Well, this last week of the release was - once again - bigger than I
would have wished for, but hey, with the whole "new normal" thing, if
I delayed releases for that reason we'd probably never have a release
at all.

There are a number of fairly late reverts - the drm scheduling reverts
stand out, but there's a few other ones in here too. It may not be
pretty, but it's the correct way to deal with "oh, that code wasn't
ready and caused problems". People will be trying that again later.

But while the drm reverts stand out and are some of the bigger patches
in here, there's a lot of small fixes all over. Mostly in drivers, but
networking remained fairly active this last week too. And then there
are a few random patches to architecture files and perf core.

With this, the merge window for 7.3 obviously opens tomorrow, and I
already have 40 pending pull requests. I appreciate all the timely
people. You know who you are,

            Linus

---

Abel Vesa (1):
      pmdomain: qcom: rpmhpd: Add missing MXC and MMCX power domains for Eliza

Aditya Chillara (1):
      perf/core: Fix group leader use-after-free after sibling detach

Aleksandr Nogikh (1):
      firewire: ohci: fix NULL pointer dereference in ar_context_release

Alex Deucher (1):
      drm/amdgpu: fix missing check in vm_flush()

Alexandra Winter (1):
      net/dibs: Correct freeing of dmb_clientid_arr

Alexey Velichayshiy (1):
      netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM
in abort path

Ali Ahmet Memis (1):
      openrisc: signal: do not restore privileged SR bits on sigreturn

Andrey Golovko (1):
      regmap: sdw-mbq: don't call an unset readable_reg callback

AngeloGioacchino Del Regno (1):
      pmdomains: mediatek: Avoid setting RTFF's CLK_DIS before NRESTORE

Balamurugan C (3):
      ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in
NVL match table
      ASoC: Intel: sof_rt5682: Add HDMI-In capture with rt5682 support for NVL.
      ASoC: Intel: NVL: Add entry for HDMI-In capture support to
non-I2S codec boards.

Baul Lee (1):
      vxlan: do not arm the ageing timer on a device that is down

Binbin Zhou (1):
      mmc: loongson2: Fix sg iteration in data reorder functions

Candice Li (1):
      drm/amdgpu: validate GEM_CREATE domain combinations

Cengiz Can (1):
      gpio: sloppy-logic-analyzer: fix use-after-free via debugfs
trigger on unbind

Charles Keepax (1):
      regmap: sdw-mbq: Fix swap of timeout and retry times

Charlie-cy Wu (1):
      wifi: mt76: mt7921: refactor regd update to fix recursive mutex deadlock

Chengfeng Ye (1):
      ipv4: fix use-after-free in fib_nhc_update_mtu()

Christian Brauner (3):
      ovl: don't warn when the mount is completed from another user namespace
      binfmt_misc: don't warn when the mount is completed from another
user namespace
      selftests/filesystems: test completing a context from another
user namespace

Christoph Böhmwalder (1):
      drbd: don't leak the shared secret to unprivileged netlink dumps

Christoph Paasch (1):
      mailmap: add entries for Christoph Paasch

Christophe Leroy (CS GROUP) (1):
      gpiolib: Check gc->get_direction() before calling gpiod_get_direction()

Chuck Lever (2):
      net/tls: Fail tls_sw_splice_read() after a failed async decrypt
      selftests: tls: cover splice after a failed decrypt

Daniele Briguglio (1):
      clk: rockchip: rk3588: don't disable unused I2S MCLK output gates

Daniele Ceraolo Spurio (1):
      drm/xe/pxp: add termination on resume

David Rosca (6):
      drm/amdgpu: Reject UVD message with dimensions above 4096
      drm/amdgpu: Fix UVD dpb min size calculation for H264
      drm/amdgpu: Fix UVD decode image min size calculation
      drm/amdgpu: Fix UVD min buffer sizes
      drm/amdgpu: Implement insert_end for VCE 3
      drm/amdgpu: Reject UVD message with invalid number of h265 refs

Dmitry Osipenko (1):
      pmdomain: mediatek: Fix mt8183 hang on boot

Dmitry Torokhov (2):
      Input: sur40 - fix input device registration ordering
      Input: sur40 - fix V4L error path cleanup

Eric Dumazet (4):
      ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
      macvlan: inherit needed_headroom and needed_tailroom from lowerdev
      af_packet: Don't send zero-byte data in tpacket_snd().
      l2tp: fix tunnel and session refcount leak on seq_file release

Esteban Urrutia (2):
      regulator: dt-bindings: qcom,rpmh: Add support for PM8350B
      regulator: qcom-rpmh: Add support for PM8350B

Florian Westphal (4):
      rhashtable: fix false-positive lockdep splat on rhltable destruction
      netfilter: nfnetlink_log: wait for rcu grace period before
freeing pernet state
      netfilter: ipset: fix list type element drift bug
      netfilter: ipset: let destroy callbacks adjust ext mem size

Gajendra Uttamchand (1):
      drm/xe/lrc: document sentinel and make CTX_TIMESTAMP read TOCTOU-safe

Gao Xiang (1):
      erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms

Guangshuo Li (2):
      pmdomain: mediatek: fix remaining %pOF after of_node_put()
      drm/radeon: fix autosuspend cleanup during teardown

Haibo Chen (1):
      mmc: sdhci: make tuning_err a signed int

Herbert Xu (1):
      crypto: ccm - Set rfc4309 maxauthsize from child

Hongjie Fang (1):
      scsi: core: pair EH runtime PM get and put

Hui Su (1):
      tracing: Fix NULL pointer dereference in module event cache removal

Hyunjung Ko (3):
      net/sched: act_gact, act_police: range check the fallback control action
      net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
      selftests: tc-testing: add act_ct test for malformed header handling

Jakub Kicinski (5):
      eth: bnxt: cancel IRQ notifier before freeing affinity mask
      eth: bnxt: keep the aRFS rmap updated when TPH is enabled
      eth: bnxt: decrease indent in bnxt_request_irq()
      eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
      net: expect instance lock in netdev_queue_get_dma_dev()

Jamal Hadi Salim (2):
      net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
      net/sched: cls_bpf: reject dev-bound programs bound to a different device

Jasper Wise (1):
      spi: virtio: mark device ready before registering the controller

Jia Yao (3):
      drm/xe/guc_ads: allocate UM queues in a separate BO
      drm/xe/guc_ads: allocate UM queues in VRAM on dGFX
      drm/xe/guc_ads: use uncached mapping for UM queue BO

Jiawen Wu (1):
      net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling

Jiayuan Chen (1):
      tcp: fix icsk_ack.ato bitfield overflow

Jisheng Zhang (1):
      spi: dw: fix wrong RX_SAMPLE_DLY setting after resume

John Harrison (1):
      drm/connector/hdmi: Fix out of bounds memory read

Jon Hunter (1):
      arm64: tegra: Add EL2 virtual timer interrupt for Tegra194

Jonas Köppeler (1):
      veth: fix queue index used to wake the peer txq in veth_poll

Jordan Rhee (2):
      gve: fix zero-length skb frag with header-split
      gve: fix NULL dereference due to missing ptp adjfine

Julian Anastasov (3):
      ipvs: add totalconns for dest
      ipvs: properly update the overload flag on dest edit
      ipvs: revalidate ihl to prevent out-of-bounds access

Jun Yang (1):
      tipc: read le->link under the node lock in tipc_node_link_down()

Junjie Cao (2):
      gpio: ml-ioh: use raw_spinlock_t for the register lock
      gpio: ml-ioh: share the register lock across channels

Junrui Luo (1):
      drm/amdgpu: disallow multiple FENCE chunks in one submit

Jérémy Jean (4):
      sctp: validate cookie AUTH state before use
      netfilter: flowtable: publish GC-visible tuple last
      pid: reject allocations through dead ancestor pid namespaces
      io_uring/rsrc: reject overflowing regvec bvec byte counts

Karl Mehltretter (2):
      tick: Include ktime.h and jiffies.h in linux/tick.h
      pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()

Kefu Chai (1):
      libceph: tolerate addrvecs with multiple entries of the same type

Koichiro Den (1):
      NTB: ntb_netdev: Preserve RX queue depth on allocation failure

Konrad Dybcio (1):
      Revert "clk: qcom: regmap-phy-mux: Rework the implementation"

Krzysztof Kozlowski (2):
      clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall
on Eliza EVK
      dt-bindings: clock: Replace bouncing emails

Kuniyuki Iwashima (1):
      af_unix: Unlink scc_entry in unix_del_edge().

Kyle Zeng (2):
      perf: Reject exited events as group leaders
      ipvs: clear IPv4 options after rebasing tunnel ICMP errors

Lijo Lazar (1):
      drm/amdgpu: Prefer default discovery offset

Lin Xianglin (1):
      ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx

Linmao Li (2):
      drm/xe/oa: Fix sync entry leak on OA config emit failure
      drm/xe/oa: Check managed mutex initialization errors

Linus Torvalds (2):
      Revert "i2c: designware: defer probe if child GpioInt
controllers are not bound"
      Linux 7.2

Lizhi Hou (1):
      accel/amdxdna: Skip unmapped range in aie2_populate_range()

Maarten Lankhorst (1):
      drm/xe: Fix DPT allocation paths.

Marc Zyngier (1):
      clocksource/drivers/arm_arch_timer: Workaround bcm2712 broken
EL2 virtual timer

Mark Brown (1):
      regcache: Use a consistent sort for defaults table

Matthew Brost (1):
      drm/xe: Order ring writes before ring tail updates

Michael Neuling (1):
      riscv: lib: Fix ZBB strnlen reading past count boundary

Michael Reeves (1):
      arm64: dts: apple: t8122: Fix I2C resources

Michael Wu (1):
      tracing: Fix race between update_event_fields and, event_define_fields

Mikhail Gavrilov (1):
      Revert "wifi: mt76: Disable napi when removing device"

Mostafa Saleh (1):
      optee: ffa: Add NULL check in optee_ffa_lend_protmem

Myeonghun Pak (1):
      mmc: sdhci: unmap the bounce buffer before device release

Nathan Lucas (2):
      drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix
      drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE

Niels Pressel (1):
      rseq: Prevent hard lockup on granted time slice extension

Niranjan H Y (1):
      ASoC: tac5xx2-sdw: select REGMAP_SOUNDWIRE_MBQ

Oleksij Rempel (1):
      net: phy: realtek: fix EEE advertisement write on the internal
PHY MMD path

Pavitra Jha (2):
      libceph: fix multiple unsafe decodes in decode_locker()
      libceph: fix OOB read in decode_watchers() via missing bounds check

Pei Xiao (1):
      mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

Peter Ujfalusi (1):
      regcache: Sort the local copy of an unsorted reg_defaults array

Praveen Talari (1):
      pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0

Pu Lehui (1):
      riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions

Qing Ming (1):
      sctp: clear new_transport when removing a peer

Raag Jadav (1):
      drm/xe: Fix xe_device_probe() failure

Ralf Lici (4):
      ovpn: fix NULL dereference when killing missing key
      ovpn: finish crypto callback cleanup before peer release
      ovpn: run deferred work on a module-owned workqueue
      ovpn: defer key slot crypto freeing to workqueue

Raphael Zimmer (1):
      libceph: Avoid using invalid osd indices from primary_temp

Richard Weinberger (1):
      crypto: af_alg - Allow cbc(paes)

Rik van Riel (1):
      x86/CPU: Add a tlbi= cmdline switch

Robby Cai (1):
      regulator: fp9931: Fix VPOS/VNEG voltage selector table

Rosen Penev (1):
      ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

Rudi Heitbaum (1):
      ASoC: rt5645: Perform the initial jack detect at probe

Rui Qi (2):
      selftests/ftrace: Convert ELF entry point to file offset in uprobe test
      riscv: hwprobe: Register unaligned probes before usermode

Samuel Pitoiset (1):
      drm/amd/display: Fix NULL pointer dereference in
amdgpu_dm_crtc_set_vblank()

Sergey Lebedev (1):
      ASoC: rt1320: run the initialisation preset on the first hardware init

Shenghao Ding (1):
      ASoC: tas2781: fix clang build error for goto bypassing cleanup variable

Shixiong Ou (3):
      drm/log: Fix division by zero when scale module parameter is 0
      drm/log: Fix out-of-bounds read on empty message length
      drm/log: Fix infinite loop when scale is too large for display

Siddharth Vadapalli (1):
      net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

Sun Jian (2):
      net: fix skb length accounting after generic XDP frag adjustment
      veth: fix skb length accounting after XDP frag adjustment

Swark Yang (1):
      spi: dt-bindings: snps,dw-apb-ssi: Document Axiado AX3005

Takashi Iwai (2):
      ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
      ALSA: usb-audio: Fix mixer regression on SteelSeries Arctis Nova 5

Thorsten Blum (2):
      crypto: qce - fix error path in devm_qce_register_algs
      crypto: starfive - use scatterlist length before DMA mapping

Tvrtko Ursulin (19):
      Revert "drm/sched: Remove drm_sched_init_args->num_rqs"
      Revert "drm/xe: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/v3d: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/sched: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/panthor: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/panfrost: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/nouveau: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/msm: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/lima: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/imagination: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/etnaviv: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/amdgpu: Remove drm_sched_init_args->num_rqs usage"
      Revert "accel/ethosu: Remove drm_sched_init_args->num_rqs usage"
      Revert "accel/rocket: Remove drm_sched_init_args->num_rqs usage"
      Revert "accel/amdxdna: Remove drm_sched_init_args->num_rqs usage"
      Revert "drm/sched: Embed run queue singleton into the scheduler"
      Revert "drm/sched: Remove FIFO and RR and simplify to a single run queue"
      Revert "drm/sched: Switch default policy to fair"
      drm/sched: Mark fair policy as experimental

Uwe Kleine-König (1):
      m68k: Define NR_CPUS to 1

Vinay Belgaumkar (1):
      drm/xe: Fix a bug in pc_adjust_freq_bounds()

Vincent Guittot (1):
      sched: Update time before requeueing delayed entities

Vladislav Dronov (1):
      crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

Wei Fang (2):
      net: packet: fix wrong transport_header when sending VLAN-tagged frame
      net: tap: fix wrong transport_header when sending VLAN-tagged frame

Xiang Mei (Microsoft) (1):
      netfilter: ipset: fix refcount race between list:set GC and swap

Xu Rao (1):
      scsi: scsi_debug: Negate wrapped memcmp() result

Yang Wang (2):
      drm/amdgpu: check ASPM on the dGPU host link
      drm/amdgpu: fix nbif 6.3.1 l1 low power not functional

Yiming Zhu (1):
      ceph: fix MDS random selection readiness predicate

Yixun Lan (2):
      clk: spacemit: k3: fix USB2 bus clock
      clk: spacemit: k3: set hdma clock as critical

Yizhou Zhao (1):
      ipvs: separate destination availability state

Yuxiang Yang (1):
      sctp: fix use-after-free of cached ASCONF chunk

Zhan Xusheng (2):
      mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit
      ceph: use the mount idmap for the owner checks in the SET_LAYOUT ioctls

Zhang Changzhong (1):
      net/sched: cls_u32: skip hash tables in u32_bind_class()

Zhiling Zou (1):
      netfilter: bridge: release template ct on non-IP path

Zihan Xi (1):
      netfilter: nf_conntrack: defer invalid log until after unlock

Zizhi Wo (1):
      scsi: core: Do not block on tag allocation in scsi_eh_lock_door()