Linux 7.4-rc2

[Linus Torvalds]

Ok, a big -rc2 to go with the largest ever -rc1. But the diffstat
looks fairly benign, and is dominated by some automated coccinelle
updates that I got for the merge window but left for rc2 because I
didn't want to deal with them when I was on the road (and had a hard
time finding the motivation to deal with them afterwards too, to be
honest).

That said, the scripted updates are largely just one- and two-liners,
and they realy are very straightforward so they "dominate" the
diffstat only in the sense that they are very spread out and do add a
lot of noise.

When masking that noise out from the diffstat, the shape of it changes
- not spread out over thousands of files any more. But it does not
look unusual: a third is drivers (gpu, networking and sound account
for most of it, but there's a bit of everything), another third is
networking and bpf, and the final third is "the rest" (mostly
filesystems, mm, arch updates).

And yes, much of this was driven by various AI fixes. I think I'll
stop repeating that, and we can just take it for granted. But this
time around Alexei claims that on the bpf side at least the fixes are
now coming in faster than the new reports, and that sounds lovely if
true.

I think most other areas haven't reached that point yet, but it's at
least a sign that we _may_ be starting to see the tide starting to
turn.

Don't hold your breath, but maybe cross your fingers we'll be getting
there in the not entirely distant future.

In the meantime, please keep testing,

            Linus

---

Adarsh Das (1):
      btrfs: unwind device add when sysfs registration fails

Adrian Ng Ho Yin (1):
      dt-bindings: usb: add Altera Agilex5 DWC3 controller

Adrián García Casado (1):
      scsi: libsas: Add __printf attribute to sas_ata_printk()

Akhil Arul (1):
      Bluetooth: hci_core: Fix queuing rx_work while workqueue is drained

Akshay Jindal (1):
      iommu/amd: Skip non-IVMD entries when parsing IVRS memory definitions

Alejandro Colomar (1):
      scripts/coccinelle: Add script for using ARRAY_END()

Alex Austin (3):
      sfc: ptp: drop the stale frequency reset in efx_ptp_start()
      sfc: ptp: serialize host and MC synchronization transactions
      sfc: ptp: avoid racing PPS timestamp updates

Alex Hung (1):
      drm/amd/display: Avoid closing unowned DDC pins

Alex Kazinsky (2):
      wifi: rsi: Skip TX aggregation setup for non-QoS frames
      ALSA: cs46xx: Handle SCB creation failures before dereferencing

Alexander Goodkind (1):
      net: ethernet: mediatek: preserve sibling PPE bindings

Alexandr (1):
      ALSA: hda/realtek: Enable mute and mic-mute LEDs on HP ENVY 17-cr0xxx

Alexandre Mergnat (2):
      regulator: mt6363: Use 8-bit register values
      regulator: mt6363: Fix VEMC voltage selection

Alexei Solcanu (1):
      hwmon: (gpd-fan) Reset both fans to automatic on duo boards

Alexei Starovoitov (40):
      bpf: Keep the valid bytes of a packet pointer in scalar evolution
      selftests/bpf: Test the valid bytes of a packet pointer in a counted loop
      bpf, x86: Fix bpf_throw() in a prog with a private stack
      selftests/bpf: Test bpf_throw() in a prog with a private stack
      bpf: Clamp the trace length before the skip test in stackid_init()
      bpf: Refuse to map an arena at address 0
      bpf: Don't let bpf_arena_free_pages() see a half-set user range
      bpf: Refuse an arena mmap() longer than max_entries pages
      bpf: Remove the WARN from arena_get_unmapped_area()
      selftests/bpf: Test the length and the address of an arena mmap()
      bpf: Don't turn struct arguments of KF_ACQUIRE kfuncs into memory
      bpf: Don't turn kfunc arguments of an empty struct type into memory
      bpf: Compare the arguments of an extension with those of its target
      selftests/bpf: Test the arguments of an extension prog
      bpf: Don't let bpf_skb_adjust_room() raise gso_size to GSO_BY_FRAGS
      bpf: Set a dst for test runs of lwt_in progs
      bpf: Don't look for the SRH again in the End.BPF helpers
      bpf: Don't leave a stale MAC header in bpf_lwt_push_ip_encap()
      bpf: Reset skb->cb after an lwt prog pushes an IP header
      bpf: Require BPF_LWT_REROUTE when an lwt_in prog changes the protocol
      bpf: Don't let lwt_in progs call into IPv6 when it is disabled
      bpf: Don't move a MAP_FIXED address in arena_get_unmapped_area()
      selftests/bpf: Run arena_mmap serially and test MAP_FIXED addresses
      bpf: Fix the join of fp+0 with a value that is not a pointer to stack
      selftests/bpf: Test the join of fp+0 with a value that is not a
pointer to stack
      bpf: Don't trust pointers spilled in slots that a callee can write
      selftests/bpf: Test a callee that overwrites a spilled pointer
of its caller
      bpf: Invalidate a dynptr slice when its stack buffer is written
      selftests/bpf: Test writes to the buffer of bpf_dynptr_slice_rdwr()
      bpf: Emit timed may_goto for JITed progs only
      selftests/bpf: Don't cast a pointer to .bss in arena_htab_asm
      selftests/bpf: Give the first loop of cond_break5 an end
      selftests/bpf: End the loop of parallel_test_bitmap after 50 ms
      s390/bpf: Support internal-only MOV instruction to resolve per-CPU addrs
      bpf: Pass a pointer to arch_bpf_timed_may_goto()
      bpf: One may_goto time slice per prog invocation
      bpf: End bpf_loop() when the time of may_goto is up
      selftests/bpf: Test one may_goto time slice per prog invocation
      libbpf: Fix use-after-free in btf__add_type
      net: reject a negative TCP header offset in qdisc_pkt_len_segs_init()

Amir Goldstein (3):
      ovl: inherit FMODE_NONOTIFY when opening directory realfiles
      ovl: inherit FMODE_NONOTIFY when reading directory layers
      selftests/fscontext_ns: expect EINVAL for overlay descendant userns create

Amirmohammad Eftekhar (1):
      KVM: VMX: Add array_index_nospec() to evmcs_field_offset()

Andrea Mayer (1):
      seg6: fix transport header for inner IPv4 with IP options

Andrew Luebke (1):
      scsi: aic79xx: Fix NULL pointer dereference in device reset

Andrew Morton (2):
      openrisc: export __mulsi3 for modules
      MAINTAINERS: add an IPC entry

André Draszik (2):
      drm/drm_crtc: ensure dma_fence_ops remain valid during device unbind
      drm/drm_crtc: fix race with dma_fence_signal() in ::get_driver_name()

Animesh Manna (1):
      drm/i915/cmtg: Disable CMTG after encoder disable in hsw_crtc_disable()

Ankit Thakur (4):
      9p: fix header guard comment in acl.h
      9p: fix typos and wrong parameter docs in vfs_inode.c
      9p: remove duplicated assignment in v9fs_fill_super()
      9p: fix typo in file header comments

Antheas Kapenekakis (1):
      ALSA: hda/tas2781: Prevent throwing away custom calibration addresses

Anthony Iliopoulos (1):
      xfs: skip iunlock with empty iolock flags in xfs_file_dio_write_aligned

Antony Antony (9):
      xfrm: state: reject mark with bits outside its mask on add
      xfrm: state: reject mark with bits outside its mask on ALLOCSPI
      xfrm: policy: reject mark with bits outside its mask on add
      xfrm: state: exact mark/mask match for SPI-keyed control-plane SA lookups
      xfrm: fix use-after-free of migrated state in xfrm_do_migrate_state()
      xfrm: fix hw offload state leak on xfrm_do_migrate_state() error path
      xfrm: include mark in MIGRATE_STATE SA collision check
      xfrm: pass extack through to xfrm_init_replay() from xfrm_init_state()
      docs: xfrm: include mark in XFRM_MSG_MIGRATE_STATE EEXIST tuple

Anuj Gupta (1):
      block: don't use the bvec fast path for dma-buf bios

Anupama Kunkulagunta (1):
      ALSA: hda/tegra: Add Tegra268 HDMI/DP codec ID

Armin Wolf (1):
      platform/x86: uniwill-laptop: Implement .hw_offloaded trigger callback

Arpith Alexander (1):
      spi: ljca: Don't require data in write replies

Ashish Kalra (2):
      x86/sev: Clear RMPOPT when segmented RMP is disabled by firmware
      x86/sev: Set up RMPOPT only on an active SNP host

Avi Weiss (3):
      fsnotify: preserve 64-bit pre-content ranges
      block: report the correct discard alignment in sysfs
      net: skbuff: reject zero MPLS TTL before decrementing

Ayushman Rout (2):
      bpf: Fix bpf_dynptr_copy() for overlapping ranges in one packet
      selftests/bpf: Test overlapping dynptr copies on xdp frags

Babu Moger (2):
      x86/resctrl: Correct ABMC counter ID field width
      x86,fs/resctrl: Keep mbm_assign_mode in default mode at boot

Baek Kyu, Kim (3):
      hwmon: (corsair-cpro) Cache fan target only after a successful command
      hwmon: (gpio-fan) Update the speed cache before dropping the PM reference
      null_blk: reset cache state before device setup

Baojun Xu (1):
      ASoC: amd: acp: Add support for more projects on ACP7.0

Baolin Wang (1):
      mm: memory: fix truncation removing mapped folios

Barret Rhoden (1):
      9p: treat read return values of 0 as EOF

Bart Van Assche (4):
      ntfs: Fix error handling in __ntfs_create()
      scsi: BusLogic: Pass the host pointer directly to several functions
      scsi: BusLogic: Prepare for enabling lock context analysis
      mctp i3c: Fix locking in an error path

Bas Nieuwenhuizen (1):
      drm/amdgpu: Check cs flags.

Benjamin J Pryor (1):
      ALSA: hda/realtek: Extend ALC1316 fixup to MSI GE76 Raider

Binbin Deng (4):
      xfs: set healthmon mount cookie before publishing it
      Bluetooth: hci_core: Initialize IRK before publication
      Bluetooth: hci_core: Initialize link key before publication
      Bluetooth: hci_core: Initialize LTK before publication

Björn Töpel (1):
      eth: fbnic: Report the logical RX queue to XDP

Breno Leitao (2):
      x86/bugs: Select the BHI mitigation based on the attack vector properly
      x86/nmi: Ignore negative NMI handler durations

Bryam Vargas (2):
      net/iucv: take a private, writable frame before rewriting it in place
      net/smc: don't spin in smc_rx_recvmsg() while a pipe holds spliced data

Calvin Owens (1):
      Revert "drm/amd/display: Allocate DCN32/1 dmub memory to GTT"

Catherine L (1):
      Bluetooth: btintel: fix buffer over-read in fw payload

Ce Sun (1):
      drm/amdgpu: skip RAS error count reset in debug mode

Cen Zhang (14):
      Bluetooth: hci_sync: Copy the LE accept list under hdev->lock
      Bluetooth: hci_sync: Protect resolving-list lookups
      Bluetooth: hci_core: Keep link-key filtering inside RCU
      Bluetooth: SMP: Protect link keys during LTK derivation
      Bluetooth: SMP: Protect LTK encryption with RCU
      Bluetooth: hci_sync: Copy the resolving-list IRK under RCU
      Bluetooth: hci_core: Initialize advertising RPA work only once
      ocfs2: validate move extents against a stable EOF
      ocfs2: keep locking_state within the cluster connection lifetime
      ocfs2/dlm: serialize migration MLE cleanup on failure
      ocfs2: stop recovery before shutting down local allocators
      ocfs2/cluster: unlink socket containers before releasing resources
      ocfs2: wait for filecheck kobject release after a failed add
      ocfs2: cache the mount context for dentry lock callbacks

Cen Zhang (Microsoft) (1):
      ipv6: fix fib6 walker UAF on NLM_F_REPLACE

Cheng Yongkang (1):
      net: bridge: disable MRP ports before the FDB flush in del_nbp()

Chengfeng Ye (3):
      xfrm: retry inexact policy lookup after node reinsertion
      net/9p/usbg: clear stale request context after abort
      batman-adv: Close OGM aggregation before transmission

Chris Chiu (1):
      ALSA: hda/realtek: Use inverted mute LED quirk for HP ZBook 8 G2a

Chris Down (1):
      mm: make swapoff interruptible when unusing mms/shmem

Chris Lu (3):
      Bluetooth: btmtk: drop zero-length ISO packets from endpoint padding
      Bluetooth: btmtk: bound the ISO payload length by the controller's MTU
      Bluetooth: btmtk: derive the firmware ISO setting from MTK_ISO_THRESHOLD

Chris Mason (33):
      bpf: Reject memory for kfunc projection type args
      bpf: Require prog fd or capability for cgroup detach
      bpf, cgroup: Keep the skb network offset signed
      bpf: Reject non-IPv6 packets in BPF_LWT_ENCAP_SEG6
      bpf: Limit the SRH length in bpf_lwt_seg6_adjust_srh()
      bpf: Move the MAC header in bpf_lwt_seg6_adjust_srh()
      bpf: Move the transport header with the moved headers
      bpf: Use the inner transport header after a decap
      bpf: Check the offset in bpf_skb_generic_{push,pop}()
      mm/mempolicy: charge shared policy nodes
      mm/shmem: honour F_SEAL_EXEC when an ACL is set
      mm/shmem: stop retrying folios that cannot be split
      mm/shmem: preserve data in clean folios when splitting fails
      mm/huge_memory: fix truncate racing with PMD zapping
      mm/huge_memory: fix zapping migration entries for device-private THPs
      mm/khugepaged: preserve dirty bits when collapsing PTE-mapped THPs
      mm/gup: fix clearing folios in memfd_pin_folios()
      mm/gup: fix out-of-bounds write for nr_pages == 0 in GUP-fast
      mm/mmu_notifier: set ->mm only after mmgrab()
      mm/memory: reject remote COW faults on PFN mappings
      mm: fix unkillable fault loop on MAP_DROPPABLE memory
      mm: fix deadlock of mremap() against UFFDIO_MOVE
      mm/ksm: check large swap-cache folios before mapping them
      mm/vma: call ->may_split() before a partial merge
      ovl: fail the mount if the casefold flag has changed
      ovl: do not let chattr change the casefold flag
      ovl: fix whiteout creation in casefolded directories
      nvmet-rdma: disconnect only established queues
      nvmet-rdma: take a device off the list last
      nvmet-rdma: queue the release work under the mutex
      nvmet-rdma: disconnect a queue on device removal
      ovl: look up the index by the decoded origin
      x86/mm: Fix global ASID handed out to two processes

Chris Simpson (1):
      ALSA: hda/realtek: Enable bass speakers on Alienware m17 R3

Christian Aurich Zanettini Martins (2):
      nvme-tcp: fix use-after-free in nvme_tcp_free_ctrl()
      nvme-rdma: fix NULL queue->ctrl dereference on reconnect

Christian Gmeiner (2):
      drm/etnaviv: Fix NULL dereference on unbind without PPU flop reset
      drm/etnaviv: Flush the tile status cache through both the PE and BLT

Christian Loehle (1):
      sched/core: Account I/O waits independently of delayed dequeue

Christoph Hellwig (2):
      zloop: fix block size query
      xfs: fix recovery of partial attr removals

Christophe JAILLET (1):
      nvmet: pci-epf: Constify struct pci_epf_ops

ChunYuZhiQiang (2):
      can: dev: can_fill_info(): don't wake up controller if interface is down
      can: dev: can_tdc_fill_info(): don't read automatic TDCV if
interface is down

Chunfa Zhang (1):
      spi: fix zero-length scatterlist entries for vmalloc buffers

Cian Ruane (1):
      ALSA: hda/realtek: Add quirk for Huawei MateBook X Pro 2020

Clément Léger (1):
      MAINTAINERS: mailmap: use Clément Léger's linux.dev mail address

Colton Pawielski (1):
      net: 8139cp: keep Rx masked while NAPI is scheduled

Cong Zhang (1):
      virtio_blk: use synchronous quiesce in virtblk_freeze_priv()

Cosmin Ratiu (1):
      wifi: wext: Limit notifier event flushes to the device's netns

Cunhao Lu (3):
      can: skb: make echo skb freeing safe in any IRQ context
      can: skb: make CAN skb allocation failure paths IRQ-safe
      can: dev: can_put_echo_skb(): free skb on invalid echo index

Daehyeon Ko (2):
      vhost/vsock: size receive SKBs from declared payload
      sched/fair: Clear throttle state when leaving the fair class

Daejun Park (12):
      xfs: don't skip free extents in later batches of a whole-AG FITRIM
      xfs: don't skip free extents of the longest length in a whole-AG FITRIM
      nvme: unregister when pr_register() is given a zero new key
      xfs: mark the inode preallocated for pNFS write layouts past EOF
      xfs: add a flag to convert unwritten extents without allocating blocks
      xfs: refuse a pNFS LAYOUTCOMMIT of a range without blocks
      xfs: clamp a pNFS LAYOUTCOMMIT extent before computing its end
      xfs: cap the block count of xfs_iomap_write_direct() at one extent
      xfs: clamp the pNFS layout range to the maximum file size
      xfs: take the invalidate lock while mapping a pNFS layout
      xfs: add datasync and log_flushed arguments to xfs_log_force_inode()
      xfs: make pNFS LAYOUTCOMMIT stable the way fdatasync does

Daniel Borkmann (2):
      x86/ftrace: Mark jmp mode by clearing bit 63 of trampoline address
      selftests/bpf: Test kprobe and fentry/fexit programs on one function

Daniel Machon (2):
      net: lan966x: don't free XDP buffers in fdma tx clear with budget 0
      net: sparx5/lan969x: release the in-flight slot of a stale TX skb

Danish Khateeb (2):
      selftests/mm: merge: keep the far mremap() targets in the carveout
      perf/core: Don't send SIGTRAP after exec removed the event

Dariusz Marcinkiewicz (1):
      drm/amdgpu: check amdgpu_vm_ready() in dma-buf move notify

David Carlier (1):
      spi: rtk-nor: Limit exec_op writes to one byte per operation

David Hildenbrand (Arm) (37):
      mm/shmem: discard whole new large folios on fallocate rollback
      mm/shmem: rescan after nonuniform folio splitting
      mm/shmem: fix truncate hang in large swap entry
      mm/shmem: preserve allocation errors when swapping in large entries
      mm/shmem: fix truncate loop after boundary swapin failure
      mm/shmem: fix accounting of swapin-error markers
      mm/shmem: fix truncation of files containing only swapin-error markers
      fork: take mmap_lock before copying mm_struct
      mm/shmem: make shmem_file() check the file's inode
      mm/truncate: look again if a folio left the mapping
      mm/filemap: finish fault cleanup before dropping the fault lock
      mm/rmap: handle device-exclusive entries in folio_referenced_one()
      mm/huge_memory: fix list corruption when deferred_split_scan()
races with deferred_split_folio()
      mm/huge_memory: properly handle refcounted PUD mappings on fork
      mm: fix address wraparound when scanning large folio PTEs
      mm/hugetlb: disable PMD sharing for UFFD missing mode
      mm/vma: write lock source VMA before duplicating it in __split_vma()
      mm/madvise: preserve VMA_SOFTDIRTY_BIT when changing anonymous names
      MAINTAINERS: mention for-next branch in MEMORY MANAGEMENT - MEMORY MAP
      MAINTAINERS: TMPFS (SHMEM FILESYSTEM) updates
      MAINTAINERS: add Zi Yan as co-maintainer for MEMORY MANAGEMENT - THP
      MAINTAINERS: sort entries in MM sections
      MAINTAINERS: add missing files to MM component sections
      MAINTAINERS: rename and move MEMORY HOT(UN)PLUG
      MAINTAINERS: route more MM changes through mm/core.git
      mm/gup: recheck the PUD under PTL in follow_pud_mask()
      mm/gup: check for overflow when converting nr_pages to bytes in GUP-fast
      mm/userfaultfd: write-lock the VMA before waking waiters when
unregistering
      mm/userfaultfd: wake waiters when registration modes are removed
      mm/mremap: use pudp_huge_get_and_clear() when moving huge PUDs
      mm/mremap: recheck PUDs under the page table lock
      mm/madvise: fix data loss from MADV_FREE on a KSM page
      mm/ksm: reset the unstable trees of all nodes
      mm/ksm: fix use of a freed anon_vma at swap-in
      mm/huge_memory: split huge PUDs when adjusting VMA boundaries
      mm/vma: don't leak the charge for stack growth
      mm/memory-tiers: unregister empty tiers outside memory_tier_lock

Davidlohr Bueso (1):
      dma-buf: validate the attachment before asserting its reservation lock

Deepanshu Kartikey (2):
      9p: don't WARN_ONCE on racy symlink fid lookup failure
      batman-adv: avoid WARN_ON for orig_ifinfo allocation failure

Devin Wittmayer (2):
      drm/panic: Fix kmsg screen hang on a long log line
      drm/panic: Accept a trailing newline in panic_screen

Dheeraj Kumar Srivastava (1):
      iommu/amd: Clear amd_iommu_snp_en if snp_rmptable_init() fails

Dmitry Antipov (1):
      9p: simplify v9fs_cache_session_get_cookie()

Dmitry Baryshkov (1):
      regulator: qcom_spmi: don't take a sleeping lock in the SAW IPI

Dom Cobley (1):
      drm/vc4: hdmi: power down the BCM2712 PHY when the output is disabled

Dominique Martinet (1):
      9p: optimize p9_fcall struct

Drew Fustini (1):
      MAINTAINERS: resctrl: Add myself as reviewer

Dudu Lu (1):
      vhost/vringh: Fix IOTLB permission in putu16_iotlb()

Eklavya Singh (1):
      ocfs2/heartbeat: serialize concurrent writes to a region's dev attribute

Eliot Courtney (1):
      rust: io: fix unused Flags::from_raw warning without CONFIG_PCI

Ella Ma (1):
      coccinelle: free: add a checker for `__cleanup(kfree)` usage

Erhan Bilgili (2):
      drm/amdgpu: Fix duplicate dependency fence releases
      drm/amdgpu: Report MES ring wait timeouts.

Eric Biggers (5):
      lib/crypto: mips: Disable Octeon SHA code on little-endian kernels
      lib/crypto: powerpc/poly1305: Remove BROKEN implementation
      lib/crypto: mldsa: Check pk_len before doing pointer arithmetic
      lib/crypto: mldsa: Explicitly check that 'alg' is a valid value
      lib/crypto: mldsa: Add __must_check to mldsa_verify()

Eric Dumazet (7):
      tcp: do not let tcp_collapse() drive sk_forward_alloc negative
      inet: frags: limit the truesize of a reassembly queue
      soreuseport: annotate data-races around reuse->socks[] and num_socks
      xfrm: iptfs: fix skb leak on error in __input_process_payload()
      ipmr, ip6mr: queue netlink route queries out of band
      tcp: ipv6: do not read ireq->pktopts from tcp_v6_send_synack()
      tcp: ipv6: free ireq->ipv6_opt after an RCU grace period

Esben Haabendal (2):
      drm/bridge: nwl-dsi: Cleanup endpoint mux control selection
      drm/bridge: nwl-dsi: Limit LCDIF specific sync override

Eugenio Pérez (1):
      MAINTAINERS: add missing virtio/vdpa/vduse/vhost headers

Eva Kurchatova (1):
      hugetlbfs: enforce F_SEAL_EXEC in setattr

Evanshenf (3):
      drm/loongson: Fix framebuffer selection in async cursor updates
      drm/loongson: Fix double free on BO initialization failure
      drm/loongson: Handle buffer mapping failures when clearing a BO

Ewan D. Milne (1):
      nvmet: don't return memory contents beyond valid data when
reading ANA log page

Fang Xieyan (4):
      vringh: bound top-level re-entry into indirect tables
      vringh: add regression test for cyclic indirect descriptor
      vringh: reject empty / undersized indirect descriptor tables
      vhost: fix used ring index wrap in vhost_add_used_n_in_order

Fangzhi Zuo (2):
      drm/edid: Parse HDMI 2.2 FRL rates from the SCDS
      drm/amd/display: Accept HDMI 2.2 FRL rates from the sink EDID

Federico Musto (1):
      net: atl1c: drop oversized RX frames instead of panicking

Fernando Fernandez Mancera (1):
      net/smc: fix limit_smc_hs sysctl on big-endian architecture

Filipe Manana (6):
      btrfs: defrag: prevent inode truncated to zero from not being
defragged again
      btrfs: fix fiemap merging compressed extents
      btrfs: scrub: fix lost error return value when scrubbing raid56
parity stripe
      btrfs: scrub: fix lost wakeup and hang when cancelling a scrub
that is finishing
      btrfs: scrub: fix race leading to use-after-free in the scrub
progress ioctl
      btrfs: scrub: fix race between scrub and scrub progress ioctl

Finn Zeruhn (1):
      drm/dp: keep MOT set between messages when no_zero_sized is set

Florian Fainelli (7):
      net: dsa: b53: Enable IGMP and MLD control packet CPU copies
      net: ethernet: bgmac: preserve forced 2.5 Gbps link speed
      net: dsa: b53: restore the NSP IMP port 2 Gbps mode
      MIPS: Alchemy: Register interrupt chips with the IRQ core
      MIPS: Alchemy: Save the Ethernet address before reusing PROM memory
      MIPS: Cobalt: Include legacy IDE ports in the PCI I/O window
      MIPS: SB1250: Validate and update IRQ affinity

Fourie Zhang (1):
      xfrm4: use a full socket for local errors

Franck Baur (1):
      net: jme: keep RX MAC clock enabled for WoL

Frederic Konrad (1):
      spi: cadence-quadspi: Fix race between DMA completion and transfer start

GIBEOM LEE (이기범) (1):
      regulator: mt6363: Fix the registers of the VSRAM CPU and APU LDOs

Gianluca Balboni (1):
      ASoC: amd: yc: Add DMI quirk for HP OmniBook 3 Laptop 16-by0xxx

Giuseppe Piscitelli (3):
      scsi: scsi_debug: Drain target cleanup before module exit
      scsi: core: Balance the pseudo target reap reference
      ata: libata-core: Check device support before querying power state

Gregory Price (1):
      mm/userfaultfd: compare exact registration modes before skipping

Gregory Price (Meta) (1):
      mm/page_alloc: let the highest memory node recover from hopeless state

Guenter Roeck (22):
      hwmon: (aquacomputer_d5next) Check maxcollection when probing
AQUAERO devices
      hwmon: (asus_wmi_sensors) Avoid global struct mutation
      hwmon: (hp-wmi-sensors) Avoid global struct mutation
      hwmon: (hp-wmi-sensors) Fix unbounded loops in scale_numeric_sensor()
      hwmon: (lm87) Fix drvdata type confusion in vrm_show() and vrm_store()
      hwmon: (nct6683) Fix incorrect struct cast in show_pwm() and store_pwm()
      hwmon: (peci/dimmtemp) Fix devres leak and UAF on concurrent unbind
      hwmon: (pmbus/q54sj108a2) Add missing NULL pointer check
      hwmon: (pmbus) Check return value from pmbus_thermal_add_sensor()
      hwmon: (pmbus) Release devres allocated memory after
devm_thermal_of_zone_register error
      hwmon: (pmbus) Fix return value check from thermal zone registration
      hwmon: (lm75) Fix setting polarity mask for chips with 16-bit
config register
      hwmon: (tmp108) Fix initial conversion delay and wait until ready
      hwmon: (coretemp) Check for NULL platform device in hotplug callbacks
      hwmon: (coretemp) Set nr_cores only after core_data allocation succeeds
      hwmon: (coretemp) Fix 32-bit jiffies wraparound in show_temp()
      hwmon: (sht4x) Convert update_interval to jiffies in pending data check
      hwmon: (acpi_power_meter) Fix missing locking in sysfs show
callbacks and resume
      hwmon: (acpi_power_meter) Prevent spurious power alarm when
power is unknown
      hwmon: (acpi_power_meter) Check for 32-bit and 64-bit unknown ACPI values
      hwmon: (hp-wmi-sensors) Serialize alarm flag read-and-clear with
state->lock
      hwmon: (asus_rog_ryujin) Fix timeout when reading 0% duty cycle

Guillaume Nault (1):
      tcp: Fix dup-ack detection on non-SACK bidirectional data transfer.

Guixin Liu (1):
      nvmet-rdma: remove dead allocated field in nvmet_rdma_rsp

HOYOUNG SEO (1):
      scsi: ufs: core: Change the error check sequence for auto hibern8

Haiyue Wang (1):
      platform: arm64: drop the vacuous THERMAL dependency from EC_ASUS_GLYMUR

Haobin Wu (3):
      9p: skip intermediate directory entry name copy in p9dirent_read()
      9p: skip directory entries with names longer than NAME_MAX
      9p: skip over-long directory entry names for legacy 9p2000 too

Hemanth Selam (1):
      net/9p: fix typos in comments

Hengyu Liang (3):
      btrfs: fix chattr failing on nodatasum files that have the compress flag
      fs/proc/task_mmu: return -ENOTTY for unknown pagemap ioctls
      l2tp: only return sessions of the given tunnel in l2tp_session_get()

Hongjian Dai (1):
      spi: pic32-sqi: fail transfer when the BD ring is exhausted

Hongling Zeng (2):
      ntfs: keep the file size on a failed initialized-size extension
      ntfs: fix a self-deadlock on writes to non-resident named streams

Hugo Deco (1):
      nvme-pci: add NO_FUA quirk for ADATA XPG GAMMIX S70 BLADE

Hugo Sales (1):
      drm/amdgpu: Clamp the ATIF backlight curve to its 99 points

Hui Peng (2):
      udf: validate vat20->lengthHeader and VAT inode size in udf_load_vat()
      9p: reject RERROR/RLERROR with zero errcode

Hui Su (2):
      sched/pelt: Fix u32 truncation of the PELT period count
      sched/topology: Balance cluster static-key updates

Hungyu Lin (8):
      ext2: preserve completed DIO bytes when buffered fallback fails
      mm/page-writeback: avoid 32-bit overflow in dirty threshold shares
      mm/migrate: untag addresses when querying page nodes
      fat: fix parent link count when replacing a sibling directory
      inotify: do not coalesce rename events
      block: Return the soft block size for compat BLKBSZGET
      isofs: handle Rock Ridge long-form dates before 1900
      ext2: preserve IOMAP_F_DIRTY for extending direct writes

HyeongJun An (1):
      ALSA: ump: Fix dropped data bytes at UMP System message conversion

Hyunchul Lee (3):
      ntfs: reject negative attribute read positions
      ntfs: initialize VCN when inserting index entries
      ntfs: avoid overflow when limiting attribute read length

Hyungjung Joo (1):
      net/9p/usbg: clear stale client pointer on close

Hyunwoo Kim (2):
      inet: reject unhashed sockets during established lookups
      net: restore refcount ordering for lockless socket access

Ian Bridges (6):
      ksmbd: require DELETE access for delete-on-close opens
      ksmbd: enforce the read-only share flag when creating a stream
      ksmbd: revert fsids on durable reconnect and replay failure
      ksmbd: do not read past the DACL in the access denied debug message
      ksmbd: grant a POSIX ACL group entry only to the group's members
      ksmbd: let the owner read and change the DACL when no ACE names it

Ian Rogers (2):
      perf/core: Include perf_event_attr::defer_output in is_sb_event() check
      perf/core: Clamp deferred callchain entry count to fit u16 header.size

Ido Schimmel (1):
      vxlan: Stop rejecting dynamic FDB entries with a nexthop ID

Igor Pylypiv (1):
      ata: libata-sata: allow re-enabling NCQ with the same queue_depth

Ilia Mirkin (1):
      drm/nouveau/devinit/gf100-: try to avoid double-running vbios scripts

Imre Kaloz (8):
      scsi: aic7xxx: Fix REQUEST SENSE allocation length on big-endian hosts
      scsi: aic7xxx: Use default settings on the SGI O2 onboard controllers
      MIPS: SGI-IP27: print the NMI dump on an nbcon console
      MIPS: SGI-IP30: fix the defconfig defaults for the Bridge PROM and RTC
      MIPS: mm: Fix the cache error vector jump for XKPHYS kernels
      MIPS: sgi-ip32: Mask MACE PCI interrupts in CRIME only
      MIPS: sgi-ip32: Leave MACE PCI control alone in config accesses
      MIPS: sgi-ip32: Report the real CRIME revision

Ioannis Coward (1):
      io_uring/wait: don't sleep on an already expired timeout

Ismail Tarim (1):
      Bluetooth: btmtk: fix error handling in btmtk_usb_isointf_init()

Jack Blessed Kimani (1):
      ksmbd: fix NULL pointer dereference in session_user_name() and
session_account_type()

Jakub Kicinski (1):
      docs: netdev: try to force agents to disclose info for fixes

Jakub Sitnicki (1):
      bpf, sockmap: Fix psock update-side data races on sk->sk_prot and progs

Jamal Hadi Salim (2):
      bpf: Fix skb_pull() BUG in __bpf_redirect_neigh()
      net/sched: clamp skb->queue_mapping before indexing the tx queue

James Calligeros (2):
      ASoC: tas2770: Configure transmit clock edge when setting DAI format
      ASoC: tas2770: Fix error detection in tas2770_set_dai_tdm_idle

James Clark (2):
      net: ethernet: ti: am65-cpts: adjust perout genf following ptp changes
      net: ethernet: ti: am65-cpsw-nuss: Enable timestamping of
unicast PTP packets

James Fantin-Hardesty (1):
      nvmet: fix arbitration burst field mask

James Hilliard (6):
      ptp: drain virtual clock sysfs operations before unregistering children
      ptp: unwind partially completed virtual clock creation
      ptp: vclock: propagate physical clock sampling errors
      ptp: vclock: serialize extended samples with counter updates
      ptp: vclock: preserve missing hardware timestamps
      net: stmmac: take ownership of saved RX state at poll entry

Jan Beulich (1):
      xen-netback: defer xenvif_mcast_addr_list_free()

Jan Kara (4):
      udf: Validate extended attribute space is large enough
      udf, ext2, quota, jbd2: Unify email addresses in MAINTAINERS
      udf: Simplify udf_table_prealloc_blocks()
      udf: Fix incorrect error code in udf_current_aext()

Jarkko Sakkinen (1):
      nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup()

Jason Perlow (1):
      wifi: brcmfmac: map msgbuf RX packet IDs bidirectional

Javier Carrasco (11):
      hwmon: chipcap2: fix command error diagnostics
      hwmon: chipcap2: fix off-by-one in command mode retry loop
      hwmon: chipcap2: fix be16 handling
      hwmon: chipcap2: defer probe when IRQs are unavailable
      hwmon: chipcap2: fix IRQ teardown ordering
      hwmon: chipcap2: disable device after hwmon teardown
      hwmon: chipcap2: enable IRQ processing when regulator is already enabled
      hwmon: chipcap2: balance regulator state
      hwmon: chipcap2: do not discard pending alarms on disable
      hwmon: chipcap2: serialize access to the alarm indicators
      hwmon: chipcap2: synchronize ready IRQ state

Jean-Christophe Guillain (1):
      iommu/amd: Fix NULL pointer dereference for GPUs without upstream bridge

Jens Axboe (2):
      io_uring/poll: don't poll a writer for a read side hangup
      io_uring/poll: don't poll a writer for urgent data

Jerome Brunet (1):
      ASoC: meson: axg-fifo: request the irq with the clock enabled

Jesse Zhang (11):
      drm/amdgpu: sign extend the addresses GEM_OP(GET_MAPPING_INFO) returns
      drm/amdgpu: parse CS IBs at the BO offset their VA mapping starts at
      drm/amdgpu: keep the CS user fence BO in GTT
      drm/amdkfd: use the queue's process info for the WPTR BO eviction fence
      drm/amdgpu/userq: validate the moved individual BOs on restore
      drm/amdgpu/gfx12: disallow GFXOFF while updating the SPM VMID
      drm/amdgpu: drop the dma-buf reference when a KFD import fails
      drm/amdgpu: unlock the VM and BO when attaching a KFD BO fails
      drm/amdgpu: rewrite all PTEs of the BOs after a VM reset
      drm/amdgpu: don't walk the CS chunks when allocating them failed
      drm/amdgpu: don't drop the gang dependency fence twice

Jia Jia (6):
      scsi: target: Validate REGISTER AND MOVE TransportID length
      vhost-scsi: preserve event ordering
      vhost-scsi: do not relock event vq mutex on send_evt fallback
      vduse: avoid infinite loop when no affinity CPU is online
      vhost-scsi: do not count PI bytes in the data length
      vhost-scsi: fix page reference leak in misaligned I/O fallback

Jiale Yao (1):
      hwmon: (aquacomputer_d5next) reject short status reports

Jianan Huang (1):
      blk-mq: reset queue state on scheduler teardown

Jianyun Gao (1):
      xfs: fix temporary cursor leak in btree shift corruption paths

Jinjie Ruan (1):
      arm64: kexec_file: Fix elf_headers memory leak in retry loop

Jinwang Li (1):
      Bluetooth: L2CAP: Ignore connection responses with wrong ident

Joas Antonio dos Santos (2):
      net/mlx5: macsec: free struct mlx5_fs_id after an RCU grace period
      tipc: raise the minimum bearer MTU to fit tunnel and crypto overhead

Joe Perches (1):
      coccinelle: Add devm_kmalloc_objs conversion script

Johan Hovold (1):
      MAINTAINERS: update auxiliary bus entry

Johannes Weiner (2):
      mm: page_alloc: do not give all non-blocking requests reserve access
      mm: page_alloc: remove ALLOC_NON_BLOCK from ALLOC_RESERVES

John Ogness (1):
      printk: Avoid multiple unregistration in unregister_console_locked()

Joonhoe Kim (1):
      net: qrtr: announce local services again once our HELLO is sent

Jose Fernandez (Anthropic) (1):
      bpf: Fix jited line info off by the CFI preamble

Jose Maria Casanova Crespo (1):
      drm/v3d: Initialize timedout_batches when running a CSD job

Josef Bacik (21):
      bpf: Clamp the trace length in __bpf_get_stack() again
      tmpfs: keep the quota soft limits of an unused id
      tmpfs: preserve explicitly disabled quota limits
      mm/shmem: hold off eviction in shmem_writeout()
      mm/mglru: don't use stack pointers when walking PUD and PMD tables
      mm/memfd: make f_pos accesses atomic
      mm/filemap: read mapping->a_ops->free_folio under i_lock
      mm/filemap: don't lose a folio lock wakeup to a signal
      ext2: only flush DIRSYNC directories on every change
      blk-mq: end the request if getting a keyslot fails
      mm/khugepaged: always recheck the pmd in try_collapse_pte_mapped_thp()
      mm/khugepaged: fix PMD table lock leak in try_collapse_pte_mapped_thp()
      mm/userfaultfd: wake all waiters on unregister
      mm/mmu_gather: fix flushing ranges with 4 GiB or larger
      mm/mmu_notifier: finish non-blocking interval invalidation on error
      mm/mremap: fix moving PUD leaves
      mm: fix unmap_mapping_range() beyond 4 GiB on 32-bit
      nvme-loop: delete the controller if a reset fails
      nvmet-tcp: ask for the TLS record type on every receive
      nvmet-auth: keep the old keys if the new ones fail
      nvmet-tcp: limit the connections accepted per work run

Joseph Kain (1):
      net: stop defer_count outliving the deferred-free list

Joseph Qi (6):
      ocfs2: read the xattr entry hash before defragmenting the bucket
      ocfs2: find the xattr entry again after defragmenting a bucket
      ocfs2: find the xattr entry again after converting a block to a bucket
      ocfs2: do not read the entry array of an empty xattr bucket
      ocfs2: do not index before the entry array when dividing an empty bucket
      ocfs2: do not read the entry array of an empty xattr block

Josua Mayer (1):
      dt-bindings: usb: cypress,hx3: make peer-hub property optional

Jouni Högander (5):
      drm/i915/psr: Clear selective fetch area when duplicating plane state
      drm/i915/display: Add enabled pipe planes into state for selective fetch
      drm/i915/psr: Disable linked plane sel fetch as well
      drm/i915/psr: Fix SFF and CFF CTL register bit definitions
      drm/i915/psr: Don't clip plane state destination rectangle

Jude Gyimah (5):
      ASoC: rockchip_i2s: select REGMAP_MMIO
      ASoC: rockchip_i2s_tdm: select REGMAP_MMIO
      ASoC: rockchip_pdm: select REGMAP_MMIO
      ASoC: rockchip_sai: select REGMAP_MMIO
      ASoC: rockchip_spdif: select REGMAP_MMIO

Juergen Gross (2):
      xen-netback: Fix UAF when reading statistics data
      xen-blkback: Avoid UAF when reading I/O statistics

Julia Lawall (1):
      scripts/coccinelle: improve efficiency of array_end.cocci

Jérémy Jean (1):
      nvmet-auth: reject incomplete DHCHAP messages

Kaixuan Li (1):
      can: isotp: check the frame type, not just the length

Karl Mehltretter (2):
      dma-buf: keep the DMA flags in the DMABUF_DEBUG copy
      virtio-spi: Fix virtio_spi_config kernel-doc

Kayra Cizmeci (1):
      sched/cache: Ignore non-fair current in alb_break_llc()

Kees Cook (4):
      9p: Add const and unsigned to wnames allocation type
      treewide: refresh kmalloc_obj() conversions
      coccinelle: kmalloc_obj: Include devm_kmalloc_obj conversion rules
      treewide: Convert devm_kmalloc() family to the devm_kmalloc_obj() family

Kefeng Wang (1):
      xfs: kill xfs_trans_set/clear_context() helpers

Kent Russell (1):
      drm/amdgpu: Ensure that harvest information gets set

Kevin Dewald (3):
      Bluetooth: hci_event: Clear explicit connect state on LE connection
      Bluetooth: MGMT: Clear disabled connection parameters when loading none
      Bluetooth: MGMT: Fix discovery stuck after a failed Stop Discovery

Kevin Mitchell (1):
      iommu/amd: remove obsolete domain pointer warning on release

Kevin Wang (1):
      drm/amd/pm: populate unique ID for smu 13.0.7

Kiryl Shutsemau (Meta) (3):
      mm/hugetlb_vmemmap: map the shared tail page writable
      arm64: sdei: Run the event handler on the kernel vectors
      arm64: sdei: Preserve the interrupted context's exception registers

Konstantin Sinyuk (1):
      MAINTAINERS: Update habanalabs maintainer contacts and status

Krystian Kaniewski (1):
      blk-mq: fix out-of-bounds read in blk_mq_free_rqs

Kuangyi Chiang (1):
      ALSA: usb-audio: Add delay quirk for HIK camera

Kuniyuki Iwashima (3):
      ipv6: Flush exception route while replacing nexthop.
      ipv6: Flush rt->from in rt6_uncached_list_flush_dev().
      ipv4: Call rt_add_uncached_list() if !do_cache in ip_route_input_slow().

Kyle Bader (1):
      block: only fail dma-buf bios that need block layer PI

Kyle Zeng (6):
      batman-adv: mcast: validate tracker padding before forwarding
      mm/khugepaged: flush deferred unmaps before dropping a failed folio
      net/sched: sch_qfq: prevent aggregate self-replacement
      tcp: wait for TIME_WAIT teardown before freeing per-netns ehash
      ip6mr: Serialize multicast router socket ownership
      mptcp: pm: kernel: use RCU to free endpoint listeners

Kylie C (1):
      drm/amd/display: Don't select zero V_TOTAL_MIN/MAX on seamless boot

Lance Yang (2):
      mm/ksm: fix userfaultfd protection during merge and unmerge
      khugepaged: fix readahead lock inversion in collapse_file()

Laveesh Bansal (1):
      block: only serialize elevator switches of the same queue

Lee Jones (1):
      ASoC: SOF: Intel: hda-sdw-bpt: Stop active DMA before closing BPT streams

Leo Liu (1):
      drm/amdgpu: cancel idle work in hw_init failure paths for vcn/uvd/vce/jpeg

Leo Yan (1):
      Revert "perf/aux: Allocate non-contiguous AUX pages by default"

Leon Romanovsky (1):
      dma-buf: Restore the scatterlist entry count before freeing

Li RongQing (1):
      virtio_ring: reset IN_ORDER state in virtqueue_init()

Li Zhe (2):
      mm/hugetlb: fix mremap move length truncation
      mm/hugetlb: fix mremap deadlock when PMD sharing is possible

Linfeng Sun (8):
      vdpa_sim: serialize IOTLB updates with dataplane access
      vdpa: invalidate DMA mappings before releasing memory
      vhost: fix dirty logging for in-order used ring entries
      vhost: reject invalid IOTLB update permissions
      vhost-scsi: validate event queue descriptor direction
      vhost-scsi: reject delayed virtqueue setup
      vhost: reject backend enable without a kick file
      vhost-vdpa: initialize state before publishing cdev

Linus Torvalds (2):
      vfs: fix take_dentry_name_snapshot() semantics
      Linux 7.4-rc2

Liu Changjie (1):
      can: peak_usb: pcan_usb_fd_decode_buf(): accept short uCAN
end-of-list records

Lorenzo Bianconi (9):
      net: stmmac: drop split frames on AF_XDP zero-copy RX
      net: stmmac: drop multi-buffer frames in XDP mode
      net: stmmac: copy XDP metadata in AF_XDP zero-copy RX
      net: stmmac: fix VLAN tag stripping on short and non-linear RX frames
      net: stmmac: fix XDP RX buffer DMA sync length
      net: stmmac: initialize est_lock at probe time
      net: stmmac: pass the desired EST enable state to est_configure()
      net: stmmac: re-apply taprio offload in __stmmac_open() and
stmmac_resume()
      net: stmmac: set XDP metadata length on the page_pool RX path

Lorenzo Stoakes (ARM) (5):
      mm/vma: fix expansion of VMA_MIXEDMAP_BIT VMAs
      mm: do not unintentionally overwrite atomic VMA flags
      mm/vma: avoid losing atomic VMA flags when setting sticky VMA flags
      mm/vma: update VMA iterator state on error in new VMA merge
      fs/proc/task_mmu: fix missed VMAs when reading /proc/PID/maps and friends

Lu Yao (1):
      drm/i915/gem: Reset err for each fence entry

Lucas Tanure (2):
      drm/vc4: hdmi: always cancel the scrambling work synchronously
      drm/vc4: hdmi: enable scrambling before the TMDS clock starts

Luiz Augusto von Dentz (4):
      Bluetooth: hci_sync: Fix invalid Supervision_Timeout in LE Set
Default Rate
      Bluetooth: hci_core: Convert hci_conn flags to a bitmap
      Bluetooth: L2CAP: Hold incoming data until encryption key size is known
      Bluetooth: hci_sync: Update the CIS host feature when enabling LE

Maoxia (1):
      virtio_pci: add missing newline to the pmcsr error message

Marco Giunta (3):
      ALSA: hda: aw88399: use auto-cleanup for ACPI subsystem ID string
      ALSA: hda: aw88399: add missing MODULE_AUTHOR to I2C driver
      ASoC: aw88399: move library exports to SND_SOC_AW88399_LIB namespace

Marco Ziliani (1):
      ata: libata-pmp: disable the SEMB port on Marvell 88SM9705

Mario Limonciello (1):
      drm/amd/pm: track BACO state in the SMU v11 ArmD3 sequence

Mario Limonciello (AMD) (1):
      iommu/amd: Enable PerfOpt automatically for integrated GPUs

Masafumi Suzuki (1):
      sctp: account for chunk padding in sctp_init_cause()

Matheus Alves de Almeida (2):
      fat: preallocate space before expanding in fat_cont_expand()
      fat: hold truncate_lock in fat_write_failed()

Matthew Schwartz (1):
      drm/amd/display: Keep the nominal vtotal while VRR is inactive

Matthew Whitehead (1):
      scsi: aha1542: Remove unneeded scsi_dma_unmap() call

Matthias Goergens (4):
      udf: don't let the extent type hide an exhausted free-space table extent
      udf: check the unallocated space table when it is loaded
      udf: fix preallocation discarding before an empty allocation extent
      udf: don't use eloc after the end of the unallocated space table

Matus Skvarla (1):
      net/9p: add vsock transport

Maxime Chevallier (1):
      net: Use a dedicated flag to track disabled napi instances

Maíra Canal (3):
      drm/vc4: Publish the output fence outside of job_lock
      drm/vc4: Drop the BO reservations outside of job_lock
      drm/v3d: Widen cache_clean_lock over the whole L2TCACTL sequence

Melissa Wen (1):
      drm/amd/display: Signal PQ EOTF in FreeSync infopacket for DP HDR

Michael Bommarito (1):
      9p/trans_virtio: reject mount tags longer than NAME_MAX at probe

Michael Grzeschik (6):
      net/9p/usbg: also disable endpoints on p9_usbg_close
      net/9p/usbg: set client to Disconnected on usb9pfs_disable
      net/9p/usbg: always reset completion when disconnecting
      net/9p/usbg: call disable_usb9pfs() from usb9pfs_disable()
      net/9p/usbg: fix out_req buffer leak in disable_usb9pfs
      net/9p/usbg: remove bogus context initialization in alloc_requests

Michael McAllister (1):
      Bluetooth: qca: Fix the WCN3950 NVM baud rate offset

Michal Wilczynski (1):
      drm/imagination: Align rogue_fwif_hwrtdata to 64 bytes

Michał Kopeć (2):
      firmware: coreboot: Don't skip CBMEM entries outside of known memory
      ALSA: hda/core: Stop capability walk on empty capability header

Miguel Ojeda (1):
      rust: cpufreq: fix `undocumented_unsafe_blocks` in `PolicyCpu::from_cpu()`

Mike Rapoport (Microsoft) (2):
      mm/cma: accept memory of multi-range CMA areas
      mm/cma: accept memory of CMA areas reserved at a fixed address

Mikhail Gavrilov (1):
      drm/amd/display: set allow_freesync before validating a new stream

Milan Milicevic (2):
      drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for navi10_ih
      drm/amdgpu: publish IH enabled before PSP programs IH_RB_CNTL

Mingbing Zhai (1):
      virtio_balloon: initialize wakeup_lock before virtqueues are set up

Misha Nasledov (1):
      drm/amd/display: Drop clock requirements on DCN32 when no
displays are active

Mitul Golani (1):
      drm/i915/display: Allow port sync on PTL

Mohamed Yassine Jebabli (1):
      ALSA: hda/tas2781: Only accept CRC-less V1 data if all entries are valid

Mohit Sharma (1):
      ASoC: qcom: q6apm: Guard callbacks until probe data is ready

Mukul Joshi (1):
      drm/amdgpu: only tear down an active UALink accelerator

Munique Feitoza (1):
      drm/nouveau: Fix CE channel creation on pre-Kepler GPUs

Myeonghun Pak (1):
      hwmon: (sht15) Stop deferred work before releasing its resources

Naman Jain (1):
      x86/init: Initialize wall clock in get_rtc_noop()

Namjae Jeon (1):
      ntfs: don't allow resident values to overlap the attribute header

Nathan Chancellor (2):
      ext2: Make sbi an proper alias for EXT2_SB(sb) in ext2_fill_super()
      lib/base64: silence clang-24 -Wconstant-conversion with diag pragmas

Naushir Patuck (1):
      dt-bindings: pwm: Add Raspberry Pi RP1 PWM controller

Nguyen Dinh Phi (1):
      vsock: reject negative tv_usec in SO_VM_SOCKETS_CONNECT_TIMEOUT

Nguyen Ngoc Thang (1):
      net: phy: don't require RTNL to detach a PHY from an unregistered netdev

Nguyen Thanh Nhat (1):
      ALSA: hda/realtek: Add quirk for Acer Predator PHN16-71

Nickolai Zeldovich (2):
      panic: zero the dynamically allocated taint buffer
      sched/deadline: Fix this_bw on class change of a dying task

Niklas Cassel (10):
      ata: libata-eh: Retry non-NCQ commands when their sense data asks for it
      null_blk: fix opening closed zones at the active zone limit
      null_blk: don't finish zones to set them read-only or offline
      null_blk: clean up setting zones read-only or offline
      ata: libata-scsi: fix MODE SELECT handling of data after the mode page
      ata: libata-scsi: do not accept subpage code FFh in MODE SELECT
      ata: libata-scsi: reject MODE SELECT mode pages with a wrong SPF bit
      ata: libata-scsi: fix MODE SELECT field pointer for unsupported subpages
      ata: libata-scsi: fix MODE SELECT field pointer for block
descriptor length
      ata: libata-scsi: pass the whole mode page to the MODE SELECT handlers

Nilay Shroff (1):
      nvmet: cache passthru reference in __nvmet_req_complete()

Oliver Hartkopp (6):
      can: replace ARPHRD_CAN type checks with can_get_ml_priv()
      can: isotp: check the return values of can_rx_register() in isotp_bind()
      can: protect the receive lists with a per-device lock
      can: raw, isotp: copy socket options outside of lock_sock()
      can: proc: skip stats calculation after reset in can_stat_update()
      can: proc: remove pointers from CAN specific proc output

Omokefe Emmanuel Onanaroghene (1):
      9p: fix kernel-doc warning for enum p9_session_flags

Orkun Emin Sarı (1):
      io_uring: only wait for in-flight requests if the closing task
uses the ring

Pavel Begunkov (1):
      io_uring: add feature flag for dma-buf support

Pedro Falcato (1):
      ext2: take invalidate_lock in ext2_write_failed()

Peter Hunt (1):
      net: wwan: mhi_wwan_ctrl: send a DTR drop before it can be coalesced

Peter Zijlstra (2):
      locking/osq: Switch osq_wait_next()/atomic_cmpxchg() ordering
      locking/osq: Fix unlink queue corruption

Petr Mladek (1):
      MAINTAINERS: Add new "printk" mailing list for PRINTK, PRINTK
INDEXING, and VSPRINTF

Prasad Koya (1):
      macvlan: fix allmulti reference counting in passthru mode

Prike Liang (7):
      drm/amdgpu/mes: skip unmap queue notification during GPU reset
      drm/amdgpu/uvd: don't allocate or lock BOs in the direct IB test
      drm/amdgpu/userq: wait for GPU reset before mapping or unmapping queues
      drm/amdgpu: finish GPU recovery callbacks before restarting schedulers
      drm/amdgpu: stop the schedulers before preparing the GPU reset
      drm/amdgpu/vce: don't allocate a scheduler fence in the direct IB test
      drm/amdgpu: stop GPU recovery wait for the JPEG/VCN idle work

Puranjay Mohan (1):
      bpf: Drop percpu_counter from the htab element count

Qianghua Wang (2):
      ASoC: Intel: soc-acpi: use dummy topology for SN624x
      ASoC: codecs: sn624x-sdca: limit DMIC capture to 2 channels

Qihang (2):
      xfrm: interface: validate the IP header on xmit
      cipso: fix optlen corruption in cipso_v4_delopt()

Qiliang Yuan (3):
      nvmet: drop the extra RCU grace period in nvmet_ns_disable()
      srcu: Add list_splice_init_srcu()
      nvme: wait for SRCU readers before splicing the namespace list

Qingfang Deng (1):
      tcp: initialize send sequence numbers before deferring TFO

Qu Wenruo (4):
      btrfs: always remove quota_root from dirty_cowonly_roots
      btrfs: cleanup qgroup swapped blocks at root release
      btrfs: cleanup dirty_cowonly_roots during btrfs_free_fs_roots()
      btrfs: fix the fsverity callback where unexpected range is verified

Rafael Medina (1):
      ALSA: hda/ca0132: Restore AE-5 audio registers after LED strip send

Ravi Bangoria (3):
      perf/amd/ibs: Reset CPU0 IBS state on syscore resume
      perf/amd/ibs: Fix kernel address leak via REGS_USER and REGS_INTR
      perf/amd/ibs: Simplify event state handling with IBS_CAPS_DIS

Ravi Singh (1):
      xfs: mark i_mode=0 and shut down on attr fork inactivation failure

Ray Zhang (1):
      net: count last skb of each sk_backlog pass in __release_sock()

Razvan Dinculescu (1):
      ALSA: hda/hdmi: Don't share an assigned converter on NVIDIA codecs

Reid Downing (1):
      xfs: fix wrong compat fields in xfs_ioctl32_bstat_copyin()

Reinette Chatre (1):
      MAINTAINERS: Add Ben Horgan as fs/resctrl reviewer

Richard Fitzgerald (5):
      firmware: cs_dsp: Fix memory leak on cs_dsp_power_up() error path
      ASoC: wm_adsp: Prevent negative string length in wm_adsp_control_add()
      ALSA: hda: cs35l56: Fix mixed cleanup and goto in cs35l56_hda_fw_load()
      ALSA: doc: cs35l56: Update calibration write failure message info
      ALSA: hda: cs35l56: Stop cs_dsp before calling cs_dsp_power_down()

Ridge Lomont (1):
      x86/kcfi: Don't emit KCFI_REFERENCE() in modules

Rik van Riel (1):
      mm/cma: don't release CMA pages still in use

Riley (1):
      ALSA: usb-audio: Add quirk for Yamaha ZG02

Ritesh Harjani (IBM) (1):
      mm/huge_memory: set the mmu_gather page size in zap_huge_pud()

Rodnei Cilto (1):
      ASoC: amd: yc: Add DMI quirk for Lenovo V15 AMN G6

Roman Demidov (1):
      drm/amd/display: Fix NULL deref in dcn401_update_clocks_update_dtb_dto

Roman Li (1):
      drm/amd/display: Reset DET of HUBPs without a plane before
outstanding updates

Rosen Penev (8):
      9p/xen: Use array for data rings
      spi: acpi: only look up the IRQ of confirmed SPI devices
      x86/csum: Relax the len and proto constraints in 32-bit csum_ipv6_magic()
      drm/nouveau/fifo: map Kepler video engine contexts non-privileged
      drm/nouveau/nvkm: clear use.enabled when subdev init fails
      MIPS: Avoid dead code/data elimination when using recordmcount
      MIPS: boot: compressed: place .rodata.* and discard .MIPS.abiflags
      MIPS: boot: compressed: fix the vmlinuz link with ld.lld

Runyu Xiao (1):
      can: proc: reset pkg_stats atomics individually

SJ Park (3):
      mm/damon/sysfs-schemes: hold damon_sysfs_lock in target_metric_store()
      mm/damon/core: move static variable last_nr_regions to damon_ctx
      mm/damon/core: move static variable rotation to damon_ctx

Sabrina Dubroca (1):
      xfrm: espintcp: reorder operations within espintcp_init_sk

Sahil Chandna (1):
      net: mana: Add support to process throttled EQEs

Salvatore Dipietro (1):
      mm/page_alloc: avoid direct reclaim and compaction for costly
__GFP_NORETRY allocations

Samarth Narang (1):
      mm/ksm: keep soft-dirty when merging a page

Samiullah Khawaja (1):
      mm/gup: check folio->mapping under folio lock in memfd_pin_folios()

Sasha Levin (7):
      ALSA: memalloc: Free the new pages when WC DMA mapping fails
      ALSA: hda/core: Fix double free on stream page allocation failure
      rust: bindings: derive Zeroable for bindgen's opaque array wrappers
      selftests/configfs: fix the build on 32-bit architectures
      selftests: ublk: fix the build and file offsets on 32-bit
      selftests/io_uring: cast optval through uintptr_t in mini_liburing.h
      nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for KIOXIA XG10d

Sean Christopherson (7):
      KVM: nSVM: Check validity of vmcs01 save area copied from SMRAM on RSM
      KVM: x86/mmu: Conditionally resched when retrying gPTE walk on
A/D update failure
      KVM: x86: Conditionally resched when restarting REP string emulation
      KVM: nVMX: Process each host MSR entry at most once when
unwinding failed VM-Entry
      KVM: x86/mmu: Cap number of parent PTEs per SP at 1000 (the
arbitrary rmap limit)
      KVM: x86: Unconditionally reset MMU context when emulating INIT
      KVM: x86: Flush guest TLB when emulating a RESET to strictly
honor the spec

Sean Rhodes (1):
      firmware: coreboot: Fix CFR error-pointer handling warning

Sergii Ushakov (2):
      virtio-blk: clamp max_segments to virtqueue ring size
      virtio-blk: clamp max_segments to virtqueue ring size

Shakeel Butt (2):
      kernfs: avoid READ_ONCE() on a kgid_t in kernfs_new_node()
      io_uring/sqpoll: do the return-to-userspace work in the SQPOLL thread

Shang En Sim (2):
      io_uring/cancel: count all requests that a CANCEL_ALL cancels
      io_uring/poll: cancel all matching requests in one pass

Shao Mingyin (8):
      scsi: target: tcmu: Fix divide-by-zero in data_pages_per_blk store
      virtio-blk: Fix zone append sector reporting in batched completion
      zloop: fix the error code in the blk_mq_alloc_disk message
      zloop: reject mismatched conventional zone files on restore
      nvmet: take subsys->lock when forcing reconnects for tbkas
      nvmet: bound the traddr and trsvcid configfs writes
      nvmet: drop the redundant auth check in nvmet_parse_io_cmd()
      ata: libata-scsi: set the field pointer when rejecting CDL

Shivam Madlani (1):
      ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP OmniBook 7

Shuai Liu (1):
      io_uring/sqpoll: don't set IO_SQ_THREAD_SHOULD_STOP on thread exit

Shubham Antil (2):
      xfrm: zero-initialise km_event in the replay-notify path
      vhost-scsi: zero misaligned I/O bounce pages

Sinan Turunc (3):
      ALSA: line6: Reject capture buffers smaller than two packets
      ALSA: usx2y: Require a buffer of two URBs
      ALSA: usx2y: Guard the playback copy

Sreeraj S Kurup (2):
      nvmet: use appropriate types for authentication payload lengths
      ALSA: control: Clear user-provided numid before adding a control

Stefan Binding (2):
      ALSA: hda: cs35l41: Add common wait_for_boot api and reset_and_boot api
      ASoC: cs35l41: Use common wait_for_boot and reset_and_boot apis

Stefano Garzarella (1):
      9p: fix privport option setting wrong RDMA field

Stefano Radaelli (1):
      ASoC: wm8904: Enable FLL when switching an active SYSCLK to FLL

Stjepan Poljak (1):
      ALSA: usb-audio: don't resubmit MIDI URBs at once on -EPIPE

Suraj Kandpal (1):
      drm/i915/display: Limit NVL TRANS_VTOTAL.Vtotal skip to A-step

Sven Eckelmann (11):
      batman-adv: tpmeter: fix u32 truncation of reported bytes
      batman-adv: dat: initialize orig_node of unfilled candidate slots
      batman-adv: fix skb leak when hard_iface is being released
      batman-adv: stop originator purge worker before freeing TT
      batman-adv: tt: only transmit local ROAM flag together with DEL
      batman-adv: tt: clear ROAM flag when re-adding a pending local client
      batman-adv: tt: send ROAM_ADV on each roamed back client
      batman-adv: tt: ignore ROAM flag of received ADD changes
      batman-adv: tt: only update flags for TT events
      batman-adv: tt: don't drop local events queued during TVLV update
      batman-adv: tt: limit local table to single TVLV response size

T.J. Mercier (1):
      mm: memcontrol: fix NULL pointer deref and UAF from
high_work_func() on dying memcg

Takashi Iwai (1):
      ALSA: pcm: Prevent O_APPEND open on OSS streams

Takashi Sakamoto (2):
      firewire: ohci: avoid potential deadlock when queueing AT local requests
      ALSA: firewire: fix inverted streaming speed between tx and rx streams

Tal Zussman (2):
      vhost-vdpa: fix pinned page leak in vhost_vdpa_pa_map() error path
      vhost-vdpa: unpin mappings by range

Tang Bin (1):
      ASoC: codecs: lpass-rx-macro: fix PM ref leak in swclk_gate_enable

Thomas Fourier (2):
      btrfs: zoned: fix double free of bitmaps on clone failure
      net: ipa: Fix double free of the interrupt structure on config error

Thomas Gleixner (1):
      x86/entry: Fix ptrace regression

Thorsten Blum (3):
      hwrng: virtio - prevent use-after-free after a failed restore
      ALSA: usx2y: Use prepare_inurb() in usb_stream_start()
      x86/boot: Fix off-by-one error in sme_clear_pgd()

Timur Stukan (2):
      bonding: 3ad: don't set BOND_LINK_FAIL on a slave that is not up
      bonding: fix missing down path on speed/duplex failure after FAIL->UP

Tobias Wilken (1):
      Bluetooth: MGMT: Return RFKILLED for Set Powered on a blocked controller

Toke Høiland-Jørgensen (1):
      wifi: mac80211: reinstate IEEE80211_TX_CTL_AMPDU flag in
ieee80211_tx_prep_agg()

Tung Nguyen (1):
      tipc: reject attaching bearer of different media to the same
occupied device

Tvrtko Ursulin (2):
      drm/sched: Fix out of bounds entity priority check
      drm/sched: Adjust run-queue when changing priority at runtime

Valentin Kindschi (2):
      Bluetooth: hci_sync: re-enable legacy advertising on resume
      Bluetooth: hci_sync: pause advertising for the scan address update

Vas Zayarskiy (1):
      hwmon: (aquacomputer_d5next) Avoid truncating scaled sensor readings

Vidya Srinivas (2):
      drm/i915/display: Single scaler per pipe on WCL
      drm/i915/display: Disable pipe joiner on WCL

Ville Syrjälä (1):
      drm/i915/vrr: Fix intel_vrr_dcb_vmin_vblank_start()

Vincent Cloutier (1):
      ALSA: pcm: Allow HW_REFINE queries with mapped buffers

Vincent Jardin (1):
      hwmon: (pmbus/core) Register the thermal sensors with a 0-based index

Vincent Mailhol (1):
      can: dev: can_dropped_invalid_skb: drop CAN XL frames on non-CAN
XL devices

Vincent YUE (1):
      scsi: mpt3sas: Register devices during SANITIZE

Vlad Poenaru (1):
      bnxt_en: Don't keep MSI-X vectors added before FW reserves them

Vladimir Zapolskiy (2):
      drm/panel: visionox-r66451: Send the brightness value MSB first
      drm/panel: visionox-r66451: Wait longer after the panel reset

Vlastimil Babka (SUSE) (2):
      MAINTAINERS: add Johannes as the page allocator co-maintainer
      MAINTAINERS: move SLAB ALLOCATOR under MEMORY MANAGEMENT

Wang Wensheng (1):
      printk_ringbuffer: Fix space_used() when blk_lpos->next overflows

Wayne Lin (1):
      drm/amd/display: add missing CRC engine 1 registers

Wei Lixiang (1):
      ASoC: amd: yc: drop duplicated DMI quirk entries

Wei Wang (1):
      arm64: suspend: Save and restore TPIDR2_EL0 across CPU suspend

Wei-Shuo Chen (1):
      virtio: use consistent virtqueue terminology

Weibin Liu (1):
      spi: amd: validate FIFO usage before executing message

Weigang He (1):
      wifi: mac80211: reload TDLS header pointer after skb_linearize()

Wentao Liang (1):
      ALSA: caiaq: free the EP4 URB when input setup fails

Werner Sembach (1):
      drm/i915/display: Add quirk to force backlight type on some TUXEDO devices

Wilfred Mallawa (1):
      xfs: fix unwind handling during xfs_mount_sysfs_init()

Xia Yan (3):
      veth: keep carrier off when resizing channels with a down peer
      selftests: net: check veth carrier after changing channel counts
      ipv6: fix device binding after failed datagram connect

Xiang Mei (1):
      vdpa: fix double free of the reply skb in
vdpa_nl_cmd_dev_config_get_doit()

Xu Yunxiang (2):
      bpf: Propagate scalar precision through stack arguments
      selftests/bpf: Exercise stack argument precision on state reuse

Yafang Shao (1):
      mm/migrate: snapshot the source nid before the misplaced migration

Yehyeong Lee (1):
      9p/xen: validate the response size from the backend

Yifan Zhang (3):
      Bluetooth: validate retained LE Create CIS command length
      Bluetooth: validate retained LE Set CIG Parameters command length
      ksmbd: require NUL-terminated EA names

Yifei Gao (1):
      9p/xen: fix refcount leak in p9_xen_response() on wrong tag

Yili Zhang (1):
      dma-buf: Fix IOVA offset when linking phys vecs to sgt

Yilin Zhang (1):
      mptcp: do not use Fast Open on MP_JOIN subflows

Yingjie Wang (4):
      scsi: bsg: Report synchronous data copyback failures
      scsi: bsg: Report io_uring data copyback failures
      ipv6: reject wrapped temporary address preferred lifetimes
      nvmet: reject keep-alive timeouts that would overflow

Yitang Yang (1):
      ublk: add missing DEL_DEV_ASYNC to unprivileged permission check

Yizhou Zhao (6):
      9p: use fc->net_ns for network namespace in RDMA and socket transports
      net/9p/usbg: fix descriptor cleanup use-after-free
      net/9p/usbg: fix prefix matching in device lookup
      net/9p/usbg: Fix use-after-free on usb9pfs_clear_tx
      9p/xen: drain response work after unbinding IRQ
      net/9p/usbg: Fix use-after-free in disable_usb9pfs()

Yonghong Song (1):
      selftests/bpf: Fix callback recursion test with noipa global func

YouYou Yu (1):
      quota: initialize dquot cache before mounting rootfs

Yu Zhang (3):
      scsi: target: Fix demo-mode dynamic ACL dev-entry UAF vs LUN teardown
      ptp: fix use-after-free in extts_fifo_show() reading tsevqs unlocked
      vhost-vdpa: drop the parent's vq callback before the call fd is released

YuanZhe Liu (6):
      ALSA: us122l: Add missing NULL check in usb_stream_hwdep_mmap()
      ALSA: us122l: Fix NULL dereference at hwdep open and release
      ALSA: usx2y: Initialize idle URBs before submitting streams
      ALSA: hwdep: Serialize DSP load requests
      ALSA: bcd2000: Fix use-after-free of MIDI URBs on file close
      ALSA: usx2y: Refuse a retried DSP load after a failure

Yuanfu Xie (3):
      9p: don't decrement a server-owned zero nlink
      9p: fall back to the normal open path for non-regular files
      9p: do not store the create fid on special files

Yuanhe Shu (1):
      scsi: target: Verify the iSCSI ISID is null-terminated

Yuansheng Yang (1):
      io_uring/rsrc: hold uring_lock across index-alloc put_user

Yuho Choi (3):
      virtio_blk: Reset device on probe error paths after DRIVER_OK
      iommu/virtio: Reset device before deleting virtqueues on probe failure
      vdpa/snet: Don't discard the DPU error in snet_send_ctrl_msg()

Yunye Zhao (1):
      virtio_blk: freeze the virtqueue layout at probe time

Yuqiang Sun (3):
      bpf: lwt: Free the skb when bpf_xmit() fails to expand the headroom
      nvme: Do not drop the cdev reference twice when cdev_device_add() fails
      ALSA: usb-audio: qcom: Check the return value of qmi_handle_init()

Zac Lanzon (1):
      hwmon: (asus_rog_ryujin) Fix pump control source on the Ryujin III

Zack Rusin (1):
      x86/vmware: Fix i386 high-bandwidth hypercall arguments

Zenghui Yu (Huawei) (3):
      mm/page_alloc: mark pages freed by __free_pages_core() as not tagged
      selftests/mm: fix khugepaged_race build with older glibc
      virtio_pci: don't take the MSI mutex under cpu_hotplug_lock

Zhan Xusheng (1):
      ntfs: don't allow compression on volumes with clusters larger than 4K

Zhang Heng (4):
      ALSA: hda/realtek: Fix DAC binding for Lenovo Legion Pro 7 16ARX8H
      ALSA: hda/realtek: Fix DAC binding for Legion Pro 7 16ARX8H variant
      ALSA: hda/realtek: Fix pop noise on ASUS PRIME B650M-K
      ALSA: hda: cs35l41: Add support for HP OmniBook 7 Laptop 16-ay0xxx

Zhang Yi (1):
      ASoC: codecs: ES8389: Fix the issue of hpf_freq keep increasing

Zhao Gongyi (2):
      arm64: mm: validate /dev/mem mmap ranges without overflow
      ata: libata-scsi: reject data-in commands with a data-out buffer

Zhao Zhang (1):
      9p: fix caches_show() out-of-bounds write

Zhe Liu (1):
      blk-iocost: account flush sequence latency only once

Zhi-Jun You (4):
      net: ethernet: mtk_wed: skip ring reset in wdma_tx_ring_setup for WED v3
      net: ethernet: mtk_wed: fix reset condition for rx wdma
      net: ethernet: mtk_wed: free up rings during detach
      net: ethernet: mtk_wed: setup WDMA_RING_TX(0) for non-DBDC MT7986

Zhou Qiuyue (1):
      ipv6: raw: fix use-after-free in rawv6_send_hdrinc()

Zhuangzhuang Wang (1):
      locking/lockdep: Fix inverted "on"/"last" CPU label in
lockdep_print_held_locks()

Zijing Yin (1):
      wifi: cfg80211: fix out-of-bounds read in valid_rule()

Zizhi Wo (1):
      block: partitions: reject GPT entries with starting_lba > ending_lba

ahmad baghereslami (1):
      ALSA: hda/conexant: Add mute LED quirk for HP ZBook 17 G3

chenglong.ma (1):
      vduse: fix VA/PA confusion in the coherent page fault path

guolingxing (3):
      btrfs: sysfs: restore NOFS context on early return in
btrfs_sysfs_add_block_group_type()
      btrfs: verity: propagate orphan insertion errors when enabling verity
      btrfs: prevent deleting the wrong subvolume by ID

luyuantao (1):
      drm/panic: Fix the loop that causes kmsg to not display correctly

renpanpan (2):
      ALSA: usb-audio: Fix card name for CVT Touch Device (1ff7:0f33)
      drm/amdgpu: Only enable HDMI audio if display supports it

sungbyeongchan (1):
      virtio_ring: use shadow flags when detaching split descriptors

yinguobing (1):
      ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 (ALC256, 19e5:320d)

zhang jiao (1):
      virtio_ring: Initialize id field in packed indirect descriptors