Re: Linux 7.4-rc2

From: Luna Jernberg

Date: Mon Nov 09 2026 - 05:23:45 EST


Den mån 9 nov. 2026 kl 11:19 skrev Luna Jernberg <droidbittin@xxxxxxxxx>:
>
> Works fine on my Dell laptop :)
>
>
>
> Den mån 9 nov. 2026 kl 01:47 skrev Linus Torvalds
> <torvalds@xxxxxxxxxxxxxxxxxxxx>:
> >
> > Ok, a big -rc2 to go with the largest ever -rc1. But the diffstat
> > looks fairly benign, and is dominated by some automated coccinelle
> > updates that I got for the merge window but left for rc2 because I
> > didn't want to deal with them when I was on the road (and had a hard
> > time finding the motivation to deal with them afterwards too, to be
> > honest).
> >
> > That said, the scripted updates are largely just one- and two-liners,
> > and they realy are very straightforward so they "dominate" the
> > diffstat only in the sense that they are very spread out and do add a
> > lot of noise.
> >
> > When masking that noise out from the diffstat, the shape of it changes
> > - not spread out over thousands of files any more. But it does not
> > look unusual: a third is drivers (gpu, networking and sound account
> > for most of it, but there's a bit of everything), another third is
> > networking and bpf, and the final third is "the rest" (mostly
> > filesystems, mm, arch updates).
> >
> > And yes, much of this was driven by various AI fixes. I think I'll
> > stop repeating that, and we can just take it for granted. But this
> > time around Alexei claims that on the bpf side at least the fixes are
> > now coming in faster than the new reports, and that sounds lovely if
> > true.
> >
> > I think most other areas haven't reached that point yet, but it's at
> > least a sign that we _may_ be starting to see the tide starting to
> > turn.
> >
> > Don't hold your breath, but maybe cross your fingers we'll be getting
> > there in the not entirely distant future.
> >
> > In the meantime, please keep testing,
> >
> > Linus
> >
> > ---
> >
> > Adarsh Das (1):
> > btrfs: unwind device add when sysfs registration fails
> >
> > Adrian Ng Ho Yin (1):
> > dt-bindings: usb: add Altera Agilex5 DWC3 controller
> >
> > Adrián García Casado (1):
> > scsi: libsas: Add __printf attribute to sas_ata_printk()
> >
> > Akhil Arul (1):
> > Bluetooth: hci_core: Fix queuing rx_work while workqueue is drained
> >
> > Akshay Jindal (1):
> > iommu/amd: Skip non-IVMD entries when parsing IVRS memory definitions
> >
> > Alejandro Colomar (1):
> > scripts/coccinelle: Add script for using ARRAY_END()
> >
> > Alex Austin (3):
> > sfc: ptp: drop the stale frequency reset in efx_ptp_start()
> > sfc: ptp: serialize host and MC synchronization transactions
> > sfc: ptp: avoid racing PPS timestamp updates
> >
> > Alex Hung (1):
> > drm/amd/display: Avoid closing unowned DDC pins
> >
> > Alex Kazinsky (2):
> > wifi: rsi: Skip TX aggregation setup for non-QoS frames
> > ALSA: cs46xx: Handle SCB creation failures before dereferencing
> >
> > Alexander Goodkind (1):
> > net: ethernet: mediatek: preserve sibling PPE bindings
> >
> > Alexandr (1):
> > ALSA: hda/realtek: Enable mute and mic-mute LEDs on HP ENVY 17-cr0xxx
> >
> > Alexandre Mergnat (2):
> > regulator: mt6363: Use 8-bit register values
> > regulator: mt6363: Fix VEMC voltage selection
> >
> > Alexei Solcanu (1):
> > hwmon: (gpd-fan) Reset both fans to automatic on duo boards
> >
> > Alexei Starovoitov (40):
> > bpf: Keep the valid bytes of a packet pointer in scalar evolution
> > selftests/bpf: Test the valid bytes of a packet pointer in a counted loop
> > bpf, x86: Fix bpf_throw() in a prog with a private stack
> > selftests/bpf: Test bpf_throw() in a prog with a private stack
> > bpf: Clamp the trace length before the skip test in stackid_init()
> > bpf: Refuse to map an arena at address 0
> > bpf: Don't let bpf_arena_free_pages() see a half-set user range
> > bpf: Refuse an arena mmap() longer than max_entries pages
> > bpf: Remove the WARN from arena_get_unmapped_area()
> > selftests/bpf: Test the length and the address of an arena mmap()
> > bpf: Don't turn struct arguments of KF_ACQUIRE kfuncs into memory
> > bpf: Don't turn kfunc arguments of an empty struct type into memory
> > bpf: Compare the arguments of an extension with those of its target
> > selftests/bpf: Test the arguments of an extension prog
> > bpf: Don't let bpf_skb_adjust_room() raise gso_size to GSO_BY_FRAGS
> > bpf: Set a dst for test runs of lwt_in progs
> > bpf: Don't look for the SRH again in the End.BPF helpers
> > bpf: Don't leave a stale MAC header in bpf_lwt_push_ip_encap()
> > bpf: Reset skb->cb after an lwt prog pushes an IP header
> > bpf: Require BPF_LWT_REROUTE when an lwt_in prog changes the protocol
> > bpf: Don't let lwt_in progs call into IPv6 when it is disabled
> > bpf: Don't move a MAP_FIXED address in arena_get_unmapped_area()
> > selftests/bpf: Run arena_mmap serially and test MAP_FIXED addresses
> > bpf: Fix the join of fp+0 with a value that is not a pointer to stack
> > selftests/bpf: Test the join of fp+0 with a value that is not a
> > pointer to stack
> > bpf: Don't trust pointers spilled in slots that a callee can write
> > selftests/bpf: Test a callee that overwrites a spilled pointer
> > of its caller
> > bpf: Invalidate a dynptr slice when its stack buffer is written
> > selftests/bpf: Test writes to the buffer of bpf_dynptr_slice_rdwr()
> > bpf: Emit timed may_goto for JITed progs only
> > selftests/bpf: Don't cast a pointer to .bss in arena_htab_asm
> > selftests/bpf: Give the first loop of cond_break5 an end
> > selftests/bpf: End the loop of parallel_test_bitmap after 50 ms
> > s390/bpf: Support internal-only MOV instruction to resolve per-CPU addrs
> > bpf: Pass a pointer to arch_bpf_timed_may_goto()
> > bpf: One may_goto time slice per prog invocation
> > bpf: End bpf_loop() when the time of may_goto is up
> > selftests/bpf: Test one may_goto time slice per prog invocation
> > libbpf: Fix use-after-free in btf__add_type
> > net: reject a negative TCP header offset in qdisc_pkt_len_segs_init()
> >
> > Amir Goldstein (3):
> > ovl: inherit FMODE_NONOTIFY when opening directory realfiles
> > ovl: inherit FMODE_NONOTIFY when reading directory layers
> > selftests/fscontext_ns: expect EINVAL for overlay descendant userns create
> >
> > Amirmohammad Eftekhar (1):
> > KVM: VMX: Add array_index_nospec() to evmcs_field_offset()
> >
> > Andrea Mayer (1):
> > seg6: fix transport header for inner IPv4 with IP options
> >
> > Andrew Luebke (1):
> > scsi: aic79xx: Fix NULL pointer dereference in device reset
> >
> > Andrew Morton (2):
> > openrisc: export __mulsi3 for modules
> > MAINTAINERS: add an IPC entry
> >
> > André Draszik (2):
> > drm/drm_crtc: ensure dma_fence_ops remain valid during device unbind
> > drm/drm_crtc: fix race with dma_fence_signal() in ::get_driver_name()
> >
> > Animesh Manna (1):
> > drm/i915/cmtg: Disable CMTG after encoder disable in hsw_crtc_disable()
> >
> > Ankit Thakur (4):
> > 9p: fix header guard comment in acl.h
> > 9p: fix typos and wrong parameter docs in vfs_inode.c
> > 9p: remove duplicated assignment in v9fs_fill_super()
> > 9p: fix typo in file header comments
> >
> > Antheas Kapenekakis (1):
> > ALSA: hda/tas2781: Prevent throwing away custom calibration addresses
> >
> > Anthony Iliopoulos (1):
> > xfs: skip iunlock with empty iolock flags in xfs_file_dio_write_aligned
> >
> > Antony Antony (9):
> > xfrm: state: reject mark with bits outside its mask on add
> > xfrm: state: reject mark with bits outside its mask on ALLOCSPI
> > xfrm: policy: reject mark with bits outside its mask on add
> > xfrm: state: exact mark/mask match for SPI-keyed control-plane SA lookups
> > xfrm: fix use-after-free of migrated state in xfrm_do_migrate_state()
> > xfrm: fix hw offload state leak on xfrm_do_migrate_state() error path
> > xfrm: include mark in MIGRATE_STATE SA collision check
> > xfrm: pass extack through to xfrm_init_replay() from xfrm_init_state()
> > docs: xfrm: include mark in XFRM_MSG_MIGRATE_STATE EEXIST tuple
> >
> > Anuj Gupta (1):
> > block: don't use the bvec fast path for dma-buf bios
> >
> > Anupama Kunkulagunta (1):
> > ALSA: hda/tegra: Add Tegra268 HDMI/DP codec ID
> >
> > Armin Wolf (1):
> > platform/x86: uniwill-laptop: Implement .hw_offloaded trigger callback
> >
> > Arpith Alexander (1):
> > spi: ljca: Don't require data in write replies
> >
> > Ashish Kalra (2):
> > x86/sev: Clear RMPOPT when segmented RMP is disabled by firmware
> > x86/sev: Set up RMPOPT only on an active SNP host
> >
> > Avi Weiss (3):
> > fsnotify: preserve 64-bit pre-content ranges
> > block: report the correct discard alignment in sysfs
> > net: skbuff: reject zero MPLS TTL before decrementing
> >
> > Ayushman Rout (2):
> > bpf: Fix bpf_dynptr_copy() for overlapping ranges in one packet
> > selftests/bpf: Test overlapping dynptr copies on xdp frags
> >
> > Babu Moger (2):
> > x86/resctrl: Correct ABMC counter ID field width
> > x86,fs/resctrl: Keep mbm_assign_mode in default mode at boot
> >
> > Baek Kyu, Kim (3):
> > hwmon: (corsair-cpro) Cache fan target only after a successful command
> > hwmon: (gpio-fan) Update the speed cache before dropping the PM reference
> > null_blk: reset cache state before device setup
> >
> > Baojun Xu (1):
> > ASoC: amd: acp: Add support for more projects on ACP7.0
> >
> > Baolin Wang (1):
> > mm: memory: fix truncation removing mapped folios
> >
> > Barret Rhoden (1):
> > 9p: treat read return values of 0 as EOF
> >
> > Bart Van Assche (4):
> > ntfs: Fix error handling in __ntfs_create()
> > scsi: BusLogic: Pass the host pointer directly to several functions
> > scsi: BusLogic: Prepare for enabling lock context analysis
> > mctp i3c: Fix locking in an error path
> >
> > Bas Nieuwenhuizen (1):
> > drm/amdgpu: Check cs flags.
> >
> > Benjamin J Pryor (1):
> > ALSA: hda/realtek: Extend ALC1316 fixup to MSI GE76 Raider
> >
> > Binbin Deng (4):
> > xfs: set healthmon mount cookie before publishing it
> > Bluetooth: hci_core: Initialize IRK before publication
> > Bluetooth: hci_core: Initialize link key before publication
> > Bluetooth: hci_core: Initialize LTK before publication
> >
> > Björn Töpel (1):
> > eth: fbnic: Report the logical RX queue to XDP
> >
> > Breno Leitao (2):
> > x86/bugs: Select the BHI mitigation based on the attack vector properly
> > x86/nmi: Ignore negative NMI handler durations
> >
> > Bryam Vargas (2):
> > net/iucv: take a private, writable frame before rewriting it in place
> > net/smc: don't spin in smc_rx_recvmsg() while a pipe holds spliced data
> >
> > Calvin Owens (1):
> > Revert "drm/amd/display: Allocate DCN32/1 dmub memory to GTT"
> >
> > Catherine L (1):
> > Bluetooth: btintel: fix buffer over-read in fw payload
> >
> > Ce Sun (1):
> > drm/amdgpu: skip RAS error count reset in debug mode
> >
> > Cen Zhang (14):
> > Bluetooth: hci_sync: Copy the LE accept list under hdev->lock
> > Bluetooth: hci_sync: Protect resolving-list lookups
> > Bluetooth: hci_core: Keep link-key filtering inside RCU
> > Bluetooth: SMP: Protect link keys during LTK derivation
> > Bluetooth: SMP: Protect LTK encryption with RCU
> > Bluetooth: hci_sync: Copy the resolving-list IRK under RCU
> > Bluetooth: hci_core: Initialize advertising RPA work only once
> > ocfs2: validate move extents against a stable EOF
> > ocfs2: keep locking_state within the cluster connection lifetime
> > ocfs2/dlm: serialize migration MLE cleanup on failure
> > ocfs2: stop recovery before shutting down local allocators
> > ocfs2/cluster: unlink socket containers before releasing resources
> > ocfs2: wait for filecheck kobject release after a failed add
> > ocfs2: cache the mount context for dentry lock callbacks
> >
> > Cen Zhang (Microsoft) (1):
> > ipv6: fix fib6 walker UAF on NLM_F_REPLACE
> >
> > Cheng Yongkang (1):
> > net: bridge: disable MRP ports before the FDB flush in del_nbp()
> >
> > Chengfeng Ye (3):
> > xfrm: retry inexact policy lookup after node reinsertion
> > net/9p/usbg: clear stale request context after abort
> > batman-adv: Close OGM aggregation before transmission
> >
> > Chris Chiu (1):
> > ALSA: hda/realtek: Use inverted mute LED quirk for HP ZBook 8 G2a
> >
> > Chris Down (1):
> > mm: make swapoff interruptible when unusing mms/shmem
> >
> > Chris Lu (3):
> > Bluetooth: btmtk: drop zero-length ISO packets from endpoint padding
> > Bluetooth: btmtk: bound the ISO payload length by the controller's MTU
> > Bluetooth: btmtk: derive the firmware ISO setting from MTK_ISO_THRESHOLD
> >
> > Chris Mason (33):
> > bpf: Reject memory for kfunc projection type args
> > bpf: Require prog fd or capability for cgroup detach
> > bpf, cgroup: Keep the skb network offset signed
> > bpf: Reject non-IPv6 packets in BPF_LWT_ENCAP_SEG6
> > bpf: Limit the SRH length in bpf_lwt_seg6_adjust_srh()
> > bpf: Move the MAC header in bpf_lwt_seg6_adjust_srh()
> > bpf: Move the transport header with the moved headers
> > bpf: Use the inner transport header after a decap
> > bpf: Check the offset in bpf_skb_generic_{push,pop}()
> > mm/mempolicy: charge shared policy nodes
> > mm/shmem: honour F_SEAL_EXEC when an ACL is set
> > mm/shmem: stop retrying folios that cannot be split
> > mm/shmem: preserve data in clean folios when splitting fails
> > mm/huge_memory: fix truncate racing with PMD zapping
> > mm/huge_memory: fix zapping migration entries for device-private THPs
> > mm/khugepaged: preserve dirty bits when collapsing PTE-mapped THPs
> > mm/gup: fix clearing folios in memfd_pin_folios()
> > mm/gup: fix out-of-bounds write for nr_pages == 0 in GUP-fast
> > mm/mmu_notifier: set ->mm only after mmgrab()
> > mm/memory: reject remote COW faults on PFN mappings
> > mm: fix unkillable fault loop on MAP_DROPPABLE memory
> > mm: fix deadlock of mremap() against UFFDIO_MOVE
> > mm/ksm: check large swap-cache folios before mapping them
> > mm/vma: call ->may_split() before a partial merge
> > ovl: fail the mount if the casefold flag has changed
> > ovl: do not let chattr change the casefold flag
> > ovl: fix whiteout creation in casefolded directories
> > nvmet-rdma: disconnect only established queues
> > nvmet-rdma: take a device off the list last
> > nvmet-rdma: queue the release work under the mutex
> > nvmet-rdma: disconnect a queue on device removal
> > ovl: look up the index by the decoded origin
> > x86/mm: Fix global ASID handed out to two processes
> >
> > Chris Simpson (1):
> > ALSA: hda/realtek: Enable bass speakers on Alienware m17 R3
> >
> > Christian Aurich Zanettini Martins (2):
> > nvme-tcp: fix use-after-free in nvme_tcp_free_ctrl()
> > nvme-rdma: fix NULL queue->ctrl dereference on reconnect
> >
> > Christian Gmeiner (2):
> > drm/etnaviv: Fix NULL dereference on unbind without PPU flop reset
> > drm/etnaviv: Flush the tile status cache through both the PE and BLT
> >
> > Christian Loehle (1):
> > sched/core: Account I/O waits independently of delayed dequeue
> >
> > Christoph Hellwig (2):
> > zloop: fix block size query
> > xfs: fix recovery of partial attr removals
> >
> > Christophe JAILLET (1):
> > nvmet: pci-epf: Constify struct pci_epf_ops
> >
> > ChunYuZhiQiang (2):
> > can: dev: can_fill_info(): don't wake up controller if interface is down
> > can: dev: can_tdc_fill_info(): don't read automatic TDCV if
> > interface is down
> >
> > Chunfa Zhang (1):
> > spi: fix zero-length scatterlist entries for vmalloc buffers
> >
> > Cian Ruane (1):
> > ALSA: hda/realtek: Add quirk for Huawei MateBook X Pro 2020
> >
> > Clément Léger (1):
> > MAINTAINERS: mailmap: use Clément Léger's linux.dev mail address
> >
> > Colton Pawielski (1):
> > net: 8139cp: keep Rx masked while NAPI is scheduled
> >
> > Cong Zhang (1):
> > virtio_blk: use synchronous quiesce in virtblk_freeze_priv()
> >
> > Cosmin Ratiu (1):
> > wifi: wext: Limit notifier event flushes to the device's netns
> >
> > Cunhao Lu (3):
> > can: skb: make echo skb freeing safe in any IRQ context
> > can: skb: make CAN skb allocation failure paths IRQ-safe
> > can: dev: can_put_echo_skb(): free skb on invalid echo index
> >
> > Daehyeon Ko (2):
> > vhost/vsock: size receive SKBs from declared payload
> > sched/fair: Clear throttle state when leaving the fair class
> >
> > Daejun Park (12):
> > xfs: don't skip free extents in later batches of a whole-AG FITRIM
> > xfs: don't skip free extents of the longest length in a whole-AG FITRIM
> > nvme: unregister when pr_register() is given a zero new key
> > xfs: mark the inode preallocated for pNFS write layouts past EOF
> > xfs: add a flag to convert unwritten extents without allocating blocks
> > xfs: refuse a pNFS LAYOUTCOMMIT of a range without blocks
> > xfs: clamp a pNFS LAYOUTCOMMIT extent before computing its end
> > xfs: cap the block count of xfs_iomap_write_direct() at one extent
> > xfs: clamp the pNFS layout range to the maximum file size
> > xfs: take the invalidate lock while mapping a pNFS layout
> > xfs: add datasync and log_flushed arguments to xfs_log_force_inode()
> > xfs: make pNFS LAYOUTCOMMIT stable the way fdatasync does
> >
> > Daniel Borkmann (2):
> > x86/ftrace: Mark jmp mode by clearing bit 63 of trampoline address
> > selftests/bpf: Test kprobe and fentry/fexit programs on one function
> >
> > Daniel Machon (2):
> > net: lan966x: don't free XDP buffers in fdma tx clear with budget 0
> > net: sparx5/lan969x: release the in-flight slot of a stale TX skb
> >
> > Danish Khateeb (2):
> > selftests/mm: merge: keep the far mremap() targets in the carveout
> > perf/core: Don't send SIGTRAP after exec removed the event
> >
> > Dariusz Marcinkiewicz (1):
> > drm/amdgpu: check amdgpu_vm_ready() in dma-buf move notify
> >
> > David Carlier (1):
> > spi: rtk-nor: Limit exec_op writes to one byte per operation
> >
> > David Hildenbrand (Arm) (37):
> > mm/shmem: discard whole new large folios on fallocate rollback
> > mm/shmem: rescan after nonuniform folio splitting
> > mm/shmem: fix truncate hang in large swap entry
> > mm/shmem: preserve allocation errors when swapping in large entries
> > mm/shmem: fix truncate loop after boundary swapin failure
> > mm/shmem: fix accounting of swapin-error markers
> > mm/shmem: fix truncation of files containing only swapin-error markers
> > fork: take mmap_lock before copying mm_struct
> > mm/shmem: make shmem_file() check the file's inode
> > mm/truncate: look again if a folio left the mapping
> > mm/filemap: finish fault cleanup before dropping the fault lock
> > mm/rmap: handle device-exclusive entries in folio_referenced_one()
> > mm/huge_memory: fix list corruption when deferred_split_scan()
> > races with deferred_split_folio()
> > mm/huge_memory: properly handle refcounted PUD mappings on fork
> > mm: fix address wraparound when scanning large folio PTEs
> > mm/hugetlb: disable PMD sharing for UFFD missing mode
> > mm/vma: write lock source VMA before duplicating it in __split_vma()
> > mm/madvise: preserve VMA_SOFTDIRTY_BIT when changing anonymous names
> > MAINTAINERS: mention for-next branch in MEMORY MANAGEMENT - MEMORY MAP
> > MAINTAINERS: TMPFS (SHMEM FILESYSTEM) updates
> > MAINTAINERS: add Zi Yan as co-maintainer for MEMORY MANAGEMENT - THP
> > MAINTAINERS: sort entries in MM sections
> > MAINTAINERS: add missing files to MM component sections
> > MAINTAINERS: rename and move MEMORY HOT(UN)PLUG
> > MAINTAINERS: route more MM changes through mm/core.git
> > mm/gup: recheck the PUD under PTL in follow_pud_mask()
> > mm/gup: check for overflow when converting nr_pages to bytes in GUP-fast
> > mm/userfaultfd: write-lock the VMA before waking waiters when
> > unregistering
> > mm/userfaultfd: wake waiters when registration modes are removed
> > mm/mremap: use pudp_huge_get_and_clear() when moving huge PUDs
> > mm/mremap: recheck PUDs under the page table lock
> > mm/madvise: fix data loss from MADV_FREE on a KSM page
> > mm/ksm: reset the unstable trees of all nodes
> > mm/ksm: fix use of a freed anon_vma at swap-in
> > mm/huge_memory: split huge PUDs when adjusting VMA boundaries
> > mm/vma: don't leak the charge for stack growth
> > mm/memory-tiers: unregister empty tiers outside memory_tier_lock
> >
> > Davidlohr Bueso (1):
> > dma-buf: validate the attachment before asserting its reservation lock
> >
> > Deepanshu Kartikey (2):
> > 9p: don't WARN_ONCE on racy symlink fid lookup failure
> > batman-adv: avoid WARN_ON for orig_ifinfo allocation failure
> >
> > Devin Wittmayer (2):
> > drm/panic: Fix kmsg screen hang on a long log line
> > drm/panic: Accept a trailing newline in panic_screen
> >
> > Dheeraj Kumar Srivastava (1):
> > iommu/amd: Clear amd_iommu_snp_en if snp_rmptable_init() fails
> >
> > Dmitry Antipov (1):
> > 9p: simplify v9fs_cache_session_get_cookie()
> >
> > Dmitry Baryshkov (1):
> > regulator: qcom_spmi: don't take a sleeping lock in the SAW IPI
> >
> > Dom Cobley (1):
> > drm/vc4: hdmi: power down the BCM2712 PHY when the output is disabled
> >
> > Dominique Martinet (1):
> > 9p: optimize p9_fcall struct
> >
> > Drew Fustini (1):
> > MAINTAINERS: resctrl: Add myself as reviewer
> >
> > Dudu Lu (1):
> > vhost/vringh: Fix IOTLB permission in putu16_iotlb()
> >
> > Eklavya Singh (1):
> > ocfs2/heartbeat: serialize concurrent writes to a region's dev attribute
> >
> > Eliot Courtney (1):
> > rust: io: fix unused Flags::from_raw warning without CONFIG_PCI
> >
> > Ella Ma (1):
> > coccinelle: free: add a checker for `__cleanup(kfree)` usage
> >
> > Erhan Bilgili (2):
> > drm/amdgpu: Fix duplicate dependency fence releases
> > drm/amdgpu: Report MES ring wait timeouts.
> >
> > Eric Biggers (5):
> > lib/crypto: mips: Disable Octeon SHA code on little-endian kernels
> > lib/crypto: powerpc/poly1305: Remove BROKEN implementation
> > lib/crypto: mldsa: Check pk_len before doing pointer arithmetic
> > lib/crypto: mldsa: Explicitly check that 'alg' is a valid value
> > lib/crypto: mldsa: Add __must_check to mldsa_verify()
> >
> > Eric Dumazet (7):
> > tcp: do not let tcp_collapse() drive sk_forward_alloc negative
> > inet: frags: limit the truesize of a reassembly queue
> > soreuseport: annotate data-races around reuse->socks[] and num_socks
> > xfrm: iptfs: fix skb leak on error in __input_process_payload()
> > ipmr, ip6mr: queue netlink route queries out of band
> > tcp: ipv6: do not read ireq->pktopts from tcp_v6_send_synack()
> > tcp: ipv6: free ireq->ipv6_opt after an RCU grace period
> >
> > Esben Haabendal (2):
> > drm/bridge: nwl-dsi: Cleanup endpoint mux control selection
> > drm/bridge: nwl-dsi: Limit LCDIF specific sync override
> >
> > Eugenio Pérez (1):
> > MAINTAINERS: add missing virtio/vdpa/vduse/vhost headers
> >
> > Eva Kurchatova (1):
> > hugetlbfs: enforce F_SEAL_EXEC in setattr
> >
> > Evanshenf (3):
> > drm/loongson: Fix framebuffer selection in async cursor updates
> > drm/loongson: Fix double free on BO initialization failure
> > drm/loongson: Handle buffer mapping failures when clearing a BO
> >
> > Ewan D. Milne (1):
> > nvmet: don't return memory contents beyond valid data when
> > reading ANA log page
> >
> > Fang Xieyan (4):
> > vringh: bound top-level re-entry into indirect tables
> > vringh: add regression test for cyclic indirect descriptor
> > vringh: reject empty / undersized indirect descriptor tables
> > vhost: fix used ring index wrap in vhost_add_used_n_in_order
> >
> > Fangzhi Zuo (2):
> > drm/edid: Parse HDMI 2.2 FRL rates from the SCDS
> > drm/amd/display: Accept HDMI 2.2 FRL rates from the sink EDID
> >
> > Federico Musto (1):
> > net: atl1c: drop oversized RX frames instead of panicking
> >
> > Fernando Fernandez Mancera (1):
> > net/smc: fix limit_smc_hs sysctl on big-endian architecture
> >
> > Filipe Manana (6):
> > btrfs: defrag: prevent inode truncated to zero from not being
> > defragged again
> > btrfs: fix fiemap merging compressed extents
> > btrfs: scrub: fix lost error return value when scrubbing raid56
> > parity stripe
> > btrfs: scrub: fix lost wakeup and hang when cancelling a scrub
> > that is finishing
> > btrfs: scrub: fix race leading to use-after-free in the scrub
> > progress ioctl
> > btrfs: scrub: fix race between scrub and scrub progress ioctl
> >
> > Finn Zeruhn (1):
> > drm/dp: keep MOT set between messages when no_zero_sized is set
> >
> > Florian Fainelli (7):
> > net: dsa: b53: Enable IGMP and MLD control packet CPU copies
> > net: ethernet: bgmac: preserve forced 2.5 Gbps link speed
> > net: dsa: b53: restore the NSP IMP port 2 Gbps mode
> > MIPS: Alchemy: Register interrupt chips with the IRQ core
> > MIPS: Alchemy: Save the Ethernet address before reusing PROM memory
> > MIPS: Cobalt: Include legacy IDE ports in the PCI I/O window
> > MIPS: SB1250: Validate and update IRQ affinity
> >
> > Fourie Zhang (1):
> > xfrm4: use a full socket for local errors
> >
> > Franck Baur (1):
> > net: jme: keep RX MAC clock enabled for WoL
> >
> > Frederic Konrad (1):
> > spi: cadence-quadspi: Fix race between DMA completion and transfer start
> >
> > GIBEOM LEE (이기범) (1):
> > regulator: mt6363: Fix the registers of the VSRAM CPU and APU LDOs
> >
> > Gianluca Balboni (1):
> > ASoC: amd: yc: Add DMI quirk for HP OmniBook 3 Laptop 16-by0xxx
> >
> > Giuseppe Piscitelli (3):
> > scsi: scsi_debug: Drain target cleanup before module exit
> > scsi: core: Balance the pseudo target reap reference
> > ata: libata-core: Check device support before querying power state
> >
> > Gregory Price (1):
> > mm/userfaultfd: compare exact registration modes before skipping
> >
> > Gregory Price (Meta) (1):
> > mm/page_alloc: let the highest memory node recover from hopeless state
> >
> > Guenter Roeck (22):
> > hwmon: (aquacomputer_d5next) Check maxcollection when probing
> > AQUAERO devices
> > hwmon: (asus_wmi_sensors) Avoid global struct mutation
> > hwmon: (hp-wmi-sensors) Avoid global struct mutation
> > hwmon: (hp-wmi-sensors) Fix unbounded loops in scale_numeric_sensor()
> > hwmon: (lm87) Fix drvdata type confusion in vrm_show() and vrm_store()
> > hwmon: (nct6683) Fix incorrect struct cast in show_pwm() and store_pwm()
> > hwmon: (peci/dimmtemp) Fix devres leak and UAF on concurrent unbind
> > hwmon: (pmbus/q54sj108a2) Add missing NULL pointer check
> > hwmon: (pmbus) Check return value from pmbus_thermal_add_sensor()
> > hwmon: (pmbus) Release devres allocated memory after
> > devm_thermal_of_zone_register error
> > hwmon: (pmbus) Fix return value check from thermal zone registration
> > hwmon: (lm75) Fix setting polarity mask for chips with 16-bit
> > config register
> > hwmon: (tmp108) Fix initial conversion delay and wait until ready
> > hwmon: (coretemp) Check for NULL platform device in hotplug callbacks
> > hwmon: (coretemp) Set nr_cores only after core_data allocation succeeds
> > hwmon: (coretemp) Fix 32-bit jiffies wraparound in show_temp()
> > hwmon: (sht4x) Convert update_interval to jiffies in pending data check
> > hwmon: (acpi_power_meter) Fix missing locking in sysfs show
> > callbacks and resume
> > hwmon: (acpi_power_meter) Prevent spurious power alarm when
> > power is unknown
> > hwmon: (acpi_power_meter) Check for 32-bit and 64-bit unknown ACPI values
> > hwmon: (hp-wmi-sensors) Serialize alarm flag read-and-clear with
> > state->lock
> > hwmon: (asus_rog_ryujin) Fix timeout when reading 0% duty cycle
> >
> > Guillaume Nault (1):
> > tcp: Fix dup-ack detection on non-SACK bidirectional data transfer.
> >
> > Guixin Liu (1):
> > nvmet-rdma: remove dead allocated field in nvmet_rdma_rsp
> >
> > HOYOUNG SEO (1):
> > scsi: ufs: core: Change the error check sequence for auto hibern8
> >
> > Haiyue Wang (1):
> > platform: arm64: drop the vacuous THERMAL dependency from EC_ASUS_GLYMUR
> >
> > Haobin Wu (3):
> > 9p: skip intermediate directory entry name copy in p9dirent_read()
> > 9p: skip directory entries with names longer than NAME_MAX
> > 9p: skip over-long directory entry names for legacy 9p2000 too
> >
> > Hemanth Selam (1):
> > net/9p: fix typos in comments
> >
> > Hengyu Liang (3):
> > btrfs: fix chattr failing on nodatasum files that have the compress flag
> > fs/proc/task_mmu: return -ENOTTY for unknown pagemap ioctls
> > l2tp: only return sessions of the given tunnel in l2tp_session_get()
> >
> > Hongjian Dai (1):
> > spi: pic32-sqi: fail transfer when the BD ring is exhausted
> >
> > Hongling Zeng (2):
> > ntfs: keep the file size on a failed initialized-size extension
> > ntfs: fix a self-deadlock on writes to non-resident named streams
> >
> > Hugo Deco (1):
> > nvme-pci: add NO_FUA quirk for ADATA XPG GAMMIX S70 BLADE
> >
> > Hugo Sales (1):
> > drm/amdgpu: Clamp the ATIF backlight curve to its 99 points
> >
> > Hui Peng (2):
> > udf: validate vat20->lengthHeader and VAT inode size in udf_load_vat()
> > 9p: reject RERROR/RLERROR with zero errcode
> >
> > Hui Su (2):
> > sched/pelt: Fix u32 truncation of the PELT period count
> > sched/topology: Balance cluster static-key updates
> >
> > Hungyu Lin (8):
> > ext2: preserve completed DIO bytes when buffered fallback fails
> > mm/page-writeback: avoid 32-bit overflow in dirty threshold shares
> > mm/migrate: untag addresses when querying page nodes
> > fat: fix parent link count when replacing a sibling directory
> > inotify: do not coalesce rename events
> > block: Return the soft block size for compat BLKBSZGET
> > isofs: handle Rock Ridge long-form dates before 1900
> > ext2: preserve IOMAP_F_DIRTY for extending direct writes
> >
> > HyeongJun An (1):
> > ALSA: ump: Fix dropped data bytes at UMP System message conversion
> >
> > Hyunchul Lee (3):
> > ntfs: reject negative attribute read positions
> > ntfs: initialize VCN when inserting index entries
> > ntfs: avoid overflow when limiting attribute read length
> >
> > Hyungjung Joo (1):
> > net/9p/usbg: clear stale client pointer on close
> >
> > Hyunwoo Kim (2):
> > inet: reject unhashed sockets during established lookups
> > net: restore refcount ordering for lockless socket access
> >
> > Ian Bridges (6):
> > ksmbd: require DELETE access for delete-on-close opens
> > ksmbd: enforce the read-only share flag when creating a stream
> > ksmbd: revert fsids on durable reconnect and replay failure
> > ksmbd: do not read past the DACL in the access denied debug message
> > ksmbd: grant a POSIX ACL group entry only to the group's members
> > ksmbd: let the owner read and change the DACL when no ACE names it
> >
> > Ian Rogers (2):
> > perf/core: Include perf_event_attr::defer_output in is_sb_event() check
> > perf/core: Clamp deferred callchain entry count to fit u16 header.size
> >
> > Ido Schimmel (1):
> > vxlan: Stop rejecting dynamic FDB entries with a nexthop ID
> >
> > Igor Pylypiv (1):
> > ata: libata-sata: allow re-enabling NCQ with the same queue_depth
> >
> > Ilia Mirkin (1):
> > drm/nouveau/devinit/gf100-: try to avoid double-running vbios scripts
> >
> > Imre Kaloz (8):
> > scsi: aic7xxx: Fix REQUEST SENSE allocation length on big-endian hosts
> > scsi: aic7xxx: Use default settings on the SGI O2 onboard controllers
> > MIPS: SGI-IP27: print the NMI dump on an nbcon console
> > MIPS: SGI-IP30: fix the defconfig defaults for the Bridge PROM and RTC
> > MIPS: mm: Fix the cache error vector jump for XKPHYS kernels
> > MIPS: sgi-ip32: Mask MACE PCI interrupts in CRIME only
> > MIPS: sgi-ip32: Leave MACE PCI control alone in config accesses
> > MIPS: sgi-ip32: Report the real CRIME revision
> >
> > Ioannis Coward (1):
> > io_uring/wait: don't sleep on an already expired timeout
> >
> > Ismail Tarim (1):
> > Bluetooth: btmtk: fix error handling in btmtk_usb_isointf_init()
> >
> > Jack Blessed Kimani (1):
> > ksmbd: fix NULL pointer dereference in session_user_name() and
> > session_account_type()
> >
> > Jakub Kicinski (1):
> > docs: netdev: try to force agents to disclose info for fixes
> >
> > Jakub Sitnicki (1):
> > bpf, sockmap: Fix psock update-side data races on sk->sk_prot and progs
> >
> > Jamal Hadi Salim (2):
> > bpf: Fix skb_pull() BUG in __bpf_redirect_neigh()
> > net/sched: clamp skb->queue_mapping before indexing the tx queue
> >
> > James Calligeros (2):
> > ASoC: tas2770: Configure transmit clock edge when setting DAI format
> > ASoC: tas2770: Fix error detection in tas2770_set_dai_tdm_idle
> >
> > James Clark (2):
> > net: ethernet: ti: am65-cpts: adjust perout genf following ptp changes
> > net: ethernet: ti: am65-cpsw-nuss: Enable timestamping of
> > unicast PTP packets
> >
> > James Fantin-Hardesty (1):
> > nvmet: fix arbitration burst field mask
> >
> > James Hilliard (6):
> > ptp: drain virtual clock sysfs operations before unregistering children
> > ptp: unwind partially completed virtual clock creation
> > ptp: vclock: propagate physical clock sampling errors
> > ptp: vclock: serialize extended samples with counter updates
> > ptp: vclock: preserve missing hardware timestamps
> > net: stmmac: take ownership of saved RX state at poll entry
> >
> > Jan Beulich (1):
> > xen-netback: defer xenvif_mcast_addr_list_free()
> >
> > Jan Kara (4):
> > udf: Validate extended attribute space is large enough
> > udf, ext2, quota, jbd2: Unify email addresses in MAINTAINERS
> > udf: Simplify udf_table_prealloc_blocks()
> > udf: Fix incorrect error code in udf_current_aext()
> >
> > Jarkko Sakkinen (1):
> > nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup()
> >
> > Jason Perlow (1):
> > wifi: brcmfmac: map msgbuf RX packet IDs bidirectional
> >
> > Javier Carrasco (11):
> > hwmon: chipcap2: fix command error diagnostics
> > hwmon: chipcap2: fix off-by-one in command mode retry loop
> > hwmon: chipcap2: fix be16 handling
> > hwmon: chipcap2: defer probe when IRQs are unavailable
> > hwmon: chipcap2: fix IRQ teardown ordering
> > hwmon: chipcap2: disable device after hwmon teardown
> > hwmon: chipcap2: enable IRQ processing when regulator is already enabled
> > hwmon: chipcap2: balance regulator state
> > hwmon: chipcap2: do not discard pending alarms on disable
> > hwmon: chipcap2: serialize access to the alarm indicators
> > hwmon: chipcap2: synchronize ready IRQ state
> >
> > Jean-Christophe Guillain (1):
> > iommu/amd: Fix NULL pointer dereference for GPUs without upstream bridge
> >
> > Jens Axboe (2):
> > io_uring/poll: don't poll a writer for a read side hangup
> > io_uring/poll: don't poll a writer for urgent data
> >
> > Jerome Brunet (1):
> > ASoC: meson: axg-fifo: request the irq with the clock enabled
> >
> > Jesse Zhang (11):
> > drm/amdgpu: sign extend the addresses GEM_OP(GET_MAPPING_INFO) returns
> > drm/amdgpu: parse CS IBs at the BO offset their VA mapping starts at
> > drm/amdgpu: keep the CS user fence BO in GTT
> > drm/amdkfd: use the queue's process info for the WPTR BO eviction fence
> > drm/amdgpu/userq: validate the moved individual BOs on restore
> > drm/amdgpu/gfx12: disallow GFXOFF while updating the SPM VMID
> > drm/amdgpu: drop the dma-buf reference when a KFD import fails
> > drm/amdgpu: unlock the VM and BO when attaching a KFD BO fails
> > drm/amdgpu: rewrite all PTEs of the BOs after a VM reset
> > drm/amdgpu: don't walk the CS chunks when allocating them failed
> > drm/amdgpu: don't drop the gang dependency fence twice
> >
> > Jia Jia (6):
> > scsi: target: Validate REGISTER AND MOVE TransportID length
> > vhost-scsi: preserve event ordering
> > vhost-scsi: do not relock event vq mutex on send_evt fallback
> > vduse: avoid infinite loop when no affinity CPU is online
> > vhost-scsi: do not count PI bytes in the data length
> > vhost-scsi: fix page reference leak in misaligned I/O fallback
> >
> > Jiale Yao (1):
> > hwmon: (aquacomputer_d5next) reject short status reports
> >
> > Jianan Huang (1):
> > blk-mq: reset queue state on scheduler teardown
> >
> > Jianyun Gao (1):
> > xfs: fix temporary cursor leak in btree shift corruption paths
> >
> > Jinjie Ruan (1):
> > arm64: kexec_file: Fix elf_headers memory leak in retry loop
> >
> > Jinwang Li (1):
> > Bluetooth: L2CAP: Ignore connection responses with wrong ident
> >
> > Joas Antonio dos Santos (2):
> > net/mlx5: macsec: free struct mlx5_fs_id after an RCU grace period
> > tipc: raise the minimum bearer MTU to fit tunnel and crypto overhead
> >
> > Joe Perches (1):
> > coccinelle: Add devm_kmalloc_objs conversion script
> >
> > Johan Hovold (1):
> > MAINTAINERS: update auxiliary bus entry
> >
> > Johannes Weiner (2):
> > mm: page_alloc: do not give all non-blocking requests reserve access
> > mm: page_alloc: remove ALLOC_NON_BLOCK from ALLOC_RESERVES
> >
> > John Ogness (1):
> > printk: Avoid multiple unregistration in unregister_console_locked()
> >
> > Joonhoe Kim (1):
> > net: qrtr: announce local services again once our HELLO is sent
> >
> > Jose Fernandez (Anthropic) (1):
> > bpf: Fix jited line info off by the CFI preamble
> >
> > Jose Maria Casanova Crespo (1):
> > drm/v3d: Initialize timedout_batches when running a CSD job
> >
> > Josef Bacik (21):
> > bpf: Clamp the trace length in __bpf_get_stack() again
> > tmpfs: keep the quota soft limits of an unused id
> > tmpfs: preserve explicitly disabled quota limits
> > mm/shmem: hold off eviction in shmem_writeout()
> > mm/mglru: don't use stack pointers when walking PUD and PMD tables
> > mm/memfd: make f_pos accesses atomic
> > mm/filemap: read mapping->a_ops->free_folio under i_lock
> > mm/filemap: don't lose a folio lock wakeup to a signal
> > ext2: only flush DIRSYNC directories on every change
> > blk-mq: end the request if getting a keyslot fails
> > mm/khugepaged: always recheck the pmd in try_collapse_pte_mapped_thp()
> > mm/khugepaged: fix PMD table lock leak in try_collapse_pte_mapped_thp()
> > mm/userfaultfd: wake all waiters on unregister
> > mm/mmu_gather: fix flushing ranges with 4 GiB or larger
> > mm/mmu_notifier: finish non-blocking interval invalidation on error
> > mm/mremap: fix moving PUD leaves
> > mm: fix unmap_mapping_range() beyond 4 GiB on 32-bit
> > nvme-loop: delete the controller if a reset fails
> > nvmet-tcp: ask for the TLS record type on every receive
> > nvmet-auth: keep the old keys if the new ones fail
> > nvmet-tcp: limit the connections accepted per work run
> >
> > Joseph Kain (1):
> > net: stop defer_count outliving the deferred-free list
> >
> > Joseph Qi (6):
> > ocfs2: read the xattr entry hash before defragmenting the bucket
> > ocfs2: find the xattr entry again after defragmenting a bucket
> > ocfs2: find the xattr entry again after converting a block to a bucket
> > ocfs2: do not read the entry array of an empty xattr bucket
> > ocfs2: do not index before the entry array when dividing an empty bucket
> > ocfs2: do not read the entry array of an empty xattr block
> >
> > Josua Mayer (1):
> > dt-bindings: usb: cypress,hx3: make peer-hub property optional
> >
> > Jouni Högander (5):
> > drm/i915/psr: Clear selective fetch area when duplicating plane state
> > drm/i915/display: Add enabled pipe planes into state for selective fetch
> > drm/i915/psr: Disable linked plane sel fetch as well
> > drm/i915/psr: Fix SFF and CFF CTL register bit definitions
> > drm/i915/psr: Don't clip plane state destination rectangle
> >
> > Jude Gyimah (5):
> > ASoC: rockchip_i2s: select REGMAP_MMIO
> > ASoC: rockchip_i2s_tdm: select REGMAP_MMIO
> > ASoC: rockchip_pdm: select REGMAP_MMIO
> > ASoC: rockchip_sai: select REGMAP_MMIO
> > ASoC: rockchip_spdif: select REGMAP_MMIO
> >
> > Juergen Gross (2):
> > xen-netback: Fix UAF when reading statistics data
> > xen-blkback: Avoid UAF when reading I/O statistics
> >
> > Julia Lawall (1):
> > scripts/coccinelle: improve efficiency of array_end.cocci
> >
> > Jérémy Jean (1):
> > nvmet-auth: reject incomplete DHCHAP messages
> >
> > Kaixuan Li (1):
> > can: isotp: check the frame type, not just the length
> >
> > Karl Mehltretter (2):
> > dma-buf: keep the DMA flags in the DMABUF_DEBUG copy
> > virtio-spi: Fix virtio_spi_config kernel-doc
> >
> > Kayra Cizmeci (1):
> > sched/cache: Ignore non-fair current in alb_break_llc()
> >
> > Kees Cook (4):
> > 9p: Add const and unsigned to wnames allocation type
> > treewide: refresh kmalloc_obj() conversions
> > coccinelle: kmalloc_obj: Include devm_kmalloc_obj conversion rules
> > treewide: Convert devm_kmalloc() family to the devm_kmalloc_obj() family
> >
> > Kefeng Wang (1):
> > xfs: kill xfs_trans_set/clear_context() helpers
> >
> > Kent Russell (1):
> > drm/amdgpu: Ensure that harvest information gets set
> >
> > Kevin Dewald (3):
> > Bluetooth: hci_event: Clear explicit connect state on LE connection
> > Bluetooth: MGMT: Clear disabled connection parameters when loading none
> > Bluetooth: MGMT: Fix discovery stuck after a failed Stop Discovery
> >
> > Kevin Mitchell (1):
> > iommu/amd: remove obsolete domain pointer warning on release
> >
> > Kevin Wang (1):
> > drm/amd/pm: populate unique ID for smu 13.0.7
> >
> > Kiryl Shutsemau (Meta) (3):
> > mm/hugetlb_vmemmap: map the shared tail page writable
> > arm64: sdei: Run the event handler on the kernel vectors
> > arm64: sdei: Preserve the interrupted context's exception registers
> >
> > Konstantin Sinyuk (1):
> > MAINTAINERS: Update habanalabs maintainer contacts and status
> >
> > Krystian Kaniewski (1):
> > blk-mq: fix out-of-bounds read in blk_mq_free_rqs
> >
> > Kuangyi Chiang (1):
> > ALSA: usb-audio: Add delay quirk for HIK camera
> >
> > Kuniyuki Iwashima (3):
> > ipv6: Flush exception route while replacing nexthop.
> > ipv6: Flush rt->from in rt6_uncached_list_flush_dev().
> > ipv4: Call rt_add_uncached_list() if !do_cache in ip_route_input_slow().
> >
> > Kyle Bader (1):
> > block: only fail dma-buf bios that need block layer PI
> >
> > Kyle Zeng (6):
> > batman-adv: mcast: validate tracker padding before forwarding
> > mm/khugepaged: flush deferred unmaps before dropping a failed folio
> > net/sched: sch_qfq: prevent aggregate self-replacement
> > tcp: wait for TIME_WAIT teardown before freeing per-netns ehash
> > ip6mr: Serialize multicast router socket ownership
> > mptcp: pm: kernel: use RCU to free endpoint listeners
> >
> > Kylie C (1):
> > drm/amd/display: Don't select zero V_TOTAL_MIN/MAX on seamless boot
> >
> > Lance Yang (2):
> > mm/ksm: fix userfaultfd protection during merge and unmerge
> > khugepaged: fix readahead lock inversion in collapse_file()
> >
> > Laveesh Bansal (1):
> > block: only serialize elevator switches of the same queue
> >
> > Lee Jones (1):
> > ASoC: SOF: Intel: hda-sdw-bpt: Stop active DMA before closing BPT streams
> >
> > Leo Liu (1):
> > drm/amdgpu: cancel idle work in hw_init failure paths for vcn/uvd/vce/jpeg
> >
> > Leo Yan (1):
> > Revert "perf/aux: Allocate non-contiguous AUX pages by default"
> >
> > Leon Romanovsky (1):
> > dma-buf: Restore the scatterlist entry count before freeing
> >
> > Li RongQing (1):
> > virtio_ring: reset IN_ORDER state in virtqueue_init()
> >
> > Li Zhe (2):
> > mm/hugetlb: fix mremap move length truncation
> > mm/hugetlb: fix mremap deadlock when PMD sharing is possible
> >
> > Linfeng Sun (8):
> > vdpa_sim: serialize IOTLB updates with dataplane access
> > vdpa: invalidate DMA mappings before releasing memory
> > vhost: fix dirty logging for in-order used ring entries
> > vhost: reject invalid IOTLB update permissions
> > vhost-scsi: validate event queue descriptor direction
> > vhost-scsi: reject delayed virtqueue setup
> > vhost: reject backend enable without a kick file
> > vhost-vdpa: initialize state before publishing cdev
> >
> > Linus Torvalds (2):
> > vfs: fix take_dentry_name_snapshot() semantics
> > Linux 7.4-rc2
> >
> > Liu Changjie (1):
> > can: peak_usb: pcan_usb_fd_decode_buf(): accept short uCAN
> > end-of-list records
> >
> > Lorenzo Bianconi (9):
> > net: stmmac: drop split frames on AF_XDP zero-copy RX
> > net: stmmac: drop multi-buffer frames in XDP mode
> > net: stmmac: copy XDP metadata in AF_XDP zero-copy RX
> > net: stmmac: fix VLAN tag stripping on short and non-linear RX frames
> > net: stmmac: fix XDP RX buffer DMA sync length
> > net: stmmac: initialize est_lock at probe time
> > net: stmmac: pass the desired EST enable state to est_configure()
> > net: stmmac: re-apply taprio offload in __stmmac_open() and
> > stmmac_resume()
> > net: stmmac: set XDP metadata length on the page_pool RX path
> >
> > Lorenzo Stoakes (ARM) (5):
> > mm/vma: fix expansion of VMA_MIXEDMAP_BIT VMAs
> > mm: do not unintentionally overwrite atomic VMA flags
> > mm/vma: avoid losing atomic VMA flags when setting sticky VMA flags
> > mm/vma: update VMA iterator state on error in new VMA merge
> > fs/proc/task_mmu: fix missed VMAs when reading /proc/PID/maps and friends
> >
> > Lu Yao (1):
> > drm/i915/gem: Reset err for each fence entry
> >
> > Lucas Tanure (2):
> > drm/vc4: hdmi: always cancel the scrambling work synchronously
> > drm/vc4: hdmi: enable scrambling before the TMDS clock starts
> >
> > Luiz Augusto von Dentz (4):
> > Bluetooth: hci_sync: Fix invalid Supervision_Timeout in LE Set
> > Default Rate
> > Bluetooth: hci_core: Convert hci_conn flags to a bitmap
> > Bluetooth: L2CAP: Hold incoming data until encryption key size is known
> > Bluetooth: hci_sync: Update the CIS host feature when enabling LE
> >
> > Maoxia (1):
> > virtio_pci: add missing newline to the pmcsr error message
> >
> > Marco Giunta (3):
> > ALSA: hda: aw88399: use auto-cleanup for ACPI subsystem ID string
> > ALSA: hda: aw88399: add missing MODULE_AUTHOR to I2C driver
> > ASoC: aw88399: move library exports to SND_SOC_AW88399_LIB namespace
> >
> > Marco Ziliani (1):
> > ata: libata-pmp: disable the SEMB port on Marvell 88SM9705
> >
> > Mario Limonciello (1):
> > drm/amd/pm: track BACO state in the SMU v11 ArmD3 sequence
> >
> > Mario Limonciello (AMD) (1):
> > iommu/amd: Enable PerfOpt automatically for integrated GPUs
> >
> > Masafumi Suzuki (1):
> > sctp: account for chunk padding in sctp_init_cause()
> >
> > Matheus Alves de Almeida (2):
> > fat: preallocate space before expanding in fat_cont_expand()
> > fat: hold truncate_lock in fat_write_failed()
> >
> > Matthew Schwartz (1):
> > drm/amd/display: Keep the nominal vtotal while VRR is inactive
> >
> > Matthew Whitehead (1):
> > scsi: aha1542: Remove unneeded scsi_dma_unmap() call
> >
> > Matthias Goergens (4):
> > udf: don't let the extent type hide an exhausted free-space table extent
> > udf: check the unallocated space table when it is loaded
> > udf: fix preallocation discarding before an empty allocation extent
> > udf: don't use eloc after the end of the unallocated space table
> >
> > Matus Skvarla (1):
> > net/9p: add vsock transport
> >
> > Maxime Chevallier (1):
> > net: Use a dedicated flag to track disabled napi instances
> >
> > Maíra Canal (3):
> > drm/vc4: Publish the output fence outside of job_lock
> > drm/vc4: Drop the BO reservations outside of job_lock
> > drm/v3d: Widen cache_clean_lock over the whole L2TCACTL sequence
> >
> > Melissa Wen (1):
> > drm/amd/display: Signal PQ EOTF in FreeSync infopacket for DP HDR
> >
> > Michael Bommarito (1):
> > 9p/trans_virtio: reject mount tags longer than NAME_MAX at probe
> >
> > Michael Grzeschik (6):
> > net/9p/usbg: also disable endpoints on p9_usbg_close
> > net/9p/usbg: set client to Disconnected on usb9pfs_disable
> > net/9p/usbg: always reset completion when disconnecting
> > net/9p/usbg: call disable_usb9pfs() from usb9pfs_disable()
> > net/9p/usbg: fix out_req buffer leak in disable_usb9pfs
> > net/9p/usbg: remove bogus context initialization in alloc_requests
> >
> > Michael McAllister (1):
> > Bluetooth: qca: Fix the WCN3950 NVM baud rate offset
> >
> > Michal Wilczynski (1):
> > drm/imagination: Align rogue_fwif_hwrtdata to 64 bytes
> >
> > Michał Kopeć (2):
> > firmware: coreboot: Don't skip CBMEM entries outside of known memory
> > ALSA: hda/core: Stop capability walk on empty capability header
> >
> > Miguel Ojeda (1):
> > rust: cpufreq: fix `undocumented_unsafe_blocks` in `PolicyCpu::from_cpu()`
> >
> > Mike Rapoport (Microsoft) (2):
> > mm/cma: accept memory of multi-range CMA areas
> > mm/cma: accept memory of CMA areas reserved at a fixed address
> >
> > Mikhail Gavrilov (1):
> > drm/amd/display: set allow_freesync before validating a new stream
> >
> > Milan Milicevic (2):
> > drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for navi10_ih
> > drm/amdgpu: publish IH enabled before PSP programs IH_RB_CNTL
> >
> > Mingbing Zhai (1):
> > virtio_balloon: initialize wakeup_lock before virtqueues are set up
> >
> > Misha Nasledov (1):
> > drm/amd/display: Drop clock requirements on DCN32 when no
> > displays are active
> >
> > Mitul Golani (1):
> > drm/i915/display: Allow port sync on PTL
> >
> > Mohamed Yassine Jebabli (1):
> > ALSA: hda/tas2781: Only accept CRC-less V1 data if all entries are valid
> >
> > Mohit Sharma (1):
> > ASoC: qcom: q6apm: Guard callbacks until probe data is ready
> >
> > Mukul Joshi (1):
> > drm/amdgpu: only tear down an active UALink accelerator
> >
> > Munique Feitoza (1):
> > drm/nouveau: Fix CE channel creation on pre-Kepler GPUs
> >
> > Myeonghun Pak (1):
> > hwmon: (sht15) Stop deferred work before releasing its resources
> >
> > Naman Jain (1):
> > x86/init: Initialize wall clock in get_rtc_noop()
> >
> > Namjae Jeon (1):
> > ntfs: don't allow resident values to overlap the attribute header
> >
> > Nathan Chancellor (2):
> > ext2: Make sbi an proper alias for EXT2_SB(sb) in ext2_fill_super()
> > lib/base64: silence clang-24 -Wconstant-conversion with diag pragmas
> >
> > Naushir Patuck (1):
> > dt-bindings: pwm: Add Raspberry Pi RP1 PWM controller
> >
> > Nguyen Dinh Phi (1):
> > vsock: reject negative tv_usec in SO_VM_SOCKETS_CONNECT_TIMEOUT
> >
> > Nguyen Ngoc Thang (1):
> > net: phy: don't require RTNL to detach a PHY from an unregistered netdev
> >
> > Nguyen Thanh Nhat (1):
> > ALSA: hda/realtek: Add quirk for Acer Predator PHN16-71
> >
> > Nickolai Zeldovich (2):
> > panic: zero the dynamically allocated taint buffer
> > sched/deadline: Fix this_bw on class change of a dying task
> >
> > Niklas Cassel (10):
> > ata: libata-eh: Retry non-NCQ commands when their sense data asks for it
> > null_blk: fix opening closed zones at the active zone limit
> > null_blk: don't finish zones to set them read-only or offline
> > null_blk: clean up setting zones read-only or offline
> > ata: libata-scsi: fix MODE SELECT handling of data after the mode page
> > ata: libata-scsi: do not accept subpage code FFh in MODE SELECT
> > ata: libata-scsi: reject MODE SELECT mode pages with a wrong SPF bit
> > ata: libata-scsi: fix MODE SELECT field pointer for unsupported subpages
> > ata: libata-scsi: fix MODE SELECT field pointer for block
> > descriptor length
> > ata: libata-scsi: pass the whole mode page to the MODE SELECT handlers
> >
> > Nilay Shroff (1):
> > nvmet: cache passthru reference in __nvmet_req_complete()
> >
> > Oliver Hartkopp (6):
> > can: replace ARPHRD_CAN type checks with can_get_ml_priv()
> > can: isotp: check the return values of can_rx_register() in isotp_bind()
> > can: protect the receive lists with a per-device lock
> > can: raw, isotp: copy socket options outside of lock_sock()
> > can: proc: skip stats calculation after reset in can_stat_update()
> > can: proc: remove pointers from CAN specific proc output
> >
> > Omokefe Emmanuel Onanaroghene (1):
> > 9p: fix kernel-doc warning for enum p9_session_flags
> >
> > Orkun Emin Sarı (1):
> > io_uring: only wait for in-flight requests if the closing task
> > uses the ring
> >
> > Pavel Begunkov (1):
> > io_uring: add feature flag for dma-buf support
> >
> > Pedro Falcato (1):
> > ext2: take invalidate_lock in ext2_write_failed()
> >
> > Peter Hunt (1):
> > net: wwan: mhi_wwan_ctrl: send a DTR drop before it can be coalesced
> >
> > Peter Zijlstra (2):
> > locking/osq: Switch osq_wait_next()/atomic_cmpxchg() ordering
> > locking/osq: Fix unlink queue corruption
> >
> > Petr Mladek (1):
> > MAINTAINERS: Add new "printk" mailing list for PRINTK, PRINTK
> > INDEXING, and VSPRINTF
> >
> > Prasad Koya (1):
> > macvlan: fix allmulti reference counting in passthru mode
> >
> > Prike Liang (7):
> > drm/amdgpu/mes: skip unmap queue notification during GPU reset
> > drm/amdgpu/uvd: don't allocate or lock BOs in the direct IB test
> > drm/amdgpu/userq: wait for GPU reset before mapping or unmapping queues
> > drm/amdgpu: finish GPU recovery callbacks before restarting schedulers
> > drm/amdgpu: stop the schedulers before preparing the GPU reset
> > drm/amdgpu/vce: don't allocate a scheduler fence in the direct IB test
> > drm/amdgpu: stop GPU recovery wait for the JPEG/VCN idle work
> >
> > Puranjay Mohan (1):
> > bpf: Drop percpu_counter from the htab element count
> >
> > Qianghua Wang (2):
> > ASoC: Intel: soc-acpi: use dummy topology for SN624x
> > ASoC: codecs: sn624x-sdca: limit DMIC capture to 2 channels
> >
> > Qihang (2):
> > xfrm: interface: validate the IP header on xmit
> > cipso: fix optlen corruption in cipso_v4_delopt()
> >
> > Qiliang Yuan (3):
> > nvmet: drop the extra RCU grace period in nvmet_ns_disable()
> > srcu: Add list_splice_init_srcu()
> > nvme: wait for SRCU readers before splicing the namespace list
> >
> > Qingfang Deng (1):
> > tcp: initialize send sequence numbers before deferring TFO
> >
> > Qu Wenruo (4):
> > btrfs: always remove quota_root from dirty_cowonly_roots
> > btrfs: cleanup qgroup swapped blocks at root release
> > btrfs: cleanup dirty_cowonly_roots during btrfs_free_fs_roots()
> > btrfs: fix the fsverity callback where unexpected range is verified
> >
> > Rafael Medina (1):
> > ALSA: hda/ca0132: Restore AE-5 audio registers after LED strip send
> >
> > Ravi Bangoria (3):
> > perf/amd/ibs: Reset CPU0 IBS state on syscore resume
> > perf/amd/ibs: Fix kernel address leak via REGS_USER and REGS_INTR
> > perf/amd/ibs: Simplify event state handling with IBS_CAPS_DIS
> >
> > Ravi Singh (1):
> > xfs: mark i_mode=0 and shut down on attr fork inactivation failure
> >
> > Ray Zhang (1):
> > net: count last skb of each sk_backlog pass in __release_sock()
> >
> > Razvan Dinculescu (1):
> > ALSA: hda/hdmi: Don't share an assigned converter on NVIDIA codecs
> >
> > Reid Downing (1):
> > xfs: fix wrong compat fields in xfs_ioctl32_bstat_copyin()
> >
> > Reinette Chatre (1):
> > MAINTAINERS: Add Ben Horgan as fs/resctrl reviewer
> >
> > Richard Fitzgerald (5):
> > firmware: cs_dsp: Fix memory leak on cs_dsp_power_up() error path
> > ASoC: wm_adsp: Prevent negative string length in wm_adsp_control_add()
> > ALSA: hda: cs35l56: Fix mixed cleanup and goto in cs35l56_hda_fw_load()
> > ALSA: doc: cs35l56: Update calibration write failure message info
> > ALSA: hda: cs35l56: Stop cs_dsp before calling cs_dsp_power_down()
> >
> > Ridge Lomont (1):
> > x86/kcfi: Don't emit KCFI_REFERENCE() in modules
> >
> > Rik van Riel (1):
> > mm/cma: don't release CMA pages still in use
> >
> > Riley (1):
> > ALSA: usb-audio: Add quirk for Yamaha ZG02
> >
> > Ritesh Harjani (IBM) (1):
> > mm/huge_memory: set the mmu_gather page size in zap_huge_pud()
> >
> > Rodnei Cilto (1):
> > ASoC: amd: yc: Add DMI quirk for Lenovo V15 AMN G6
> >
> > Roman Demidov (1):
> > drm/amd/display: Fix NULL deref in dcn401_update_clocks_update_dtb_dto
> >
> > Roman Li (1):
> > drm/amd/display: Reset DET of HUBPs without a plane before
> > outstanding updates
> >
> > Rosen Penev (8):
> > 9p/xen: Use array for data rings
> > spi: acpi: only look up the IRQ of confirmed SPI devices
> > x86/csum: Relax the len and proto constraints in 32-bit csum_ipv6_magic()
> > drm/nouveau/fifo: map Kepler video engine contexts non-privileged
> > drm/nouveau/nvkm: clear use.enabled when subdev init fails
> > MIPS: Avoid dead code/data elimination when using recordmcount
> > MIPS: boot: compressed: place .rodata.* and discard .MIPS.abiflags
> > MIPS: boot: compressed: fix the vmlinuz link with ld.lld
> >
> > Runyu Xiao (1):
> > can: proc: reset pkg_stats atomics individually
> >
> > SJ Park (3):
> > mm/damon/sysfs-schemes: hold damon_sysfs_lock in target_metric_store()
> > mm/damon/core: move static variable last_nr_regions to damon_ctx
> > mm/damon/core: move static variable rotation to damon_ctx
> >
> > Sabrina Dubroca (1):
> > xfrm: espintcp: reorder operations within espintcp_init_sk
> >
> > Sahil Chandna (1):
> > net: mana: Add support to process throttled EQEs
> >
> > Salvatore Dipietro (1):
> > mm/page_alloc: avoid direct reclaim and compaction for costly
> > __GFP_NORETRY allocations
> >
> > Samarth Narang (1):
> > mm/ksm: keep soft-dirty when merging a page
> >
> > Samiullah Khawaja (1):
> > mm/gup: check folio->mapping under folio lock in memfd_pin_folios()
> >
> > Sasha Levin (7):
> > ALSA: memalloc: Free the new pages when WC DMA mapping fails
> > ALSA: hda/core: Fix double free on stream page allocation failure
> > rust: bindings: derive Zeroable for bindgen's opaque array wrappers
> > selftests/configfs: fix the build on 32-bit architectures
> > selftests: ublk: fix the build and file offsets on 32-bit
> > selftests/io_uring: cast optval through uintptr_t in mini_liburing.h
> > nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for KIOXIA XG10d
> >
> > Sean Christopherson (7):
> > KVM: nSVM: Check validity of vmcs01 save area copied from SMRAM on RSM
> > KVM: x86/mmu: Conditionally resched when retrying gPTE walk on
> > A/D update failure
> > KVM: x86: Conditionally resched when restarting REP string emulation
> > KVM: nVMX: Process each host MSR entry at most once when
> > unwinding failed VM-Entry
> > KVM: x86/mmu: Cap number of parent PTEs per SP at 1000 (the
> > arbitrary rmap limit)
> > KVM: x86: Unconditionally reset MMU context when emulating INIT
> > KVM: x86: Flush guest TLB when emulating a RESET to strictly
> > honor the spec
> >
> > Sean Rhodes (1):
> > firmware: coreboot: Fix CFR error-pointer handling warning
> >
> > Sergii Ushakov (2):
> > virtio-blk: clamp max_segments to virtqueue ring size
> > virtio-blk: clamp max_segments to virtqueue ring size
> >
> > Shakeel Butt (2):
> > kernfs: avoid READ_ONCE() on a kgid_t in kernfs_new_node()
> > io_uring/sqpoll: do the return-to-userspace work in the SQPOLL thread
> >
> > Shang En Sim (2):
> > io_uring/cancel: count all requests that a CANCEL_ALL cancels
> > io_uring/poll: cancel all matching requests in one pass
> >
> > Shao Mingyin (8):
> > scsi: target: tcmu: Fix divide-by-zero in data_pages_per_blk store
> > virtio-blk: Fix zone append sector reporting in batched completion
> > zloop: fix the error code in the blk_mq_alloc_disk message
> > zloop: reject mismatched conventional zone files on restore
> > nvmet: take subsys->lock when forcing reconnects for tbkas
> > nvmet: bound the traddr and trsvcid configfs writes
> > nvmet: drop the redundant auth check in nvmet_parse_io_cmd()
> > ata: libata-scsi: set the field pointer when rejecting CDL
> >
> > Shivam Madlani (1):
> > ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP OmniBook 7
> >
> > Shuai Liu (1):
> > io_uring/sqpoll: don't set IO_SQ_THREAD_SHOULD_STOP on thread exit
> >
> > Shubham Antil (2):
> > xfrm: zero-initialise km_event in the replay-notify path
> > vhost-scsi: zero misaligned I/O bounce pages
> >
> > Sinan Turunc (3):
> > ALSA: line6: Reject capture buffers smaller than two packets
> > ALSA: usx2y: Require a buffer of two URBs
> > ALSA: usx2y: Guard the playback copy
> >
> > Sreeraj S Kurup (2):
> > nvmet: use appropriate types for authentication payload lengths
> > ALSA: control: Clear user-provided numid before adding a control
> >
> > Stefan Binding (2):
> > ALSA: hda: cs35l41: Add common wait_for_boot api and reset_and_boot api
> > ASoC: cs35l41: Use common wait_for_boot and reset_and_boot apis
> >
> > Stefano Garzarella (1):
> > 9p: fix privport option setting wrong RDMA field
> >
> > Stefano Radaelli (1):
> > ASoC: wm8904: Enable FLL when switching an active SYSCLK to FLL
> >
> > Stjepan Poljak (1):
> > ALSA: usb-audio: don't resubmit MIDI URBs at once on -EPIPE
> >
> > Suraj Kandpal (1):
> > drm/i915/display: Limit NVL TRANS_VTOTAL.Vtotal skip to A-step
> >
> > Sven Eckelmann (11):
> > batman-adv: tpmeter: fix u32 truncation of reported bytes
> > batman-adv: dat: initialize orig_node of unfilled candidate slots
> > batman-adv: fix skb leak when hard_iface is being released
> > batman-adv: stop originator purge worker before freeing TT
> > batman-adv: tt: only transmit local ROAM flag together with DEL
> > batman-adv: tt: clear ROAM flag when re-adding a pending local client
> > batman-adv: tt: send ROAM_ADV on each roamed back client
> > batman-adv: tt: ignore ROAM flag of received ADD changes
> > batman-adv: tt: only update flags for TT events
> > batman-adv: tt: don't drop local events queued during TVLV update
> > batman-adv: tt: limit local table to single TVLV response size
> >
> > T.J. Mercier (1):
> > mm: memcontrol: fix NULL pointer deref and UAF from
> > high_work_func() on dying memcg
> >
> > Takashi Iwai (1):
> > ALSA: pcm: Prevent O_APPEND open on OSS streams
> >
> > Takashi Sakamoto (2):
> > firewire: ohci: avoid potential deadlock when queueing AT local requests
> > ALSA: firewire: fix inverted streaming speed between tx and rx streams
> >
> > Tal Zussman (2):
> > vhost-vdpa: fix pinned page leak in vhost_vdpa_pa_map() error path
> > vhost-vdpa: unpin mappings by range
> >
> > Tang Bin (1):
> > ASoC: codecs: lpass-rx-macro: fix PM ref leak in swclk_gate_enable
> >
> > Thomas Fourier (2):
> > btrfs: zoned: fix double free of bitmaps on clone failure
> > net: ipa: Fix double free of the interrupt structure on config error
> >
> > Thomas Gleixner (1):
> > x86/entry: Fix ptrace regression
> >
> > Thorsten Blum (3):
> > hwrng: virtio - prevent use-after-free after a failed restore
> > ALSA: usx2y: Use prepare_inurb() in usb_stream_start()
> > x86/boot: Fix off-by-one error in sme_clear_pgd()
> >
> > Timur Stukan (2):
> > bonding: 3ad: don't set BOND_LINK_FAIL on a slave that is not up
> > bonding: fix missing down path on speed/duplex failure after FAIL->UP
> >
> > Tobias Wilken (1):
> > Bluetooth: MGMT: Return RFKILLED for Set Powered on a blocked controller
> >
> > Toke Høiland-Jørgensen (1):
> > wifi: mac80211: reinstate IEEE80211_TX_CTL_AMPDU flag in
> > ieee80211_tx_prep_agg()
> >
> > Tung Nguyen (1):
> > tipc: reject attaching bearer of different media to the same
> > occupied device
> >
> > Tvrtko Ursulin (2):
> > drm/sched: Fix out of bounds entity priority check
> > drm/sched: Adjust run-queue when changing priority at runtime
> >
> > Valentin Kindschi (2):
> > Bluetooth: hci_sync: re-enable legacy advertising on resume
> > Bluetooth: hci_sync: pause advertising for the scan address update
> >
> > Vas Zayarskiy (1):
> > hwmon: (aquacomputer_d5next) Avoid truncating scaled sensor readings
> >
> > Vidya Srinivas (2):
> > drm/i915/display: Single scaler per pipe on WCL
> > drm/i915/display: Disable pipe joiner on WCL
> >
> > Ville Syrjälä (1):
> > drm/i915/vrr: Fix intel_vrr_dcb_vmin_vblank_start()
> >
> > Vincent Cloutier (1):
> > ALSA: pcm: Allow HW_REFINE queries with mapped buffers
> >
> > Vincent Jardin (1):
> > hwmon: (pmbus/core) Register the thermal sensors with a 0-based index
> >
> > Vincent Mailhol (1):
> > can: dev: can_dropped_invalid_skb: drop CAN XL frames on non-CAN
> > XL devices
> >
> > Vincent YUE (1):
> > scsi: mpt3sas: Register devices during SANITIZE
> >
> > Vlad Poenaru (1):
> > bnxt_en: Don't keep MSI-X vectors added before FW reserves them
> >
> > Vladimir Zapolskiy (2):
> > drm/panel: visionox-r66451: Send the brightness value MSB first
> > drm/panel: visionox-r66451: Wait longer after the panel reset
> >
> > Vlastimil Babka (SUSE) (2):
> > MAINTAINERS: add Johannes as the page allocator co-maintainer
> > MAINTAINERS: move SLAB ALLOCATOR under MEMORY MANAGEMENT
> >
> > Wang Wensheng (1):
> > printk_ringbuffer: Fix space_used() when blk_lpos->next overflows
> >
> > Wayne Lin (1):
> > drm/amd/display: add missing CRC engine 1 registers
> >
> > Wei Lixiang (1):
> > ASoC: amd: yc: drop duplicated DMI quirk entries
> >
> > Wei Wang (1):
> > arm64: suspend: Save and restore TPIDR2_EL0 across CPU suspend
> >
> > Wei-Shuo Chen (1):
> > virtio: use consistent virtqueue terminology
> >
> > Weibin Liu (1):
> > spi: amd: validate FIFO usage before executing message
> >
> > Weigang He (1):
> > wifi: mac80211: reload TDLS header pointer after skb_linearize()
> >
> > Wentao Liang (1):
> > ALSA: caiaq: free the EP4 URB when input setup fails
> >
> > Werner Sembach (1):
> > drm/i915/display: Add quirk to force backlight type on some TUXEDO devices
> >
> > Wilfred Mallawa (1):
> > xfs: fix unwind handling during xfs_mount_sysfs_init()
> >
> > Xia Yan (3):
> > veth: keep carrier off when resizing channels with a down peer
> > selftests: net: check veth carrier after changing channel counts
> > ipv6: fix device binding after failed datagram connect
> >
> > Xiang Mei (1):
> > vdpa: fix double free of the reply skb in
> > vdpa_nl_cmd_dev_config_get_doit()
> >
> > Xu Yunxiang (2):
> > bpf: Propagate scalar precision through stack arguments
> > selftests/bpf: Exercise stack argument precision on state reuse
> >
> > Yafang Shao (1):
> > mm/migrate: snapshot the source nid before the misplaced migration
> >
> > Yehyeong Lee (1):
> > 9p/xen: validate the response size from the backend
> >
> > Yifan Zhang (3):
> > Bluetooth: validate retained LE Create CIS command length
> > Bluetooth: validate retained LE Set CIG Parameters command length
> > ksmbd: require NUL-terminated EA names
> >
> > Yifei Gao (1):
> > 9p/xen: fix refcount leak in p9_xen_response() on wrong tag
> >
> > Yili Zhang (1):
> > dma-buf: Fix IOVA offset when linking phys vecs to sgt
> >
> > Yilin Zhang (1):
> > mptcp: do not use Fast Open on MP_JOIN subflows
> >
> > Yingjie Wang (4):
> > scsi: bsg: Report synchronous data copyback failures
> > scsi: bsg: Report io_uring data copyback failures
> > ipv6: reject wrapped temporary address preferred lifetimes
> > nvmet: reject keep-alive timeouts that would overflow
> >
> > Yitang Yang (1):
> > ublk: add missing DEL_DEV_ASYNC to unprivileged permission check
> >
> > Yizhou Zhao (6):
> > 9p: use fc->net_ns for network namespace in RDMA and socket transports
> > net/9p/usbg: fix descriptor cleanup use-after-free
> > net/9p/usbg: fix prefix matching in device lookup
> > net/9p/usbg: Fix use-after-free on usb9pfs_clear_tx
> > 9p/xen: drain response work after unbinding IRQ
> > net/9p/usbg: Fix use-after-free in disable_usb9pfs()
> >
> > Yonghong Song (1):
> > selftests/bpf: Fix callback recursion test with noipa global func
> >
> > YouYou Yu (1):
> > quota: initialize dquot cache before mounting rootfs
> >
> > Yu Zhang (3):
> > scsi: target: Fix demo-mode dynamic ACL dev-entry UAF vs LUN teardown
> > ptp: fix use-after-free in extts_fifo_show() reading tsevqs unlocked
> > vhost-vdpa: drop the parent's vq callback before the call fd is released
> >
> > YuanZhe Liu (6):
> > ALSA: us122l: Add missing NULL check in usb_stream_hwdep_mmap()
> > ALSA: us122l: Fix NULL dereference at hwdep open and release
> > ALSA: usx2y: Initialize idle URBs before submitting streams
> > ALSA: hwdep: Serialize DSP load requests
> > ALSA: bcd2000: Fix use-after-free of MIDI URBs on file close
> > ALSA: usx2y: Refuse a retried DSP load after a failure
> >
> > Yuanfu Xie (3):
> > 9p: don't decrement a server-owned zero nlink
> > 9p: fall back to the normal open path for non-regular files
> > 9p: do not store the create fid on special files
> >
> > Yuanhe Shu (1):
> > scsi: target: Verify the iSCSI ISID is null-terminated
> >
> > Yuansheng Yang (1):
> > io_uring/rsrc: hold uring_lock across index-alloc put_user
> >
> > Yuho Choi (3):
> > virtio_blk: Reset device on probe error paths after DRIVER_OK
> > iommu/virtio: Reset device before deleting virtqueues on probe failure
> > vdpa/snet: Don't discard the DPU error in snet_send_ctrl_msg()
> >
> > Yunye Zhao (1):
> > virtio_blk: freeze the virtqueue layout at probe time
> >
> > Yuqiang Sun (3):
> > bpf: lwt: Free the skb when bpf_xmit() fails to expand the headroom
> > nvme: Do not drop the cdev reference twice when cdev_device_add() fails
> > ALSA: usb-audio: qcom: Check the return value of qmi_handle_init()
> >
> > Zac Lanzon (1):
> > hwmon: (asus_rog_ryujin) Fix pump control source on the Ryujin III
> >
> > Zack Rusin (1):
> > x86/vmware: Fix i386 high-bandwidth hypercall arguments
> >
> > Zenghui Yu (Huawei) (3):
> > mm/page_alloc: mark pages freed by __free_pages_core() as not tagged
> > selftests/mm: fix khugepaged_race build with older glibc
> > virtio_pci: don't take the MSI mutex under cpu_hotplug_lock
> >
> > Zhan Xusheng (1):
> > ntfs: don't allow compression on volumes with clusters larger than 4K
> >
> > Zhang Heng (4):
> > ALSA: hda/realtek: Fix DAC binding for Lenovo Legion Pro 7 16ARX8H
> > ALSA: hda/realtek: Fix DAC binding for Legion Pro 7 16ARX8H variant
> > ALSA: hda/realtek: Fix pop noise on ASUS PRIME B650M-K
> > ALSA: hda: cs35l41: Add support for HP OmniBook 7 Laptop 16-ay0xxx
> >
> > Zhang Yi (1):
> > ASoC: codecs: ES8389: Fix the issue of hpf_freq keep increasing
> >
> > Zhao Gongyi (2):
> > arm64: mm: validate /dev/mem mmap ranges without overflow
> > ata: libata-scsi: reject data-in commands with a data-out buffer
> >
> > Zhao Zhang (1):
> > 9p: fix caches_show() out-of-bounds write
> >
> > Zhe Liu (1):
> > blk-iocost: account flush sequence latency only once
> >
> > Zhi-Jun You (4):
> > net: ethernet: mtk_wed: skip ring reset in wdma_tx_ring_setup for WED v3
> > net: ethernet: mtk_wed: fix reset condition for rx wdma
> > net: ethernet: mtk_wed: free up rings during detach
> > net: ethernet: mtk_wed: setup WDMA_RING_TX(0) for non-DBDC MT7986
> >
> > Zhou Qiuyue (1):
> > ipv6: raw: fix use-after-free in rawv6_send_hdrinc()
> >
> > Zhuangzhuang Wang (1):
> > locking/lockdep: Fix inverted "on"/"last" CPU label in
> > lockdep_print_held_locks()
> >
> > Zijing Yin (1):
> > wifi: cfg80211: fix out-of-bounds read in valid_rule()
> >
> > Zizhi Wo (1):
> > block: partitions: reject GPT entries with starting_lba > ending_lba
> >
> > ahmad baghereslami (1):
> > ALSA: hda/conexant: Add mute LED quirk for HP ZBook 17 G3
> >
> > chenglong.ma (1):
> > vduse: fix VA/PA confusion in the coherent page fault path
> >
> > guolingxing (3):
> > btrfs: sysfs: restore NOFS context on early return in
> > btrfs_sysfs_add_block_group_type()
> > btrfs: verity: propagate orphan insertion errors when enabling verity
> > btrfs: prevent deleting the wrong subvolume by ID
> >
> > luyuantao (1):
> > drm/panic: Fix the loop that causes kmsg to not display correctly
> >
> > renpanpan (2):
> > ALSA: usb-audio: Fix card name for CVT Touch Device (1ff7:0f33)
> > drm/amdgpu: Only enable HDMI audio if display supports it
> >
> > sungbyeongchan (1):
> > virtio_ring: use shadow flags when detaching split descriptors
> >
> > yinguobing (1):
> > ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 (ALC256, 19e5:320d)
> >
> > zhang jiao (1):
> > virtio_ring: Initialize id field in packed indirect descriptors
> >

Attachment: Screenshot_2026-11-09_11-20-27.png
Description: PNG image