Commit a55f7f5f29b3 for kernel

commit a55f7f5f29b32c2c53cc291899cf9b0c25a07f7c
Merge: 8b02520ec5f7 b4afe3fa76a8
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Apr 9 08:39:25 2026 -0700

    Merge tag 'net-7.0-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

    Pull networking fixes from Paolo Abeni:
     "Including fixes from netfilter, IPsec and wireless. This is again
      considerably bigger than the old average. No known outstanding
      regressions.

      Current release - regressions:

       - net: increase IP_TUNNEL_RECURSION_LIMIT to 5

       - eth: ice: fix PTP timestamping broken by SyncE code on E825C

      Current release - new code bugs:

       - eth: stmmac: dwmac-motorcomm: fix eFUSE MAC address read failure

      Previous releases - regressions:

       - core: fix cross-cache free of KFENCE-allocated skb head

       - sched: act_csum: validate nested VLAN headers

       - rxrpc: fix call removal to use RCU safe deletion

       - xfrm:
          - wait for RCU readers during policy netns exit
          - fix refcount leak in xfrm_migrate_policy_find

       - wifi: rt2x00usb: fix devres lifetime

       - mptcp: fix slab-use-after-free in __inet_lookup_established

       - ipvs: fix NULL deref in ip_vs_add_service error path

       - eth:
          - airoha: fix memory leak in airoha_qdma_rx_process()
          - lan966x: fix use-after-free and leak in lan966x_fdma_reload()

      Previous releases - always broken:

       - ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

       - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group
         dump

       - bridge: guard local VLAN-0 FDB helpers against NULL vlan group

       - xsk: tailroom reservation and MTU validation

       - rxrpc:
          - fix to request an ack if window is limited
          - fix RESPONSE authenticator parser OOB read

       - netfilter: nft_ct: fix use-after-free in timeout object destroy

       - batman-adv: hold claim backbone gateways by reference

       - eth:
          - stmmac: fix PTP ref clock for Tegra234
          - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling
          - ipa: fix GENERIC_CMD register field masks for IPA v5.0+"

    * tag 'net-7.0-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (104 commits)
      net: lan966x: fix use-after-free and leak in lan966x_fdma_reload()
      net: lan966x: fix page pool leak in error paths
      net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
      nfc: pn533: allocate rx skb before consuming bytes
      l2tp: Drop large packets with UDP encap
      net: ipa: fix event ring index not programmed for IPA v5.0+
      net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+
      MAINTAINERS: Add Prashanth as additional maintainer for amd-xgbe driver
      devlink: Fix incorrect skb socket family dumping
      af_unix: read UNIX_DIAG_VFS data under unix_state_lock
      Revert "mptcp: add needs_id for netlink appending addr"
      mptcp: fix slab-use-after-free in __inet_lookup_established
      net: txgbe: leave space for null terminators on property_entry
      net: ioam6: fix OOB and missing lock
      rxrpc: proc: size address buffers for %pISpc output
      rxrpc: only handle RESPONSE during service challenge
      rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()
      rxrpc: Fix leak of rxgk context in rxgk_verify_response()
      rxrpc: Fix integer overflow in rxgk_verify_response()
      rxrpc: Fix missing error checks for rxkad encryption/decryption failure
      ...