Linux 7.1-rc7

[Linus Torvalds]

So I wouldn't call rc7 small, but the rc's have definitely been
shrinking. The biggest single area here is the GPU fixes, and
networking isn't far behind, but on the whole things are calming down.
Knock wood.

The rest is pretty random and spread out - some architecture fixes
(mostly kvm-related), various random driver fixes, some filesystem
work, and a few build fixes for strange configs.

I don't get the feeling that there's anything really scary going on
that would cause delays to the release cycle. I do have some
unfortunate travel timing coming up, but not anything where I'd feel
like moving releases around would be useful.

Anyway, as things look now this is the last rc. Something can
obviously always come up and force us to change that, but please give
rc7 a whirl and keep testing for on emore week,

                 Linus

---

Abel Vesa (1):
      arm64: dts: qcom: glymur: Drop RPMh CXO clocks from QMP PHYs

Aleksander Pshenitsyn (1):
      ASoC: amd: acp70: add standalone RT721 SoundWire machine

Aleksandr Nogikh (1):
      signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()

Alex Deucher (1):
      drm/amdgpu/sdma7.1: fix support for disable_kq

Alexander Dahl (1):
      memory: atmel-ebi: Allow deferred probing

Alice Ryhl (2):
      rust: kasan/kbuild: fix rustc-option when cross-compiling
      rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES

Alysa Liu (1):
      drm/amdkfd: fix UAF race in destroy_queue_cpsch

Amirreza Zarrabi (1):
      tee: optee: prevent use-after-free when the client exits before
the supplicant

Amit Matityahu (1):
      timers/migration: Fix livelock in tmigr_handle_remote_up()

Andrew Martin (1):
      drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11

Andrzej Kacprowski (3):
      accel/ivpu: Add bounds check for firmware runtime memory
      accel/ivpu: Add bounds checks for firmware log indices
      accel/ivpu: Add buffer overflow check in MS get_info_ioctl

Andy Roulin (3):
      vxlan: vnifilter: send notification on VNI add
      vxlan: vnifilter: fix spurious notification on VNI update
      selftests: net: add vxlan vnifilter notification test

Andy Shevchenko (1):
      auxdisplay: max6959: use regmap_assign_bits() in max6959_enable()

Antoine Tenart (1):
      geneve: fix length used in GRO hint UDP checksum adjustment

Arnd Bergmann (2):
      tee: fix tee_ioctl_object_invoke_arg padding
      regulator: mt6363: select CONFIG_IRQ_DOMAIN

Arpith Kalaginanavoor (1):
      fs/qnx6: fix pointer arithmetic in directory iteration

Bharath Reddy (1):
      Bluetooth: fix memory leak in error path of hci_alloc_dev()

Chaitanya Kumar Borah (1):
      drm/i915: Fix color blob reference handling in intel_plane_state

Chancel Liu (1):
      ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write

Christian Brauner (1):
      pidfd: refuse access to tasks that have started exiting harder

Christian König (1):
      drm/amdgpu: fix waiting for all submissions for userptrs

Christoph Hellwig (3):
      xfs: drop the RTG reference later in xfs_ioc_rtgroup_geometry
      xfs: factor rtgroup geom write pointer reporting into a helper
      xfs: abort mount if xfs_fs_reserve_ag_blocks fails

Claudio Imbrenda (10):
      KVM: s390: Fix _gmap_unmap_crste()
      KVM: s390: Fix _gmap_crstep_xchg_atomic()
      KVM: s390: Avoid potentially sleeping while atomic when zapping pages
      KVM: s390: Fix guest / virtual address confusion in _essa_clear_cbrl()
      KVM: s390: vsie: Fix rmap handling in _do_shadow_crste()
      KVM: s390: Fix fault-in code
      KVM: s390: Lock pte when making page secure
      KVM: s390: Prevent memslots outside the ASCE range
      KVM: s390: Fix possible reference leak in fault-in code
      KVM: s390: Remove ptep_zap_softleaf_entry()

Clément Léger (1):
      io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries

Cryolitia PukNgae (1):
      Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard

Dai Ngo (2):
      xfs: fix use of uninitialized imap in xfs_fs_map_blocks error path
      xfs: fix overlapping extents returned for pNFS LAYOUTGET

Daniele Ceraolo Spurio (1):
      Revert "drm/xe/nvls: Define GuC firmware for NVL-S"

Dave Jones (1):
      NFS: write_completion: dereference loop-local req, not hdr->req

David Carlier (1):
      mm/hugetlb: restore reservation on error in hugetlb folio copy paths

David Glushkov (1):
      ASoC: amd: yc: Add MSI Raider A18 HX A9WJG to quirk table

David Thompson (1):
      net: lan743x: permit VLAN-tagged packets up to configured MTU

Davidlohr Bueso (1):
      locking/rtmutex: Skip remove_waiter() when waiter is not enqueued

Deepanshu Kartikey (1):
      wifi: mac80211: limit injected antenna index in
ieee80211_parse_tx_radiotap

Donet Tom (1):
      drm/amdgpu: Fix incorrect VRAM GART mappings on non-4K page size systems

Emmanuel Grumbach (3):
      wifi: iwlwifi: mvm: don't support the reset handshake for old firmwares
      wifi: iwlwifi: mvm: avoid oversized UATS command copy
      wifi: iwlwifi: pcie: simplify the resume flow if fast resume is not used

Eric Dumazet (3):
      ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
      ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
      bonding: annotate data-races arcound churn variables

Eva Kurchatova (1):
      tracing: Fix CFI violation in probestub being called by tprobes

Fedor Pchelkin (1):
      wifi: fix leak if split 6 GHz scanning fails

Fernando Fernandez Mancera (2):
      netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
      netfilter: synproxy: add mutex to guard hook reference counting

Florian Westphal (2):
      netfilter: conntrack_irc: fix possible out-of-bounds read
      netfilter: nft_byteorder: remove multi-register support

Gang Yan (1):
      mptcp: check desc->count in read_sock

Gao Xiang (1):
      erofs: fix use-after-free on sbi->sync_decompress

Geetha sowjanya (1):
      octeontx2-pf: Fix NDC sync operation errors

Geliang Tang (1):
      selftests: harness: fix pidfd leak in __wait_for_test

Georgiy Osokin (1):
      tee: shm: fix shm leak in register_shm_helper()

Gil Portnoy (3):
      ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers
      ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
      ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL

Guangshuo Li (1):
      dm cache policy smq: check allocation under invalidate lock

Hans Holmberg (1):
      xfs: handle racing deletions in xfs_zone_gc_iter_irec

Harish Kasiviswanathan (2):
      drm/amdgpu: Use asic specific pte_addr_mask
      drm/amdgpu: drm/amdgpu: Set correct DMA mask for gfx12.1

Harry Wentland (7):
      drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()
      drm/amd/display: Clamp VBIOS HDMI retimer register count to array size
      drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
      drm/amd/display: Use krealloc_array() in dal_vector_reserve()
      drm/amd/display: Reject gpio_bitshift >= 32 in
bios_parser_get_gpio_pin_info()
      drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
      drm/amd/display: Bound VBIOS record-chain walk loops

Harshal Dev (4):
      dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk
      soc: qcom: ice: Allow explicit votes on 'iface' clock for ICE
      arm64: dts: qcom: milos: Add power-domain and iface clk for ice node
      arm64: dts: qcom: eliza: Add power-domain and iface clk for ice node

Heiko Stuebner (1):
      mmc: dw_mmc-rockchip: Add missing private data for very old controllers

Huan He (1):
      mmc: sdhci-of-dwcmshc: Fix reset, clk, and SDIO support for Eswin EIC7700

Hyunwoo Kim (3):
      KVM: arm64: vgic-its: Drop the translation cache reference only
for the erased entry
      KVM: arm64: Take the SRCU lock for page table walks in fault
injection and AT emulation
      KVM: arm64: Reassign nested_mmus array behind mmu_lock

Ido Schimmel (1):
      ipv6: mcast: Fix use-after-free when processing MLD queries

Inochi Amaoto (2):
      mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation
      mmc: litex_mmc: Set mandatory idle clocks before CMD0

Jackie Dong (1):
      ASoC: amd: acp: Add DMI quirk for Lenovo Yoga Pro 7 15ASH11

Jakub Kicinski (1):
      Reapply "bnxt_en: bring back rtnl_lock() in the bnxt_open() path"

Jamal Hadi Salim (1):
      net/sched: act_api: use RCU with deferred freeing for action lifecycle

Jan Polensky (1):
      s390/bug: Always emit format word in __BUG_ENTRY

Jann Horn (3):
      fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios
      fuse: reject fuse_notify() pagecache ops on directories
      fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()

Jason Xing (1):
      xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()

Ji'an Zhou (2):
      futex/requeue: Prevent NULL pointer dereference in
remove_waiter() on self-deadlock
      ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on
linked streams

Jianyu Li (2):
      af_unix: Fix inq_len update problem in partial read
      af_unix: Add test for SCM_INQ on partial read

Jiayuan Chen (3):
      netfilter: nft_fib_ipv6: bail out of sibling walk if rt got unlinked
      netfilter: nft_ct: bail out on template ct in get eval
      ipv6: anycast: insert aca into global hash under idev->lock

Jisheng Zhang (1):
      mmc: sdhci: add signal voltage switch in sdhci_resume_host

Joanne Koong (1):
      iomap: avoid potential null folio->mapping deref during error reporting

Joey Gouly (1):
      KVM: arm64: Restore POR_EL0 access to host EL0

Johannes Berg (1):
      wifi: cfg80211: enforce HE/EHT cap/oper consistency

Jonas Jelonek (1):
      net: sfp: initialize i2c_block_size at adapter configure time

João Miguel (1):
      ASoC: amd: yc: Enable internal mic on MSI Bravo 17 C7VF

Julian Anastasov (1):
      ipvs: clear the svc scheduler ptr early on edit

Justin Lai (2):
      rtase: Reset TX subqueue when clearing TX ring
      rtase: Avoid sleeping in get_stats64()

Kamal Dasu (1):
      mmc: core: Fix host controller programming for fixed driver type

Kuniyuki Iwashima (3):
      net: Annotate sk->sk_write_space() for UDP SOCKMAP.
      tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
      hsr: Remove WARN_ONCE() in hsr_addr_is_self().

Kurt Kanzenbach (1):
      ptp: vclock: Switch from RCU to SRCU

Kyle Zeng (1):
      ALSA: seq: dummy: fix UMP event stack overread

Lad Prabhakar (1):
      mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC

Lee Jones (1):
      l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()

Leorize (1):
      drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs

Lianqin Hu (1):
      ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio

Linus Torvalds (1):
      Linux 7.1-rc7

Linus Walleij (1):
      ARM: dts: gemini: Fix partition offsets

Lorenzo Bianconi (2):
      net: airoha: Fix use-after-free in metadata dst teardown
      net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown

Lorenzo Stoakes (1):
      mm/hugetlb: avoid false positive lockdep assertion

Luiz Augusto von Dentz (3):
      Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
      Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer
      Bluetooth: MGMT: Fix backward compatibility with userspace

Manivannan Sadhasivam (7):
      soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get()
      soc: qcom: ice: Return -ENODEV if the ICE platform device is not found
      soc: qcom: ice: Return proper error codes from
devm_of_qcom_ice_get() instead of NULL
      mmc: sdhci-msm: Remove NULL check from devm_of_qcom_ice_get()
      scsi: ufs: ufs-qcom: Remove NULL check from devm_of_qcom_ice_get()
      arm64: defconfig: Enable PCI M.2 power sequencing driver
      soc: qcom: ice: Fix the error code when 'qcom,ice' property is not found

Marco Elver (1):
      s390: Implement _THIS_IP_ using inline asm

Mark Bloch (1):
      devlink: Release nested relation on devlink free

Masami Hiramatsu (Google) (1):
      tracing/probes: Point the error offset correctly for eprobe argument error

Matthew Wilcox (Oracle) (1):
      xfs: Remove mention of PageWriteback

Matthieu Baerts (NGI0) (3):
      mptcp: sockopt: check timestamping ret value
      mptcp: sockopt: set sockopt on all subflows
      mptcp: add-addr: always drop other suboptions

Maíra Canal (4):
      drm/v3d: Wait for pending L2T flush before cleaning caches
      drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
      drm/v3d: Skip CSD when it has zeroed workgroups
      drm/v3d: Fix global performance monitor reference counting

Michael Bommarito (1):
      Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig

Miguel Ojeda (1):
      rust: x86: support Rust >= 1.98.0 target spec

Mihai Sain (1):
      ARM: dts: microchip: sam9x7: fix GMAC clock configuration

Mike Rapoport (Microsoft) (3):
      userfaultfd: verify VMA state across UFFDIO_COPY retry
      userfaultfd: refuse to __mfill_atomic_pte() for unsupported VMAs
      userfaultfd: remove redundant check in vm_uffd_ops()

Muchun Song (3):
      mm/cma_debug: fix invalid accesses for inactive CMA areas
      mm/cma: fix reserved page leak on activation failure
      mm/hugetlb_vmemmap: fix incorrect vmemmap restore in rollback

Muhammad Bilal (7):
      drm/amdkfd: fix NULL dereference in get_queue_ids()
      accel/ethosu: fix IFM region index out-of-bounds in command stream parser
      accel/ethosu: reject NPU_OP_RESIZE commands from userspace
      accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85
      accel/ethosu: fix arithmetic issues in dma_length()
      accel/ethosu: reject DMA commands with uninitialized length
      accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate()

Nathan Chancellor (2):
      ARM: Do not select HAVE_RUST when KASAN is enabled
      cfi: Include uaccess.h for get_kernel_nofault()

Naveen Kumar Chaudhary (2):
      clockevents: Fix duplicate type specifier in stub function parameter
      time: Fix off-by-one in settimeofday() usec validation

NeilBrown (1):
      VFS: fix possible failure to unlock in nfsd4_create_file()

Niklas Schnelle (1):
      s390/configs: Enable IOMMUFD and VFIO cdev in defconfigs

Nikolay Kuratov (1):
      net/mlx5: Reorder completion before putting command entry in
cmd_work_handler

Niranjana Vishwanathapura (1):
      drm/xe/multi_queue: skip submit when primary queue is suspended

Nirmoy Das (1):
      ovl: keep err zero after successful ovl_cache_get()

Nithin Dabilpuram (1):
      octeontx2-af: npc: Fix CPT channel mask in npc_install_flow

Oliver Upton (2):
      KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX
      KVM: arm64: Correctly identify executable PTEs at stage-2

Oscar Maes (1):
      pcnet32: stop holding device spin lock during napi_complete_done

Pagadala Yesu Anjaneyulu (1):
      wifi: iwlwifi: mld: send tx power constraints before link activation

Paolo Abeni (5):
      mptcp: fix missing wakeups in edge scenarios
      mptcp: fix retransmission loop when csum is enabled
      mptcp: close TOCTOU race while computing rcv_wnd
      mptcp: allow subflow rcv wnd to shrink
      mptcp: fix uninit-value in mptcp_established_options

Peng Fan (1):
      soc: imx8m: Fix match data lookup for soc device

Pratik Vishwakarma (1):
      x86/CPU/AMD: Add more Zen6 models

Prike Liang (2):
      drm/amdgpu: unmap userq for evicting user queue
      drm/amdgpu: improve the userq seq BO free bit lookup

Priya Hosur (1):
      drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in
set_soft_freq_limited_range

Qihang (1):
      tee: fix params_from_user() error path in tee_ioctl_supp_recv

Qing Wang (1):
      rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()

Raf Dickson (1):
      vsock/vmci: fix sk_ack_backlog leak on failed handshake

Rajat Gupta (1):
      net/sched: fix pedit partial COW leading to page cache corruption

Ridong Chen (1):
      cgroup/cpuset: Change Ridong's email

Robertus Diawan Chris (1):
      tee: qcomtee: add missing va_end in early return
qcomtee_object_user_init()

Rong Zhang (1):
      ALSA: usb-audio: Set the value of potential sticky mixers to maximum

Sean Christopherson (7):
      KVM: SEV: Make it more obvious when KVM is writing back the
current PSC index
      KVM: SEV: Add an anonymous "psc" struct to track current PSC metadata
      KVM: SEV: Read start/end indices of PSC requests exactly once per #VMGEXIT
      KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying
      KVM: SEV: Move sev_free_vcpu() down below sev_es_unmap_ghcb()
      KVM: SEV: Decouple the need to sync the GHCB SA from the need to
free the SA
      KVM: SEV: Unmap and unpin the GHCB as needed on vCPU free

Sechang Lim (1):
      udp: clear skb->dev before running a sockmap verdict

SeongJae Park (1):
      mm/damon/ops-common: call folio_test_lru() after folio_get()

SeungJu Cheon (3):
      Bluetooth: RFCOMM: validate skb length in MCC handlers
      Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
      Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect

Shakeel Butt (1):
      memcg: use round-robin victim selection in refill_stock

Shivam Kalra (1):
      rust: helpers: add is_vmalloc_addr wrapper for NOMMU builds

Simona Vetter (1):
      drm/gem: Try to fix change_handle ioctl, attempt 4

Stepan Ionichev (2):
      auxdisplay: line-display: fix OOB read on zero-length message_store()
      auxdisplay: Kconfig: drop unneeded quotes in PANEL_BOOT_MESSAGE dep

Suman Ghosh (1):
      octeontx2-af: Fix initialization of mcam's entry2target_pffunc field

Sun Shaojie (2):
      cgroup/cpuset: Use effective_xcpus in partcmd_update add/del
mask calculation
      cgroup/cpuset: Add test cases for sibling CPU exclusion on
partition update

Sunil Khatri (2):
      drm/amdgpu/userq: remove the vital queue unmap logging
      drm/amdgpu/userq: move wptr_obj cleanup in mqd_destroy

Suraj Kandpal (1):
      Revert "drm/i915/backlight: Remove try_vesa_interface"

Tangudu Tilak Tirumalesh (2):
      Revert "drm/xe: Skip exec queue schedule toggle if queue is idle
during suspend"
      drm/xe: Clear pending_disable before signaling suspend fence

Tao Cui (2):
      mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation
      selftests: mptcp: add test for extra_subflows underflow on userspace PM

Tapio Reijonen (1):
      net: fec: fix pinctrl default state restore order on resume

Tejun Heo (1):
      sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()

Thomas Weißschuh (1):
      vdso/datastore: Mark vdso_k_*_data pointers as __ro_after_init

Thomas Zimmermann (1):
      drm/dumb-buffer: Drop buffer-size limits for now

Timur Kristóf (2):
      drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on all SI
      drm/amdgpu/gfxhub: Program CRASH_ON_*_FAULT bits to 0 as needed

Tony Luck (1):
      x86/resctrl: Only check Intel systems for SNC

Tristan Madani (1):
      netfilter: nft_tunnel: fix use-after-free on object destroy

Tudor Ambarus (5):
      firmware: samsung: acpm: Fix cross-thread RX length corruption
      firmware: samsung: acpm: Fix mailbox channel leak on probe error
      firmware: samsung: acpm: Fix false timeouts and Use-After-Free in polling
      firmware: samsung: acpm: Fix missing LKMM barriers in sequence allocator
      firmware: samsung: acpm: Fix infinite loop on sequence number exhaustion

Val Packett (1):
      arm64: dts: qcom: x1-dell-thena: remove i2c20 (battery SMBus)
and reserve its pins

Vitaly Prosyak (1):
      drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14)

Wupeng Ma (1):
      mm/memory-failure: fix hugetlb_lock AA deadlock in
get_huge_page_for_hwpoison

Xin Long (2):
      sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
      sctp: purge outqueue on stale COOKIE-ECHO handling

Yang Wang (4):
      drm/amd/pm: apply SMU 13.0.10 workaround during MP1 unload
      drm/amd/pm: fix smu13 power limit default/cap calculation
      drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2
      drm/amd/pm: zero unused SMU argument registers

Yicong Hui (1):
      drm/imx: Fix three kernel-doc warnings in dcss-scaler.c

Yiming Qian (1):
      netfilter: bridge: make ebt_snat ARP rewrite writable

Yin Tirui (2):
      mm/huge_memory: update file PUD counter before folio_put()
      mm/huge_memory: update file PMD counter before folio_put()

Yingjie Gao (2):
      xfs: fix error returns in CoW fork repair
      xfs: fix rtgroup cleanup in CoW fork repair

Yizhou Zhao (4):
      6lowpan: fix off-by-one in multicast context address compression
      net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
      appletalk: aarp: zero-initialize aarp_entry to prevent heap info leak
      net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr

Yuho Choi (1):
      ARM: socfpga: Fix OF node refcount leak in SMP setup

Yuqi Xu (3):
      wifi: nl80211: reject oversized EMA RNR lists
      net: rds: clear i_sends on setup unwind
      Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend

Zeyu WANG (1):
      Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK)

Zhan Xusheng (1):
      erofs: fix EFSCORRUPTED on multi-algorithm images in
z_erofs_map_sanity_check()

Zhang Cen (3):
      Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
      Bluetooth: MGMT: validate advertising TLV before type checks
      Bluetooth: bnep: reject short frames before parsing

Zhao Zhang (1):
      sctp: diag: reject stale associations in dump_one path

ZhaoJinming (1):
      net: bonding: fix NULL pointer dereference in bond_do_ioctl()

Zhi Li (1):
      dt-bindings: ethernet: eswin: fix hsp-sp-csr backward compatibility

Zhou Yuhang (1):
      kconfig: Fix repeated include selftest expectation

Zicheng Qu (1):
      tools/sched_ext: Fix scx_show_state per-scheduler state reads