Linux 7.0-rc5

[Linus Torvalds]

It looks like things are starting to calm down - rc5 is smaller than
the previous rc's this merge window, although it still tracks a bit
larger than rc5s historically do. I'll still take it as a good sign
overall.

The diffstat looks fairly normal - half drivers (gpu and networking,
but unusually some serial updates too). But on the whole it's all
pretty small - most of the commits are small few-liners.

Outside of drivers, it's the usual mixed bag - core networking, some
filesystem updates, bpf, selftests and some architecture fixes.

So while the rc's have trended bigger than usual this release, on the
whole it all continues to look fairly innocuous. Please keep testing,

                    Linus

---

Adam Ford (1):
      pmdomain: mediatek: Fix power domain count

Aditya Garg (1):
      HID: appletb-kbd: add .resume method in PM

Adrian Freund (1):
      HID: logitech-hidpp: Enable MX Master 4 over bluetooth

AlanSong-oc (1):
      crypto: padlock-sha - Disable for Zhaoxin processor

Alessio Belle (3):
      drm/imagination: Fix deadlock in soft reset sequence
      drm/imagination: Synchronize interrupts before suspending the GPU
      drm/imagination: Disable interrupts before suspending the GPU

Alex Deucher (11):
      drm/amdgpu/mmhub2.0: add bounds checking for cid
      drm/amdgpu/mmhub2.3: add bounds checking for cid
      drm/amdgpu/mmhub3.0.1: add bounds checking for cid
      drm/amdgpu/mmhub3.0.2: add bounds checking for cid
      drm/amdgpu/mmhub3.0: add bounds checking for cid
      drm/amdgpu/mmhub4.1.0: add bounds checking for cid
      drm/amdgpu/mmhub4.2.0: add bounds checking for cid
      drm/amdgpu/gmc9.0: add bounds checking for cid
      drm/amdgpu: rework how we handle TLB fences
      drm/amdgpu: apply state adjust rules to some additional HAINAN vairants
      drm/radeon: apply state adjust rules to some additional HAINAN vairants

Alex Hung (1):
      drm/amd/display: Fix gamma 2.2 colorop TFs

Anas Iqbal (1):
      net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths

Andrei Vagin (1):
      binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4

Andy Nguyen (1):
      drm/amd: fix dcn 2.01 check

Anirudh Rayabharam (Microsoft) (2):
      mshv: refactor synic init and cleanup
      mshv: add arm64 support for doorbell & intercept SINTs

Antheas Kapenekakis (1):
      iommu: Fix mapping check for 0x0 to avoid re-mapping it

Ard Biesheuvel (1):
      x86/hyperv: Use __naked attribute to fix stackless C function

Ashutosh Dixit (1):
      drm/xe/oa: Allow reading after disabling OA stream

Bart Van Assche (2):
      include/linux/local_lock_internal.h: Make this header file again
compatible with sparse
      PM: runtime: Fix a race condition related to device removal

Ben Horgan (2):
      arm_mpam: Fix null pointer dereference when restoring bandwidth counters
      arm_mpam: Disable preemption when making accesses to fake MSC in
kunit test

Benjamin Tissoires (2):
      selftests/hid: fix compilation when bpf_wq and hid_device are not exported
      HID: bpf: prevent buffer overflow in hid_hw_request

Benoît Sevens (1):
      HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

Bibo Mao (1):
      LoongArch: KVM: Fix typo issue in kvm_vm_init_features()

Breno Leitao (1):
      perf/x86: Move event pointer setup earlier in x86_pmu_enable()

Brian Nguyen (1):
      drm/xe: Skip over non leaf pte for PRL generation

Calvin Owens (1):
      drm/amd/display: Fix uninitialized variable use which breaks full LTO

Chen Ni (2):
      soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource()
in qmc_qe_init_resources()
      mtd: rawnand: cadence: Fix error check for dma_alloc_coherent()
in cadence_nand_init()

Cheng-Yang Chou (1):
      crypto: arm64/aes-neonbs - Move key expansion off the stack

Chris Down (1):
      mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()

Christian Eggers (3):
      Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU
      Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU
      Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy

Christophe JAILLET (1):
      i2c: fsi: Fix a potential leak in fsi_i2c_probe()

Chuck Lever (2):
      NFSD: Defer sub-object cleanup in export put callbacks
      NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd

Claudiu Beznea (2):
      reset: rzg2l-usbphy-ctrl: Check pwrrdy is valid before using it
      arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2

Conor Dooley (1):
      riscv: dts: microchip: add can resets to mpfs

Cosmin Ratiu (1):
      net/mlx5: qos: Restrict RTNL area to avoid a lock cycle

Cristian Marussi (1):
      firmware: arm_scmi: Fix NULL dereference on notify error path

Damien Le Moal (2):
      ata: libata-core: disable LPM on ADATA SU680 SSD
      ata: libata-scsi: report correct sense field pointer in
ata_scsiop_maint_in()

Daniel Borkmann (3):
      clsact: Fix use-after-free in init/destroy rollback asymmetry
      bpf: Fix sync_linked_regs regarding BPF_ADD_CONST32 zext propagation
      selftests/bpf: Add a test cases for sync_linked_regs regarding
zext propagation

Daniel Schaefer (1):
      HID: intel-thc-hid: Set HID_PHYS with PCI BDF

Daniel Wade (2):
      bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR
      selftests/bpf: Add tests for maybe_fork_scalars() OR vs AND handling

Daniele Ceraolo Spurio (1):
      drm/xe/guc: Fail immediately on GuC load error

Danilo Krummrich (5):
      driver core: generalize driver_override in struct device
      docs: driver-model: document driver_override
      hwmon: axi-fan: don't use driver_override as IRQ name
      sh: platform_early: remove pdev->driver_override check
      driver core: platform: use generic driver_override infrastructure

Dapeng Mi (2):
      perf/x86/intel: Add missing branch counters constraint apply
      perf/x86/intel: Fix OMR snoop information parsing issues

Deepanshu Kartikey (2):
      wifi: mac80211: check tdls flag in ieee80211_tdls_oper
      atm: lec: fix use-after-free in sock_def_readable()

Denis Benato (1):
      HID: asus: add xg mobile 2022 external hardware support

Dev Jain (1):
      mm/rmap: fix incorrect pte restoration for lazyfree folios

Dipayaan Roy (1):
      net: mana: fix use-after-free in mana_hwc_destroy_channel() by
reordering teardown

Dmitry Baryshkov (1):
      Bluetooth: qca: fix ROM version reading on WCN3998 chips

Eric Biggers (1):
      lib/crypto: powerpc: Add powerpc/aesp8-ppc.S to clean-files

Eric Dumazet (2):
      ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS
      bonding: prevent potential infinite loop in bond_header_parse()

Eric Woudstra (1):
      netfilter: nf_flow_table_ip: reset mac header before vlan push

Fabrizio Castro (1):
      arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes

Fedor Pchelkin (2):
      net: macb: fix use-after-free access to PTP clock
      net: macb: fix uninitialized rx_fs_lock

Felix Fietkau (2):
      mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations
      wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

Felix Gu (7):
      cache: starfive: fix device node leak in starlink_cache_init()
      cache: ax45mp: Fix device node reference leak in ax45mp_cache_init()
      firmware: arm_scpi: Fix device_node reference leak in probe path
      spi: amlogic: spifc-a4: Remove redundant clock cleanup
      spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()
      spi: axiado: Fix double-free in ax_spi_probe()
      irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in rpmi_sysmsi_probe()

Filipe Manana (4):
      btrfs: log new dentries when logging parent dir of a conflicting inode
      btrfs: check for NULL root after calls to btrfs_extent_root()
      btrfs: check for NULL root after calls to btrfs_csum_root()
      btrfs: reserve enough transaction items for qgroup ioctls

Finn Thain (1):
      mtd: Avoid boot crash in RedBoot partition table parser

Florian Westphal (3):
      netfilter: conntrack: add missing netlink policy validations
      netfilter: revert nft_set_rbtree: validate open interval overlap
      netfilter: bpf: defer hook memory release until rcu readers are done

Gabor Juhos (1):
      i2c: pxa: defer reset on Armada 3700 when recovery is used

Geert Uytterhoeven (2):
      arm64: dts: renesas: r8a78000: Fix out-of-range SPI interrupt numbers
      firmware: arm_scmi: Spelling s/mulit/multi/, s/currenly/currently/

Guanghui Feng (1):
      iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry

Guenter Roeck (3):
      crypto: ccp - Fix leaking the same page twice
      wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not
enough headroom
      hwmon: (max6639) Fix pulses-per-revolution implementation

Hans de Goede (2):
      HID: input: Drop Asus UX550* touchscreen ignore battery quirks
      HID: input: Add HID_BATTERY_QUIRK_DYNAMIC for Elan touchscreens

Helge Deller (1):
      parisc: Flush correct cache in cacheflush() syscall

Hugo Villeneuve (1):
      regulator: dt-bindings: fix typos in regulator-uv-* descriptions

Hyunwoo Kim (4):
      bridge: cfm: Fix race condition in peer_mep deletion
      netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
      ksmbd: fix use-after-free of share_conf in compound request
      ksmbd: fix use-after-free in durable v2 replay of active file handles

Ian Forbes (1):
      drm/vmwgfx: Don't overwrite KMS surface dirty tracker

Ian Ray (1):
      NFC: nxp-nci: allow GPIOs to sleep

Ignat Korchagin (1):
      MAINTAINERS: update email address for Ignat Korchagin

Ihor Solodrai (2):
      bpf: Fix exception exit lock checking for subprogs
      selftests/bpf: Add tests for bpf_throw lock leak from subprogs

Ilpo Järvinen (7):
      serial: 8250: Protect LCR write in shutdown
      serial: 8250_dw: Avoid unnecessary LCR writes
      serial: 8250: Add serial8250_handle_irq_locked()
      serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling
      serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm
      serial: 8250: Add late synchronize_irq() to shutdown to handle
DW UART BUSY
      serial: 8250_dw: Ensure BUSY is deasserted

Imre Deak (1):
      drm/i915/dmc: Fix an unlikely NULL pointer deference at probe

Ira Weiny (1):
      nvdimm/bus: Fix potential use after free in asynchronous initialization

Jakub Kicinski (2):
      net: shaper: protect late read accesses to the hierarchy
      net: shaper: protect from late creation of hierarchy

Jamal Hadi Salim (1):
      net/sched: teql: Fix double-free in teql_master_xmit

Jeff Layton (2):
      sunrpc: fix cache_request leak in cache_release
      nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

Jenny Guanni Qu (5):
      netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
      netfilter: xt_time: use unsigned int for monthday bit shift
      netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
      bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
      selftests/bpf: Add tests for sdiv32/smod32 with INT_MIN dividend

Jens Axboe (3):
      io_uring/poll: fix multishot recv missing EOF on wakeup race
      io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF
      io_uring/kbuf: propagate BUF_MORE through early buffer commit path

Jesse.Zhang (1):
      drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

Jianbo Liu (2):
      net/mlx5e: Prevent concurrent access to IPSec ASO context
      net/mlx5e: Fix race condition during IPSec ESN update

Jiayuan Chen (3):
      serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
      net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
      net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()

Jiri Olsa (1):
      ftrace: Use hash argument for tmp_ops in update_ftrace_direct_mod

Joe Damato (1):
      iommu/amd: Block identity domain when SNP enabled

Joe Lawrence (2):
      objtool/klp: fix data alignment in __clone_symbol()
      objtool/klp: fix mkstemp() failure with long paths

Johan Hovold (3):
      spi: fix use-after-free on controller registration failure
      spi: fix statistics allocation
      i2c: cp2615: fix serial string NULL-deref at probe

Johannes Berg (2):
      wifi: mac80211_hwsim: fully initialise PMSR capabilities
      wifi: mac80211: remove keys after disabling beaconing

Johannes Thumshirn (2):
      btrfs: pass 'verbose' parameter to btrfs_relocate_block_group
      btrfs: don't take device_list_mutex when querying zone info

Jonas Karlman (1):
      drm/bridge: dw-hdmi-qp: fix multi-channel audio output

Jonathan Cavitt (1):
      drm/pagemap_util: Ensure proper cache lock management on free

Joseph Salisbury (1):
      cifs: smb1: fix comment typo

Josh Law (2):
      lib/bootconfig: check xbc_init_node() return in override path
      tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure

Josh Poimboeuf (2):
      livepatch/klp-build: Fix inconsistent kernel version
      objtool: Fix Clang jump table detection

Jouni Högander (2):
      drm/i915/psr: Disable PSR on update_m_n and update_lrr
      drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state

Junrui Luo (1):
      bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler

Justin Chen (1):
      net: bcmgenet: increase WoL poll timeout

Kamal Dasu (2):
      mtd: rawnand: serialize lock/unlock against other NAND operations
      mtd: rawnand: brcmnand: skip DMA during panic write

Kees Cook (1):
      fs/tests: exec: Remove bad test vector

Kevin Hao (2):
      net: macb: Introduce gem_init_rx_ring()
      net: macb: Reinitialize tx/rx queue pointer registers and rx
ring during resume

Kohei Enju (1):
      igc: fix missing update of skb->tail in igc_xmit_frame()

Koichiro Den (1):
      PCI: endpoint: pci-epf-test: Roll back BAR mapping when subrange
setup fails

Krzysztof Kozlowski (1):
      arm_mpam: Force __iomem casts

Kumar Kartikeya Dwivedi (1):
      bpf: Release module BTF IDR before module unload

Kuniyuki Iwashima (2):
      wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
      af_unix: Give up GC if MSG_PEEK intervened.

Kyle Meyer (1):
      x86/platform/uv: Handle deconfigured sockets

Lad Prabhakar (4):
      arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0 card regulator
      arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0 regulator
      arm64: dts: renesas: r9a09g077: Fix CPG register region sizes
      arm64: dts: renesas: r9a09g087: Fix CPG register region sizes

Lee Jones (3):
      HID: core: Mitigate potential OOB by removing bogus memset()
      HID: logitech-hidpp: Prevent use-after-free on force feedback
initialisation failure
      HID: multitouch: Check to ensure report responses match the request

Li Xiasong (1):
      MPTCP: fix lock class name family in pm_nl_create_listen_socket

Linus Torvalds (1):
      Linux 7.0-rc5

Lizhi Hou (1):
      iommu/sva: Fix crash in iommu_sva_unbind_device()

Lorenzo Bianconi (1):
      net: airoha: Remove airoha_dev_stop() in airoha_remove()

Lu Baolu (1):
      iommu/vt-d: Only handle IOPF for SVA when PRI is supported

Luiz Augusto von Dentz (3):
      Bluetooth: ISO: Fix defer tests being unstable
      Bluetooth: HIDP: Fix possible UAF
      Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ

Lukas Johannes Möller (3):
      Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
      Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
      netfilter: nf_conntrack_sip: fix Content-Length u32 truncation
in sip_help_tcp()

Luke Wang (1):
      mmc: sdhci: fix timing selection for 1-bit bus width

Maarten Lankhorst (1):
      drm: Fix use-after-free on framebuffers and property blobs when
calling drm_dev_unplug

Maciej Andrzejewski ICEYE (1):
      serial: uartlite: fix PM runtime usage count underflow on probe

Manivannan Sadhasivam (2):
      PCI/pwrctrl: Ensure that remote endpoint node parent has supply
requirement
      PCI/pwrctrl: Create pwrctrl devices only for PCI device nodes

Maramaina Naresh (1):
      spi: geni-qcom: Fix CPHA and CPOL mode change detection

Mark Harmstone (2):
      btrfs: hold block group reference during entire move_existing_remap()
      btrfs: check block group before marking it unused in
balance_remap_chunks()

Martin Roukala (né Peres) (1):
      serial: 8250_pci: add support for the AX99100

Masami Hiramatsu (Google) (1):
      ring-buffer: Fix to update per-subbuf entries of persistent ring buffer

Matthew Brost (4):
      drm/xe: Always kill exec queues in xe_guc_submit_pause_abort
      drm/xe: Forcefully tear down exec queues in GuC submit fini
      drm/xe: Trigger queue cleanup if not in wedged mode 2
      drm/xe: Open-code GGTT MMIO access protection

Matthew Schwartz (1):
      mmc: sdhci-pci-gli: fix GL9750 DMA write corruption

Matthew Wilcox (1):
      tee: shm: Remove refcounting of kernel pages

Maíra Canal (1):
      pmdomain: bcm: bcm2835-power: Increase ASB control timeout

Meghana Malladi (1):
      net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode

Michael Grzeschik (1):
      Bluetooth: hci_sync: Fix hci_le_create_conn_sync

Michal Swiatkowski (1):
      libie: prevent memleak in fwlog code

Mikko Perttunen (1):
      i2c: tegra: Don't mark devices with pins as IRQ safe

Minhong He (1):
      ipv6: add NULL checks for idev in SRv6 paths

Miquel Raynal (5):
      dt-bindings: mtd: st,spear600-smi: Fix description
      dt-bindings: mtd: st,spear600-smi: #address/size-cells is mandatory
      dt-bindings: mtd: st,spear600-smi: Fix example
      mtd: spi-nor: Fix RDCR controller capability core check
      mtd: spi-nor: Rename spi_nor_spimem_check_op()

Muhammad Hammad Ijaz (1):
      net: mvpp2: guard flow control update with global_tx_fc in
buffer switching

Mukesh R (1):
      mshv: pass struct mshv_user_mem_region by reference

Namjae Jeon (2):
      ksmbd: unset conn->binding on failed binding request
      ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION

Nathan Chancellor (1):
      ARM: multi_v7_defconfig: Drop duplicate CONFIG_TI_PRUSS=m

Nicholas Carlini (1):
      ksmbd: fix share_conf UAF in tree_conn disconnect

Nicolas Cavallari (1):
      wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times

Nicolas Pitre (1):
      vt: save/restore unicode screen buffer for alternate screen

Nikola Z. Ivanov (1):
      net: usb: aqc111: Do not perform PM inside suspend callback

Olivier Sobrie (1):
      mtd: rawnand: pl353: make sure optimal timings are applied

Pablo Neira Ayuso (4):
      nf_tables: nft_dynset: fix possible stateful expression memleak
in error path
      netfilter: nft_ct: drop pending enqueued packets on removal
      netfilter: xt_CT: drop pending enqueued packets on template removal
      netfilter: nf_tables: release flowtable after rcu grace period on error

Paul Chaignon (1):
      selftests/bpf: Fix pkg-config call on static builds

Paul SAGE (1):
      tg3: replace placeholder MAC address with device property

Paulo Alcantara (2):
      smb: client: fix krb5 mount with username option
      smb: client: fix generic/694 due to wrong ->i_blocks

Peddolla Harshavardhan Reddy (1):
      wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down

Peng Zhang (1):
      serial: 8250: always disable IRQ during THRE test

Pepper Gray (1):
      arm64/scs: Fix handling of advance_loc4

Peter Zijlstra (2):
      x86/perf: Make sure to program the counter value for stopped
events on migration
      perf: Make sure to use pmu_ctx->pmu for groups

Petr Oros (1):
      iavf: fix VLAN filter lost on add/delete race

Pratap Nirujogi (2):
      drm/amdgpu: Fix ISP segfault issue in kernel v7.0
      ACPI: bus: Fix MFD child automatic modprobe issue

Praveen Talari (1):
      spi: geni-qcom: Check DMA interrupts early in ISR

Qu Wenruo (4):
      btrfs: fix a bug that makes encoded write bio larger than expected
      btrfs: do not touch page cache for encoded writes
      btrfs: fix an incorrect ASSERT() condition inside zstd_decompress_bio()
      btrfs: fix an incorrect ASSERT() condition inside lzo_decompress_bio()

Rafael J. Wysocki (2):
      sched: idle: Consolidate the handling of two special cases
      ACPI: processor: Fix previous acpi_processor_errata_piix4() fix

Rahul Bukte (1):
      drm/i915/gt: Check set_default_submission() before deferencing

Randy Dunlap (3):
      build_bug.h: correct function parameters names in kernel-doc
      drm/vmwgfx: fix kernel-doc warnings in vmwgfx_drv.h
      iommu/io-pgtable: fix all kernel-doc warnings in io-pgtable.h

Raul E Rangel (1):
      serial: 8250: Fix TX deadlock when using DMA

Richard Genoud (1):
      soc: fsl: qbman: fix race condition in qman_destroy_fq

Ryota Sakamoto (1):
      kunit: Add documentation of --list_suites

Sabrina Dubroca (1):
      mpls: add missing unregister_netdevice_notifier to mpls_init

Sachin Kumar (1):
      bpf: Fix constant blinding for PROBE_MEM32 stores

Saket Dumbre (1):
      ACPICA: Update the format of Arg3 of _DSM

Sanjay Yadav (1):
      drm/xe: Fix missing runtime PM reference in ccs_mode_store

Sanman Pradhan (5):
      hwmon: (pmbus/hac300s) Add error check for
pmbus_read_word_data() return value
      hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data()
return value
      hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before using
its return value
      hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data()
return value
      hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()

Saurabh Sengar (1):
      MAINTAINERS: Update maintainers for Hyper-V DRM driver

Shaurya Rane (1):
      Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user

Shawn Lin (1):
      soc: rockchip: grf: Add missing of_node_put() when returning

Srinivasan Shanmugam (1):
      drm/amd/display: Fix DisplayID not-found handling in
parse_edid_displayid_vrr()

Stanislav Kinsburskii (2):
      mshv: Fix use-after-free in mshv_map_user_memory error path
      mshv: Fix error handling in mshv_region_pin

Steven Rostedt (2):
      tracing: Fix failure to read user space from system call trace events
      tracing: Fix trace_marker copy link list updates

Suzuki K Poulose (1):
      arm64: realm: Fix PTE_NS_SHARED for 52bit PA support

Thomas Weißschuh (1):
      LoongArch: Only use SC.Q when supported by the assembler

Thorsten Blum (1):
      crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying

Tiezhu Yang (4):
      LoongArch: Give more information if kmem access failed
      LoongArch: Check return values for set_memory_{rw,rox}
      LoongArch: No need to flush icache if text copy failed
      LoongArch: BPF: Make arch_protect_bpf_trampoline() return 0

Tobi Gaertner (2):
      net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
      net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check

Tudor Ambarus (2):
      MAINTAINERS: remove Tudor Ambarus as SPI NOR maintainer
      MAINTAINERS: add Takahiro Kuwano as SPI NOR reviewer

Umesh Nerlige Ramappa (1):
      drm/xe/lrc: Fix uninitialized new_ts when capturing context timestamp

Uros Bizjak (3):
      x86/hyperv: Save segment registers directly to memory in
hv_hvcrash_ctxt_save()
      x86/hyperv: Use current_stack_pointer to avoid asm() in
hv_hvcrash_ctxt_save()
      x86/hyperv: Use any general-purpose register when saving %cr2 and %cr8

Vladimir Oltean (1):
      x86/entry/vdso: Fix path of included gettimeofday.c

Wang Tao (1):
      Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers

Wei Liu (2):
      x86/hyperv: print out reserved vectors in hexadecimal
      Revert "mshv: expose the scrub partition hypercall"

Wei Yang (1):
      mm/huge_memory: fix early failure try_to_migrate() when split
huge pmd for shared THP

Weiming Shi (2):
      nfnetlink_osf: validate individual option lengths in fingerprints
      icmp: fix NULL pointer dereference in icmp_tag_validation()

Wesley Atwell (1):
      netdevsim: drop PSP ext ref on forward failure

William Roche (1):
      x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs

Xi Ruoyao (2):
      LoongArch: Fix calling smp_processor_id() in preemptible code
      drm/amd/display: Wrap dcn32_override_min_req_memclk() in
DC_FP_{START, END}

Xiang Mei (3):
      wifi: mac80211: fix NULL deref in mesh_matches_local()
      udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
      net: bonding: fix NULL deref in bond_debug_rlb_hash_show

Xuewen Yan (1):
      tracing: Revert "tracing: Remove pid in task_rename tracing output"

Yang Yang (1):
      batman-adv: avoid OGM aggregation when skb tailroom is insufficient

Yazhou Tang (2):
      bpf: Reset register ID for BPF_END value tracking
      selftests/bpf: Add test for BPF_END register ID reset

Yeoreum Yun (1):
      firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap()

Zdenek Bouska (1):
      igc: fix page fault in XDP TX timestamps handling

Zhanjun Dong (1):
      drm/xe/guc: Ensure CT state transitions via STOP before DISABLED

ZhengYuan Huang (2):
      btrfs: tree-checker: fix misleading root drop_level error message
      btrfs: reject root items with drop_progress and zero drop_level

Zilin Guan (1):
      soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()