 250 G10 (103c:8b34)

Shardul Bankar (1):
      mptcp: do not drop partial packets

Shengjiu Wang (1):
      ASoC: fsl_sai: Eliminate possible interrupt storm during probe

Sheroz Juraev (1):
      wifi: iwlwifi: mld: stop TX during firmware restart

Shiraz Saleem (1):
      RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port

Shitalkumar Gandhi (1):
      wifi: wilc1000: fix dma_buffer leak on bus acquire failure

Shuai Zhang (1):
      Bluetooth: hci_qca: Convert timeout from jiffies to ms

Shuicheng Lin (2):
      drm/xe/gsc: Fix double-free of managed BO in error path
      drm/xe/oa: Fix exec_queue leak on width check in stream open

Simon Schuster (1):
      MAINTAINERS: arch/nios2: Add Simon Schuster as co-maintainer

Simon Trimmer (1):
      ASoC: cs35l56: Log SoundWire status updates only on changes

Srinivas Kandagatla (1):
      ASoC: qcom: q6apm-dai: Allocate an extra page for PCM buffers

Stefano Garzarella (3):
      vsock/virtio: fix zerocopy completion for multi-skb sends
      vsock/virtio: reset connection on receiving queue overflow
      vsock/virtio: fix skb overhead accounting to preserve full buf_alloc

Stepan Ionichev (1):
      gpio: pca953x: propagate regulator_enable() error from resume

Stephen Smalley (1):
      lsm: hold cred_guard_mutex for lsm_set_self_attr()

Steven Rostedt (1):
      ring-buffer: Fix reporting of missed events in iterator

Sudeep Holla (11):
      firmware: arm_ffa: Check for NULL FF-A ID table while driver registration
      firmware: arm_ffa: Skip free_pages on RX buffer alloc failure
      firmware: arm_ffa: Avoid collapsing NPI work from different CPUs
      firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue
      firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0
      firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
      firmware: arm_ffa: Keep framework RX release under lock
      firmware: arm_ffa: Validate framework notification message layout
      firmware: arm_ffa: Align RxTx buffer size before mapping
      firmware: arm_ffa: Snapshot notifier callbacks under lock
      firmware: arm_ffa: Fix sched-recv callback partition lookup

Sunday Clement (1):
      drm/amdkfd: Fix OOB memory exposure in get_wave_state()

Sunil Khatri (7):
      drm/amdgpu/userq: use drm_exec in amdgpu_userq_fence_read_wptr
      drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction
      drm/amdgpu/userq: cancel reset work while tear down in progress
      drm/amdgpu/userq: update the vm task info during signal ioctl
      drm/amdgpu: remove va cursors for all mappings
      drm/amdgpu: use atomic operation to achieve lockless serialization
      drm/amdgpu: userq_va_mapped should remain true once done

Sunny Patel (1):
      mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page

Sven Eckelmann (22):
      batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown
      batman-adv: tt: reject oversized local TVLV buffers
      batman-adv: tt: fix negative tt_buff_len
      batman-adv: tt: fix negative last_changeset_len
      batman-adv: tt: fix TOCTOU race for reported vlans
      batman-adv: tt: avoid empty VLAN responses
      batman-adv: tt: prevent TVLV entry number overflow
      batman-adv: dat: handle forward allocation error
      batman-adv: tp_meter: avoid use of uninit sender vars
      batman-adv: frag: disallow unicast fragment in fragment
      batman-adv: tp_meter: directly shut down timer on cleanup
      batman-adv: fix batadv_skb_is_frag() kernel-doc
      batman-adv: v: stop OGMv2 on disabled interface
      batman-adv: tvlv: abort OGM send on tvlv append failure
      batman-adv: tvlv: reject oversized TVLV packets
      batman-adv: tp_meter: fix race condition in send error reporting
      batman-adv: tp_meter: avoid role confusion in tp_list
      batman-adv: mcast: fix use-after-free in orig_node RCU release
      batman-adv: iv: recover OGM scheduling after forward packet error
      batman-adv: bla: fix report_work leak on backbone_gw purge
      batman-adv: bla: avoid double decrement of bla.num_requests
      batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface

Takashi Iwai (5):
      ALSA: asihpi: Fix potential OOB array access at reading cache
      ALSA: hda: Avoid quirk matching with zero PCI SSID
      ALSA: pcm: Don't setup bogus iov_iter for silencing
      ALSA: hda: Move irq pending work into hda-intel stream
      ALSA: hda/intel: Make sure to cancel irq-pending work at closing
PCM stream

Tejun Heo (1):
      sched_ext: Fix deadlock between scx_root_disable() and concurrent forks

Thomas Richter (2):
      s390/pai: Disable duplicate read of kernel PAI counter value
      s390/pai: Fix missing PAI counter increments under heavy load

Thomas Weißschuh (1):
      tracing: Create output file from cmd_check_undefined

Tiezhu Yang (2):
      LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions
      LoongArch: kprobes: Fix handling of fatal unrecoverable recursions

Til Kaiser (1):
      pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function

Timur Kristóf (9):
      drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2)
      drm/amdgpu/vce1: Check that the GPU address is < 128 MiB
      drm/amdgpu/vce1: Remove superfluous address check
      drm/amdgpu/vce1: Check if VRAM address is lower than GART.
      drm/amdgpu/vce1: Don't repeat GTT MGR node allocation
      drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets
      drm/amdgpu/vce1: Stop using amdgpu_vce_resume
      drm/amdgpu/vce2: Fix VCE 2 firmware size and offsets
      drm/amdgpu/vce3: Fix VCE 3 firmware size and offsets

Tina Zhang (1):
      KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h
(erratum #1235)

Tom Lendacky (1):
      x86/mm: Disable broadcast TLB flush when PCID is disabled

Tommaso Merciai (2):
      arm64: dts: renesas: r9a09g057: Add #mux-state-cells to usb2{0,1}phyrst
      arm64: dts: renesas: r9a09g056: Add #mux-state-cells to usb20phyrst

Uwe Kleine-König (The Capable Hub) (1):
      drm/msm: Don't use UTS_RELEASE directly

Viacheslav Dubeyko (1):
      netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

Viktor Jägersküpper (1):
      kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme

Vincent Donnefort (2):
      KVM: arm64: Fix nVHE/pKVM hyp tracing error on invalid desc
      tracing: Fix unload_page for simple_ring_buffer init rollback

Vitaliy Triang3l Kuzmin (1):
      drm/radeon/evergreen_cs: Add missing NULL prefix check in surface check

Vladimir Murzin (1):
      arm64: probes: Handle probes on hinted conditional branch instructions

WANG Rui (3):
      efi/loongarch: Randomize kernel preferred address for KASLR
      LoongArch: Skip relocation-time KASLR if already applied
      LoongArch: Avoid initrd overlap during kernel relocation

Wayne Chang (1):
      phy: tegra: xusb: Fix per-pad high-speed termination calibration

Wei Fang (9):
      net: enetc: fix incorrect mailbox message status returned to VFs
      net: enetc: fix missing error code when pf->vf_state allocation fails
      net: enetc: add ratelimiting to VF mailbox error messages
      net: enetc: fix TOCTOU race and validate VF MAC address
      net: enetc: fix race condition in VF MAC address configuration
      net: enetc: fix DMA write to freed memory in enetc_msg_free_mbx()
      net: enetc: fix unbounded loop and interrupt handling in
VF-to-PF messaging
      net: enetc: fix init and teardown order to prevent use of unsafe resources
      net: enetc: avoid VF->PF mailbox timeout during SR-IOV teardown

Weiming Shi (3):
      net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
      net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
      tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR

Wenwen Wang (1):
      i2c: smbus: fix a potential uninitialization bug

William Bowling (1):
      net: skbuff: preserve shared-frag marker during coalescing

Willmar Knikker (1):
      wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce()

Xiang Liu (1):
      drm/amd/ras: Fix UMC error address allocation leak

Xiangxu Yin (1):
      phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config

Xianwei Zhao (1):
      pinctrl: meson: amlogic-a4: fix deadlock issue

Xingwang Xiang (2):
      bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
      selftests/bpf: add regression test for ktls+sockmap verdict UAF

Yang Wang (1):
      drm/amd/pm: fix memleak of dpm_policies on smu v15

Yazhou Tang (3):
      bpf: Fix out-of-bounds read in bpf_patch_call_args()
      bpf: Fix s16 truncation for large bpf-to-bpf call offsets
      selftests/bpf: Add test for large offset bpf-to-bpf call

Yi Lai (1):
      selftests/rdma: explicitly skip tests when required modules are missing

Yifan Zhang (1):
      drm/amdgpu: unmap all user mappings of framebuffer and doorbell
before mode1 reset

Yizhou Zhao (1):
      netfilter: nft_inner: Fix IPv6 inner_thoff desync

Yongxing Mou (5):
      phy: qcom: edp: Unify generic DP/eDP swing and pre-emphasis tables
      phy: qcom: edp: Add eDP/DP mode switch support
      phy: qcom: edp: Add SC7280/SC8180X swing/pre-emphasis tables
      phy: qcom: edp: Fix AUX_CFG8 programming for DP mode
      phy: qcom: edp: Add PHY-specific LDO config for eDP low vdiff

Yu-Chun Lin (1):
      MAINTAINERS: Add maintainers for ARM/REALTEK ARCHITECTURE

Yuho Choi (1):
      ipv6: route: Unregister netdevice notifier on BPF init failure

Yulin Lu (1):
      phy: eswin: Fix incorrect error check in probe()

Zeng Heng (1):
      arm64: tlb: Flush walk cache when unsharing PMD tables

Zhan Xusheng (1):
      ntfs: fix missing kstrdup() error check in ntfs_write_volume_label()

Zhang Cen (2):
      ALSA: seq: Serialize UMP output teardown with event_input
      netpoll: normalize skb->dev to the netpoll device

Zhang Heng (1):
      ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP 16 Piston OmniBook X

Zhao Li (1):
      wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb

Zhengchuan Liang (1):
      netfilter: ip6t_hbh: reject oversized option lists

Zhengyu He (1):
      spi: dt-bindings: fsl-qspi: support SpacemiT K3

Zhi Li (5):
      dt-bindings: ethernet: eswin: add optional TXD and RXD delay
register offsets
      net: stmmac: eswin: fix HSP CSR init ordering after clock enable
      net: stmmac: eswin: clear TXD and RXD delay registers during
initialization
      net: stmmac: eswin: correct RGMII delay granularity to 20 ps
      net: stmmac: eswin: validate RGMII delay values

Zhihao Cheng (2):
      nsfs: fix wrong error code returned for pidns ioctls
      cifs: Fix busy dentry used after unmounting

Zijing Yin (1):
      phonet/pep: disable BH around forwarded sk_receive_skb()

Łukasz Lebiedziński (1):
      phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870

Коненко Андрей Викторович (1):
      hp-wmi: fix support for thermal profile Omen 16-с0xxx laptops