Linux 7.2-rc5

[Linus Torvalds]

It's Sunday afternoon, and once more we have quite a massive -rc5.

The same thing happened in 7.1, so part of it is just the "new
normal". But I think this time the bigger part of it is that the
networking tree ended up having some pent up work from the previous
week due to conference distractions. So over a third of the patch is
networking, although the bulk of that is obviously on the driver side.

There are all the usual other drivers in here too, although for a
change there are more USB changes than GPU drivers. So that's
something.  But there's a little bit of everything on the driver side
(sound, tty, block, firewire - you get the idea).

And then there's everything else: tooling (selftest and perf),
fielsystems (smb, btrfs), rust and arch fixes, documentation...

So it's a bit too big for my liking, but nothing in there strikes me
as particularly strange or scary.

                  Linus

---

Adrian Ng Ho Yin (2):
      firmware: stratix10-svc: handle NO_RESPONSE in async poll
      firmware: stratix10-svc: fix teardown order in remove to prevent race

Aldo Ariel Panzardo (3):
      rds: drop incoming messages that cross network namespace boundaries
      net/sched: serialize qdisc_rtab_list against concurrent get/put
      net: qrtr: restrict socket creation to the initial network namespace

Aleksandr Loktionov (1):
      ice: reject out-of-range ptype in ice_parser_profile_init

Alexander Usyskin (1):
      mei: bus: access mei_device under device_lock on cleanup

Alexandre Courbot (1):
      rust: allow `clippy::unwrap_or_default` globally

Alexei Lazar (2):
      net/mlx5e: Report zero bandwidth for non-ETS traffic classes
      net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation

Alexis Czezar Torreno (1):
      hwmon: (pmbus/max34440) block unsupported VIN and IIN limit registers

Alice Mikityanska (1):
      mailmap: update entry for Alice Mikityanska

Alice Ryhl (2):
      rust: device: avoid trailing ; in printing macros
      rust_binder: only print failure if error has source

Amery Hung (2):
      bpf: Reject passing scalar NULL to nonnull arg of a global subprog
      selftests/bpf: Test passing scalar NULL to nonnull global subprog

Amir Goldstein (3):
      fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
      selftests/fuse: add ACL_DONT_CACHE regression test
      ovl: check access to copy_file_range source with src mounter creds

Andrei Kuchynski (2):
      usb: typec: ucsi: Fix race condition and ordering in port unregistration
      usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path

Andrew Pope (1):
      wifi: mac80211: recalculate TIM when a station enters power save

Aniket Negi (1):
      net: airoha: fix MIB stats collection to be lossless

Antoine Tenart (2):
      geneve: fix hint header definition wrt endianness
      geneve: ensure the skb is writable before fixing its headers

Antonio Ignacio Campos Ruiz (1):
      ASoC: amd: yc: Add DMI quirk for MSI Vector A16 HX A8WIG

Anup Patel (1):
      RISC-V: KVM: Zicbo[m|z|p] block sizes should be always present in ONE_REG

Arnaldo Carvalho de Melo (10):
      perf bench bpf: Add missing .gitignore file
      tools headers UAPI: Sync linux/const.h with the kernel sources
      tools headers UAPI: Sync linux/rtnetlink.h with the kernel sources
      tools headers: Sync linux/gfp_types.h with the kernel sources
      tools headers x86 cpufeatures: Sync with the kernel sources
      tools arch x86: Sync the msr-index.h copy with the kernel sources
      tools headers: Sync UAPI drm/drm.h with kernel sources
      perf beauty: Update copy of linux/socket.h with the kernel sources
      tools headers: Sync UAPI linux/fs.h with the kernel sources
      tools headers: Sync KVM headers with the kernel sources

Arnd Bergmann (3):
      fat: avoid stack overflow warning
      usb: udc: pxa: fix error handling
      wifi: mt76: fix airoha_npu dependency tracking

Arvind Yadav (1):
      drm/xe/madvise: Skip invalidation for purgeable state updates

Asim Viladi Oglu Manizada (1):
      pppoe: reload header pointer after dev_hard_header()

Avraham Stern (2):
      wifi: iwlwifi: mvm: verify scan id reported by firmware
      wifi: iwlwifi: mvm: copy the correct TK length for ranging

Ben Horgan (1):
      arm_mpam: Fix software reset values of MPAMCFG_PRI

Ben Hutchings (1):
      uio_hv_generic: Bind to FCopy device by default

Benjamin Berg (1):
      wifi: mac80211: copy aggregation information

Breno Leitao (2):
      mm/kmemleak: fix checksum computation for per-cpu objects
      phonet: pep: fix use-after-free in pep_get_sb()

Bryam Vargas (2):
      net/iucv: fix use-after-free of a severed iucv_path
      ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()

Carl Johnson (1):
      smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without
a symlink target

Cen Zhang (1):
      usb: gadget: f_tcm: synchronize delayed set_alt with teardown

Cen Zhang (Microsoft) (5):
      rhashtable: clear stale iter->p on table restart
      sctp: validate stream count in sctp_process_strreset_inreq()
      tipc: fix u16 MTU truncation in media and bearer MTU validation
      rds: tcp: unregister sysctl before tearing down listen socket
      tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()

Chancel Liu (2):
      ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP
      ASoC: fsl: imx-card: Skip sysclk reset for active DAIs in shutdown

Charles Keepax (1):
      ASoC: Intel: sof_sdw: Add quirks for new Dell laptops

Chen Changcheng (1):
      fs/super: fix emergency thaw double-unlock of s_umount

Chen-Yu Tsai (1):
      ASoC: sun4i-codec: Set quirks.playback_only for H616 codec

Cheng Yongkang (1):
      wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming
firmware request

Chengfeng Ye (3):
      Bluetooth: hci_sync: Protect UUID list traversal
      Bluetooth: RFCOMM: Fix session UAF in set_termios
      bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()

Chenguang Zhao (4):
      net: txgbe: fix heap overflow when reading module EEPROM
      net: txgbe: fix FDIR filter leak on remove
      hinic: remove unused ethtool RSS user configuration buffers
      mptcp: decrement subflows counter on failed passive join

Chia-Lin Kao (AceLan) (4):
      usb: core: port: Deattach Type-C connector on component unbind
      usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware
      usb: typec: ucsi: Add duplicate detection to nvidia registration path
      usb: typec: ucsi: yoga_c630: Remove redundant duplicate altmode handling

Chris Chiu (1):
      ALSA: hda/realtek: Add inverted LED quirk for HP ZBook 8 G2a

Christian Brauner (7):
      binfmt_misc: set have_execfd only once the interpreter is opened
      exec: fix unsigned loop counter wrap in transfer_args_to_stack()
      binfmt_elf_fdpic: only honour the first PT_INTERP
      pidfs: preserve thread pidfds reopened by file handle
      selftests/pidfd: check PIDFD_THREAD survives open_by_handle_at()
      pidfs: add pidfs_dentry_open() helper
      super: fix emergency thaw deadlock on frozen block devices

Chukun Pan (1):
      USB: serial: option: add TDTECH MT5710-CN

Chuyi Zhou (2):
      smp: Avoid invalid per-CPU CSD lookup with CSD lock debug
      smp: Make CSD lock acquisition atomic for debug mode

Clark Wang (1):
      ptp: netc: explicitly clear TMR_OFF during initialization

Coia Prant (1):
      net: pcs: xpcs: fix SGMII state reading

Daan De Meyer (1):
      btrfs: fix GET_SUBVOL_INFO after compat refactor

Daehyeon Ko (1):
      tipc: clear sock->sk on the failed-insert path in tipc_sk_create()

Daniel Borkmann (2):
      bpf: Reject redirect helpers without a bpf_net_context
      selftests/bpf: Add test for redirect from qdisc qevent block

Daniel C. Ribeiro (1):
      ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless

Daniel Golle (1):
      regulator: mt6358: use regmap helper to read fixed LDO calibration

Daniel Hodges (1):
      wifi: ath6kl: fix use-after-free in aggr_reset_state()

Danielle Ratson (1):
      netlink: specs: rt-link: convert bridge port flag attributes to u8

Dave Chen (2):
      btrfs: only account delalloc bytes for regular file inodes in
btrfs_getattr()
      btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes accounting

Dave Penkler (1):
      MAINTAINERS: Add Greg Kroah-Hartman to GPIB

David Carlier (1):
      tracing: Fix use-after-free freeing trigger private data

David Howells (1):
      afs: Fix afs_edit_dir_remove() to get, not find, block 0

David Lee (2):
      net/packet: avoid fanout hook re-registration after unregister
      net/x25: fix use-after-free in x25_kill_by_neigh()

David Oberhollenzer (1):
      drm/panel: ilitek-ili9881c: do not fail probe if iovcc is absent

David Woodhouse (2):
      KVM: selftests: sev_smoke_test: Only run VM types the host offers
      KVM: selftests: sev_init2_tests: Derive SEV availability from KVM

Denis Benato (1):
      platform/x86: asus-wmi: temporarily revert to setting a charge limit

Dev Jain (1):
      arm64: make huge_ptep_get handled unaligned addresses

Devin Wittmayer (4):
      wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
      wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses
      wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
      wifi: mt76: restrict NPU/PPE active checks to MMIO devices

Diego Fernando Mancera Gomez (2):
      usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
      usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect

Dmitry Morgun (1):
      wifi: ath11k: fix potential buffer underflow in
ath11k_hal_rx_msdu_list_get()

Doruk Tan Ozturk (5):
      wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
      mctp: serial: handle zero-length frames to prevent rx buffer overflow
      mac802154: llsec: reject frames shorter than the authentication tag
      vxlan: require CAP_NET_ADMIN in the device netns for changelink
      geneve: require CAP_NET_ADMIN in the device netns for changelink

Douya Le (3):
      libceph: reject zero bucket types in crush_decode
      libceph: bound get_version reply decode to front len
      libceph: remove debugfs files before client teardown

Dylan.Wu (1):
      riscv: kvm: Skip TLB flush when G-stage PTE becomes valid with Svvptc

Eddie Phillips (1):
      gve: fix Rx queue stall on alloc failure

Edward Adam Davis (1):
      hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop

Elizabeth Figura (1):
      MAINTAINERS: Update wine-devel list address

Emil Tantilov (1):
      idpf: fix max_vport related crash on allocation error during init

Emmanuel Grumbach (30):
      wifi: iwlwifi: mvm: fix an off-by-1 boundary check
      wifi: iwlwifi: mld: fix an off-by-1 boundary check
      wifi: iwlwifi: mld: don't parse a notif before checking its length
      wifi: iwlwifi: mvm: fix the FCS truncation logic in d3
      wifi: iwlwifi: mld: validate reorder BAID
      wifi: iwlwifi: mvm: parse beacon notif per layout
      wifi: iwlwifi: mvm: validate MCC header before n_channels
      wifi: iwlwifi: mvm: validate sta_id in TLC notif
      wifi: iwlwifi: mvm: validate sta_id in BA window status notif
      wifi: iwlwifi: mvm: validate mac_link_id in session protect notif
      wifi: iwlwifi: mld: clear tzone on fail
      wifi: iwlwifi: mvm: fix sched scan IE sizing
      wifi: iwlwifi: pcie: null RX pointers after free
      wifi: iwlwifi: mvm: d3: validate D3 resume notification payloads
      wifi: iwlwifi: mld: validate txq_id in TX response handler
      wifi: iwlwifi: add support for additional channels in NVM_GET_INFO
      wifi: iwlwifi: mvm: validate TX_CMD response layout
      wifi: iwlwifi: fix pointer arithmetic in iwl_add_mcc_to_tas_block_list
      wifi: iwlwifi: validate payload length in iwl_pnvm_complete_fn
      wifi: iwlwifi: mvm: ptp: free response on success path
      wifi: iwlwifi: pcie: validate FW section counts in iwl_pcie_init_fw_sec
      wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
      wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
      wifi: iwlwifi: mvm: fix a possible underflow
      wifi: iwlwifi: adapt ND match notif sizing to fixed matches array
      wifi: iwlwifi: bound aligned TLV advance in FW parser
      wifi: iwlwifi: dbg-tlv: bound aligned TLV walk length
      wifi: iwlwifi: acpi: validate WGDS table revision index
      wifi: iwlwifi: uefi: bound PPAG revision bitmap shift
      wifi: iwlwifi: validate SEC_RT TLV minimum size

Enrico Zanda (1):
      vhost-net: fix TX stall when vhost owns virtio-net header

Eric Biggers (2):
      fscrypt: Add missing superblock check in find_or_insert_direct_key()
      fscrypt: Avoid dynamic allocation in fscrypt_get_devices()

Eric Dumazet (6):
      ppp: annotate concurrent dev->stats accesses
      net: hsr: fix memory leak on slave unregistration by removing synced VLANs
      ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup
      ppp: annotate data races in ppp_generic
      drop_monitor: fix size calculations for 64-bit attributes
      drop_monitor: perform u64_stats updates under IRQ-disabled section

Ethan Nelson-Moore (2):
      watchdog: s32g_wdt: remove incorrect options in watchdog_info struct
      selftests: ntsync: correct CONFIG_NTSYNC name

Eugene Shalygin (3):
      hwmon: (asus-ec-sensors) fix looping over banks while reading from EC
      hwmon: (asus-ec-sensors) fix EC read intervals
      hwmon: (asus-ec-sensors) add missed handle for ENOMEM

FUJITA Tomonori (1):
      rust: time: fix as_micros_ceil() to round correctly for negative Delta

Fan Wu (5):
      usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
      usb: gadget: f_midi: cancel pending IN work before freeing the midi object
      wifi: brcmfmac: make release_scratchbuffers idempotent
      wifi: brcmfmac: drain bus_reset work on device removal
      net: hip04: fix RX buffer leak on build_skb failure

Fangyu Yu (1):
      RISC-V: KVM: Avoid redundant page-table allocations in ioremap topup

Fenghua Yu (1):
      arm_mpam: Fix MPAMCFG_MBW_PBM register setting

Filipe Manana (3):
      btrfs: fix use-after-free on reloc root after error in
insert_dirty_subvol()
      btrfs: fix reloc root cleanup in merge_reloc_roots()
      btrfs: fix NULL pointer deref during assertion in
btrfs_backref_free_node()

Frank Sorenson (2):
      cifs: prevent readdir from changing file size due to stale
directory metadata
      cifs: fix cifsFileInfo leak on kmalloc failure in deferred close
drain paths

Fuad Tabba (1):
      tracing/remotes: Fix page_va[] access before counter update in
trace_remote_alloc_buffer()

Gal Pressman (1):
      net/mlx5: Fix MCIA register buffer overflow on 32 dword reads

Gaole Zhang (1):
      wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin

Geliang Tang (2):
      mptcp: pm: userspace: fix use-after-free in get_local_id
      selftests: mptcp: userspace_pm: fix undefined variable port

Genevieve Chan (1):
      firmware: stratix10-svc: fix FCS SMC call kernel-doc

George Guo (1):
      LoongArch: Fix address space mismatch in kexec command line lookup

Georgi Valkov (2):
      wifi: mwifiex: fix freeze for 60 seconds caused by request_firmware
      wifi: mwifiex: replace one-element arrays with flexible array members

Greg Ungerer (1):
      m68k: coldfire: fix breakage of missed IO access update

Gregor Herburger (1):
      drm/vc4: hvs/v3d: Fix null dereference in unbind

Griffin Kroah-Hartman (1):
      usb: core: sysfs: add lock to bos_descriptors_read()

Guanghui Feng (1):
      iommu/amd: Wait for completion instead of returning early in
iommu_completion_wait()

Guanghui Yang (1):
      btrfs: free mapping node on duplicate reloc root insert

Guangshuo Li (7):
      ALSA: hda: cs35l41: validate and free ACPI mute object
      arm_mpam: guard MBWU state before adding it to garbage
      usb: musb: omap2430: Do not put borrowed of_node in probe
      intel_th: fix MSC output device reference leak
      dpaa2-switch: put MAC endpoint device on disconnect
      dpaa2-eth: put MAC endpoint device on disconnect
      wifi: mt76: mt7925: guard link STA in decap offload

Guenter Roeck (4):
      hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
      hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop
      hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
      hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop

Guidong Han (1):
      eventpoll: pin files while checking reverse paths

HE WEI (ギカク) (1):
      wifi: mwifiex: bound uAP association event IEs to the event buffer

HanQuan (1):
      sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid

Haoran Jiang (1):
      LoongArch: Fix oops during single-step debugging

Hariprasad Kelam (1):
      octeontx2-pf: tc: fix egress ratelimiting

Harry Yoo (Oracle) (4):
      mm/slab: fix a memory leak due to bootstrapping sheaves twice
      mm/slab: decouple SLAB_NO_SHEAVES from SLAB_NO_OBJ_EXT
      lib/alloc_tag: introduce mem_alloc_profiling_permanently_disabled()
      mm/slab: prevent unbounded recursion in free path with new kmalloc type

Harshaka Narayana (1):
      vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

Helen Koike (1):
      tipc: fix infinite loop in __tipc_nl_compat_dumpit

Hidayath Khan (1):
      net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()

Huacai Chen (2):
      LoongArch: Increase TASK_STRUCT_OFFSET up to 2040 for 32BIT
      LoongArch: Fix build errors due to wrong instructions for 32BIT

Huang Wei (1):
      USB: storage: add NO_ATA_1X quirk for Longmai USB Key

Hugo Villeneuve (1):
      serial: sc16is7xx: implement gpio get_direction() callback

Huihui Huang (2):
      wifi: wilc1000: validate assoc response length before subtracting header
      wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()

Hyunwoo Kim (2):
      KVM: nVMX: Hide shadow VMCS right after VMCLEAR
      KVM: x86/mmu: Preserve nested TDP shadow page tables if they are
used as roots

Ian Abbott (1):
      comedi: comedi_parport: deal with premature interrupt

Ian Forbes (1):
      drm/vmwgfx: Validate vmw_surface_metadata::array_size

Ibrahim Hashimov (2):
      wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO
      mac802154: hold an interface reference across the scan worker

Icenowy Zheng (1):
      drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM

Ilia Gavrilov (1):
      rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled

Jackie Liu (2):
      liveupdate: fix GET_NAME ioctl argument validation
      tracing: Propagate errors from remote event bulk updates

Jakub Kicinski (1):
      MAINTAINERS: add nci tests to nfc

Jamal Hadi Salim (1):
      net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains

James Montgomery (1):
      ksmbd: defer destroy_previous_session() until after NTLM authentication

James Raphael Tiovalen (1):
      vxlan: mdb: Fix source list corruption on a failed replace

Jann Horn (1):
      proc: Fix broken error paths for namespace links

Jay Vadayath (1):
      smb: client: bound dirent name against end of SMB response in cifs_filldir

Jiangshan Yi (1):
      serial: 8250_mid: Fix NULL function pointer dereference on
DNV/ICX-D/SNR platforms

Jinchao Wang (1):
      usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback

Johan Hovold (5):
      USB: gadget: fsl-udc: fix device name leak on probe failure
      USB: gadget: snps-udc: fix device name leak on probe failure
      USB: gadget: fsl-udc: fix dev_printk() device
      USB: gadget: fsl-udc: drop misleading unbind sanity check
      USB: serial: keyspan_pda: fix data loss on receive throttling

Jose Ignacio Tornos Martinez (1):
      wifi: ath12k: fix NULL pointer dereference in rhash table destroy

José Expósito (1):
      drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem

Julian Braha (3):
      drm/panel: ilitek-ili9882t: fix unmet dependency for
DRM_PANEL_ILITEK_ILI9882T
      drm/panel: s6e3ha8: fix unmet dependency on DRM_DISPLAY_HELPER
      drm/panel: fix unmet dependency bug for DRM_PANEL_HIMAX_HX83121A

Jun Yang (1):
      sctp: don't free the ASCONF's own transport in DEL-IP processing

Justin Lai (1):
      rtase: Workaround for TX hang caused by hardware packet parsing

Kai Vehmanen (1):
      ALSA: hda: codecs: hdmi: disable keep-alive before audio format change

Kailang Yang (1):
      ALSA: hda/realtek - Add quirk for Dell Pro QC1255

Kalpan Jani (1):
      mptcp: fix stale skb->sk reference on subflow close

Kamal Wadhwa (1):
      regulator: core: clamp voltage constraints before applying apply_uV

Kanglong Wang (1):
      LoongArch: Move jump_label_init() before parse_early_param()

Kuniyuki Iwashima (3):
      soreuseport: Clear sk_reuseport_cb before failure in sk_clone().
      net: Call net_enable_timestamp() before failure in sk_clone().
      mpls: Set rt->rt_nhn just before returning from mpls_nh_build_multi().

Kyle Zeng (1):
      openvswitch: fix GSO userspace truncation underflow

Lance Yang (1):
      MAINTAINERS: add Usama as a THP reviewer

Leo Li (2):
      drm/amd/display: Fix flip-done timeouts on mode1 reset
      drm/amd/display: Fix missing DCE check in dm_gpureset_toggle_interrupts()

Leo Martins (1):
      btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps

Li Chen (1):
      pidfs: handle FS_IOC32_GETVERSION in compat ioctl

Li RongQing (2):
      iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
      net: ipv6: fix dif and sdif mismatch in raw6_icmp_error

LiangCheng Wang (1):
      wifi: brcmfmac: set F2 blocksize to 256 for BCM43752

Linmao Li (2):
      drm/vc4: Prevent shader BO mappings from becoming writable
      drm/vc4: Shut down BO cache timer before teardown

Linus Torvalds (1):
      Linux 7.2-rc5

Lorenzo Bianconi (5):
      wifi: mt76: connac: fix possible NULL-pointer deref in
mt76_connac_mcu_uni_bss_he_tlv()
      wifi: mt76: mt7925: fix possible NULL-pointer deref in
mt7925_mcu_bss_he_tlv()
      wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()
      wifi: mt76: mt7996: fix possible NULL-pointer deref in
mt7996_mcu_sta_bfer_eht()
      net: airoha: fix ETS channel derivation in airoha_tc_setup_qdisc_ets()

Lu Baolu (1):
      iommu/vt-d: Disallow SVA if page walk is not coherent

Luis Lang (1):
      net: stmmac: dwmac4: mask interrupts when stopping DMA in suspend

Maarten Lankhorst (1):
      Revert "drm/pagemap: Guard HPAGE_PMD_ORDER use with
CONFIG_ARCH_ENABLE_THP_MIGRATION"

Manikanta Pubbisetty (1):
      wifi: ath10k: fix skb leak on incomplete msdu during rx pop

Manivannan Sadhasivam (2):
      wifi: ath11k: Flush the posted write after writing to
PCIE_SOC_GLOBAL_RESET
      wifi: ath12k: Flush the posted write after writing to
PCIE_SOC_GLOBAL_RESET

Manjunath Patil (1):
      net/mlx5e: Use sender devcom for MPV master-up

Manuel Ebner (1):
      docs: watchdog: Fix brackets

Marcel Kłos (1):
      ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to
enable mute LEDs

Marcin Szycik (1):
      ice: fix LAG recipe to profile association

Marco Baffo (2):
      ovpn: fix use after free in unlock_ovpn()
      ovpn: use monotonic clock for peer keepalive timeouts

Marco Elver (1):
      slab: silence sparse warning with type-based partitioning

Mark Brown (2):
      ASoC: fs210x: Make cache write through again during resume
      arm64: mm: When logging data aborts only decode Xs when ISV=1

Markus Breitenberger (1):
      net: stmmac: intel: skip SerDes reconfig when rate is unchanged

Masami Hiramatsu (Google) (6):
      tracing/probes: Avoid temporary buffer truncation in
trace_probe_match_command_args()
      tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()
      tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
      tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()
      tracing: Fix union collision of module and refcnt for dynamic events
      selftests/ftrace: Reset triggers at top level before instance loop

Mateusz Guzik (1):
      pidfs: make pidfs_ino_lock static

Matthew Brost (4):
      drm/ttm/pool: back up at native page order
      drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict
      drm/pagemap: Clear driver-provided PFNs from migration PFN array
      drm/pagemap: Guard HPAGE_PMD_ORDER use with
CONFIG_ARCH_ENABLE_THP_MIGRATION

Matthieu Baerts (NGI0) (8):
      selftests: af_unix: add USER_NS config
      selftests: openvswitch: add config file
      selftests: ovpn: add IPV6 and VETH configs
      selftests: ovpn: increase timeout
      selftests: drv-net: increase timeout
      selftests: drv-net: add missing kconfig for psp.py
      selftests: netconsole: ignore busywait errors
      mptcp: fix BUILD_BUG_ON on legacy ARM config

Max Kellermann (3):
      ceph: fix hanging __ceph_get_caps() with stale mds_wanted
      ceph: add owner/capability checks for CEPH_IOC_SET_LAYOUT*
      ceph: avoid fs reclaim while using current->journal_info

Maxime Chevallier (1):
      MAINTAINERS: Add myself for stmmac ethernet driver maintainance

Maíra Canal (3):
      mailmap: Update Maíra Canal's email address
      drm/v3d: Reach the GMP through the hub registers on V3D 7.x
      drm/v3d: Idle AXI transactions before disabling the clock on suspend

Melbin K Mathew (1):
      usb: gadget: printer: fix infinite loop in printer_read()

Michael Bommarito (4):
      mptcp: only set DATA_FIN when a mapping is present
      amt: re-read skb header pointers after every pull
      amt: make the head writable before rewriting the L2 header
      ila: reload IPv6 header after pskb_may_pull in checksum adjust

Michael Grzeschik (1):
      mailmap: fix wrong canonical name for mgr@xxxxxxxxxx

Michael S. Tsirkin (1):
      mm: page_reporting: allow driver to set batch capacity

Michael Walle (2):
      net: phy: marvell: fix return code
      net: dpaa: fix mode setting

Michal Swiatkowski (1):
      ice: pass the return value of skb_checksum_help()

Miguel Ojeda (4):
      rust: allow `suspicious_runtime_symbol_definitions` lint for Rust >= 1.98
      rust: zerocopy: update to v0.8.52
      rust: zerocopy: update to v0.8.54
      objtool/rust: add one more `noreturn` Rust function for Rust 1.99.0

Mike Rapoport (Microsoft) (1):
      userfaultfd: prevent registration of special VMAs

MinJea Kim (1):
      staging: rtl8723bs: fix inverted HT40 secondary channel offset

Ming Lei (1):
      ublk: wait on ublk_dev_ready() instead of ub->completion

Minhong He (2):
      mctp: check register_netdevice_notifier() error in mctp_device_init()
      phonet: check register_netdevice_notifier() error in phonet_device_init()

Moksh Panicker (1):
      staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()

Mostafa Saleh (1):
      drivers/virt: pkvm: Fix end calculation in mmio_guard_ioremap_hook()

Muhammad Bilal (1):
      usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer

Myeonghun Pak (1):
      net: mctp i3c: clean up notifier and buses if driver register fails

Namjae Jeon (6):
      ksmbd: preserve VFS inherited POSIX ACL mask
      ksmbd: enforce signing required by the session
      ksmbd: bound DACL dedup walk to copied ACEs
      ksmbd: validate ACE size against SID sub-authorities
      ksmbd: validate minimum PDU size for transform requests
      ksmbd: reject undersized decompressed SMB2 requests

Nathan Chancellor (1):
      x86/boot/compressed: Disable jump tables

Nazim Amirul (3):
      net: stmmac: xgmac: fix l4 filter port overwrite on register update
      net: stmmac: fix l3l4 filter rejecting unsupported offload requests
      net: stmmac: reset residual action in L3L4 filters on delete

Nicholas Dudar (1):
      LoongArch: BPF: Zero-extend signed ALU32 div/mod results

Nicolai Buchwitz (1):
      MAINTAINERS: remove Rengarajan Sundararajan from LAN78XX

Nicolas Cavallari (1):
      wifi: mt76: Disable napi when removing device

Nikhil P. Rao (7):
      pds_core: reject component parameter in legacy firmware update
      pds_core: fix deadlock between reset thread and remove
      pds_core: fix use-after-free on workqueue during remove
      pds_core: yield the CPU while waiting for the adminq to drain
      pds_core: order completion reads after the ownership check
      pds_core: fix auxiliary device add/del races
      pds_core: check for workqueue allocation failure

Nikita Maksimov (1):
      ALSA: hda/realtek: Fix speakers on Lunnen Ground 14

Nikola Z. Ivanov (1):
      ipv6: Change allocation flags to match rcu_read_lock section requirements

Nikolay Aleksandrov (2):
      net: bridge: vlan: fix vlan range dumps starting with pvid
      selftests: net: bridge: test ranges with PVID VLAN

Norbert Szetei (3):
      ALSA: seq: close a re-opened queue timer in the destructor
      ALSA: timer: don't re-enter an instance callback that is still running
      ALSA: timer: drain a slave's callback before its master detaches it

Olga Kornievskaia (1):
      lockd: fix NLMv3 GRANTED_MSG handling

Oliver Ohrt (1):
      ALSA: hda/realtek: Fix speakers on Alienware x16 R2

Pagadala Yesu Anjaneyulu (1):
      wifi: iwlwifi: mvm: validate SAR GEO response payload size

Paul Greenwalt (2):
      ice: fix PTP Call Trace during PTP release
      ice: prevent tstamp ring allocation for non-PF VSI types

Pavel Begunkov (3):
      io_uring/zcrx: drop "notif" from stats struct names
      io_uring/zcrx: rename ZCRX_NOTIF_NO_BUFFERS
      io_uring/zcrx: rename notif to event

Pavitra Jha (2):
      ovpn: fix peer refcount leak in TCP error paths
      libceph: fix two unsafe bare decodes in decode_lockers()

Pengpeng Hou (7):
      ASoC: tas2781: bound firmware description string parsing
      USB: serial: mxuport: validate firmware header size
      hwmon: occ: validate poll response sensor blocks
      USB: serial: io_ti: reject oversized boot-mode firmware
      Bluetooth: btusb: validate Realtek vendor event length
      iommu/amd: Bound the early ACPI HID map
      drm/gma500: return errors from Oaktrail HDMI I2C reads

Phil Rosenthal (1):
      KVM: x86/mmu: Fix use-after-free on vendor module reload

Philipp Oster (1):
      ALSA: hda/tas2781: clear cali_data.total_sz when calibration read fails

Prashanth Kumar KR (1):
      amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN

Pu Hu (2):
      arm64: kprobes: Only handle faults originating from XOL slot
      arm64: kprobes: Allow reentering kprobes while single-stepping

Pu Lehui (1):
      LoongArch: BPF: Fix memory leak in bpf_jit_free()

Qing Luo (1):
      sctp: auth: verify auth requirement when auth_chunk is NULL

Qing Ming (1):
      ovpn: avoid putting unrelated P2P peer on socket release

Qingwei Hu (1):
      RISC-V: KVM: Inject instruction access fault on unmapped guest fetch

Qu Wenruo (3):
      btrfs: do not try compression for data reloc inodes
      btrfs: reject inline file extents item in get_new_location()
      btrfs: fix a regression where PAGECACHE_TAG_DIRTY is never cleared

Raag Jadav (1):
      drm/xe/i2c: Allow per domain unique id

Rafael J. Wysocki (2):
      watchdog: ni903x_wdt: Check ACPI_COMPANION() against NULL
      platform/loongarch: laptop: Stop setting acpi_device_class()

Raphael Zimmer (3):
      libceph: Fix multiplication overflow in decode_new_up_state_weight()
      libceph: Reject monmaps advertising zero monitors
      rbd: Reset positive result codes to zero in object map update path

Ricardo B. Marlière (1):
      selftests/net: Fix tun IPv6 test addresses to avoid 6to4 range

Richard Cheng (1):
      arm64/mm: Check the requested PFN range during memory removal

Richard Fitzgerald (2):
      ASoC: cs35l56: Fix potential probe() deadlock
      ASoC: cs35l56: Use complete_all() to signal init_completion

Rik van Riel (1):
      mm/huge_memory: set PG_has_hwpoisoned only after new folio head
is established

Rishikesh Jethwani (1):
      tls: device: push pending open record on splice EOF

Rob Herring (Arm) (2):
      accel: ethosu: Fix element size accounting for cmd stream validation
      accel: ethosu: Handle U85 internal chaining buffer

Roger Pau Monne (1):
      MAINTAINERS: update my email address

Rong Bao (1):
      LoongArch: Retrieve CPU package ID from PPTT when available

Rosen Penev (1):
      wifi: mt76: fix MAC address for non OF pcie cards

Runyu Xiao (2):
      misc: nsm: only unlock nsm_dev on post-lock error paths
      raw: annotate lockless match fields in raw_v4_match()

Ruoyu Wang (4):
      firewire: net: Fix fragmented datagram reassembly
      nfp: Check resource mutex allocation
      wan: wanxl: Only reset hardware after BAR mapping
      wifi: mt76: mt7915: guard HE capability lookups

SJ Park (3):
      MAINTAINERS: s/SeongJae/SJ/
      mm/damon/core: validate ranges in damon_set_regions()
      mm/damon/core: disallow overlapping input ranges for damon_set_regions()

Satyanarayana K V P (1):
      drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers

Sean Christopherson (1):
      KVM: x86: Check for invalid/obsolete root *after* making MMU
pages available

Sean Wang (1):
      wifi: mt76: mt7925: fix crash in reset link replay

Sergey Temerkhanov (1):
      ice: use READ_ONCE() to access cached PHC time

SeungJu Cheon (1):
      KVM: riscv: SBI FWFT: Apply LOCK flag only on successful set

Shahar Tzarfati (2):
      wifi: iwlwifi: fw: validate SMEM response size
      wifi: iwlwifi: mvm: fix read in wake packet notification handler

Shelley Yang (1):
      wifi: brcmfmac: fix 802.1X-SHA256 call trace warning

Shengjiu Wang (1):
      ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI

Shengming Hu (1):
      mm/slub: fix lost local objects when bulk remote free batch fills

Shengwen Cheng (1):
      KVM: riscv: PMU: Bound counter mask scan to BITS_PER_LONG

Shihuang Liu (1):
      amt: fix use-after-free in AMT delayed works

Shiming Cheng (1):
      net: gro: fix double aggregation of flush-marked skbs

Shuangpeng Bai (1):
      libceph: refresh auth->authorizer_buf{,_len} after authorizer update

Shuicheng Lin (1):
      drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create()

Shuvam Pandey (1):
      ovpn: hold peer before scheduling keepalive work

Sonali Pradhan (1):
      usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()

Stanislav Kinsburskii (1):
      drm/gpusvm: Zero HMM PFNs before scanning ranges

Stefano Garzarella (2):
      vsock/virtio: collapse receive queue under memory pressure
      vsock/test: add test for small packets under pressure

Steve French (1):
      Add missing git branch info for cifs and ksmbd to MAINTAINERS file

Steven Price (1):
      arm64: Correct value returned by ESR_ELx_FSC_ADDRSZ_nL()

Steven Rostedt (3):
      tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
      tracing: Delay module ref count for "enable_event" trigger
      tracing: perf: Fix stale head for perf syscall tracing

Suman Ghosh (1):
      octeontx2-vf: set TC flower flag on MCAM entry allocation

Sungmin Kang (1):
      net: slip: serialize receive against buffer reallocation

Sunho Park (1):
      USB: serial: io_edgeport: cap received transmit credits

Suraj Kandpal (1):
      drm/i915/backlight: Remove DP_EDP_BACKLIGHT_AUX_ENABLE_CAP check
for DPCD backlight

Sven Schnelle (2):
      s390/ptff: Export ptff_function_mask[]
      ptp: ptp_s390: Add missing facility check

Syed Saba Kareem (1):
      ASoC: amd: acp: add ACP70 DMI override for new ASUS TUF platforms

Takashi Iwai (1):
      ALSA: hda/realtek: Add quirk for HP Pavilion x360

Tengda Wu (1):
      ftrace: Add global mutex to serialize trace_parser access

Thomas Weißschuh (1):
      m68k: avoid -Wunused-but-set-parameter in clear_user_page()

Thomas Zimmermann (1):
      drm/appletbdrm: Allocate request/response buffers in begin_fb_access

Tim Pambor (1):
      USB: serial: ftdi_sio: add support for E+H FXA291

Tristan Madani (6):
      wifi: ath6kl: fix OOB access from firmware ADDBA window size
      wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
      wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
      wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
      wifi: carl9170: fix OOB read from off-by-two in TX status handler
      wifi: carl9170: fix buffer overflow in rx_stream failover path

Tycho Andersen (AMD) (2):
      iommu/amd: Fix IRQ unsafe locking in gdom allocation
      iommu/amd: Fix nested domain leak

Tze Yee Ng (1):
      firmware: stratix10-svc: fix memory leaks and list corruption bugs

Tzung-Bi Shih (1):
      watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()

Usama Arif (2):
      fs: push nr_cached_objects memcg gating into individual filesystems
      tracing: Fix context switch counter truncation

Venkatesh Srinivas (1):
      KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN

Vikas Gupta (1):
      bnge/bng_re: fix ring ID widths

Vincent Chen (1):
      ice: allow creating VFs when !CONFIG_ICE_SWITCHDEV

Wayen Yan (3):
      watchdog: airoha: Prevent division by zero when clock frequency is zero
      net: airoha: Fix potential use-after-free in airoha_ppe_deinit()
      net: airoha: Fix DMA direction for NPU mailbox buffer

Wei Yang (1):
      mm/page_vma_mapped: fix device-private PMD handling

Weiming Shi (1):
      tipc: serialize udp bearer replicast list updates

WenTao Liang (1):
      ceph: fix refcount leak in ceph_readdir()

Wendy Liang (1):
      accel/amdxdna: Fix command timeout race

Wentao Guan (1):
      ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL

Wentao Liang (2):
      wifi: ath11k: fix refcount leak in ath11k_ahb_fw_resources_init()
      ceph: fix writeback_count leak in write_folio_nounlock()

Will Deacon (2):
      arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
      Revert "arm64: syscall: Ensure saved x0 is kept in-sync with
tracer updates"

Xiang Mei (2):
      wifi: mac80211: tear down new links on vif update error path
      libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE

Xiang Mei (Microsoft) (3):
      gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
      nexthop: initialize extack in nh_res_bucket_migrate()
      bpf: tcp: fix double sock release on batch realloc

Xie Bo (1):
      RISC-V: KVM: Serialize virtual interrupt pending state updates

Xie Yuanbin (1):
      mm/memory-failure: trace: change memory_failure_event to ras subsystem

Xincheng Zhang (1):
      usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits

Xu Rao (2):
      misc: nsm: pin the module while the device is open
      cdrom: fix stack out-of-bounds read in CDROMVOLCTRL

Xu Yang (1):
      usb: chipidea: fix usage_count leak when autosuspend_delay is negative

Xuanqiang Luo (1):
      rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()

Yael Chemla (1):
      net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule

Yehyeong Lee (1):
      net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD

Yichong Chen (2):
      smb: client: validate DFS referral PathConsumed
      ovl: fix trusted xattr escape prefix matching

Yingying Tang (1):
      wifi: ath12k: Fix low MLO RX throughput on WCN7850

Yitang Yang (1):
      io_uring/rw: fix missing ERESTARTSYS conversion in read paths

Yizhou Zhao (1):
      tcp: initialize standalone TCP-AO response padding

You-Kai Zheng (1):
      btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8

Yousef Alhouseen (1):
      platform/x86/intel/vsec: free ACPI discovery data on early errors

Youssef Samir (1):
      net: qrtr: ns: Raise node count limit to 512

Yu Peng (1):
      arm64: fixmap: Allow 256K early_ioremap() at any offset

Yun Zhou (1):
      net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM

Yuxiang Yang (2):
      tcp: challenge ACK for non-exact RST in SYN-RECEIVED
      selftests/net: packetdrill: cover RST validation in SYN-RECEIVED

Zhang Heng (1):
      ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE

Zhang Yi (6):
      iomap: correct the range of a partial dirty clear
      iomap: support invalidating partial folios
      iomap: fix incorrect did_zero setting in iomap_zero_iter()
      iomap: fix out-of-bounds bitmap_set() with zero-length range
      iomap: add comments for ifs_clear/set_range_dirty()
      iomap: prevent ioend merge when io_private differs

Zhao Li (1):
      wifi: cfg80211: guard optional PMSR nominal time

Zhao Zhang (1):
      libceph: guard missing CRUSH type name lookup

Zhaolong Zhang (1):
      bonding: fix devconf_all NULL dereference when IPv6 is disabled

Zhengyu He (2):
      spi: spacemit: Correct TX FIFO slot calculation
      spi: dt-bindings: spacemit: add K3 SPI compatible

Zhiling Zou (2):
      sctp: avoid auth_enable sysctl UAF during netns teardown
      sctp: close UDP tunnel sockets during netns teardown

Zhixing Chen (1):
      gtp: parse extension headers before reading inner protocol

Zixing Liu (1):
      platform/loongarch: laptop: Explicitly reset bl_powered state when suspend

Zongmin Zhou (1):
      KVM: riscv: Fix Spectre-v1 in vector register access

deepakraog (1):
      tracing: Fix resource leak on mmiotrace trace_pipe close

longlong yan (1):
      selftests/net: ovpn: fix getaddrinfo memory leak in ovpn_parse_remote()

vadik likholetov (1):
      net: stmmac: enable the MAC on link up for all supported speeds