[GIT PULL] USB driver fixes for 7.3-rc2

The following changes since commit cee9395acd8043be0644b25c34bfa86623f2b935:

  Linux 7.3-rc1 (2026-08-30 13:34:40 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git tags/usb-7.3-rc2

for you to fetch changes up to c9273c83885835dbd1e8835d5665dfb8503d65e0:

  usb: typec: qcom-pmic-typec: drain cc_debounce_dwork if port_start() fails (2026-09-01 16:50:25 +0200)

----------------------------------------------------------------
USB fixes for 7.3-rc2

Here are some small USB driver fixes for reported problems and
regressions.  Include in here are:
  - xhci driver fixes
  - cdns3 driver fixes
  - usb gadget driver fixes for syzbot found problems
  - typec driver fixes for broken hardware and other bugs found
  - kernel data leaks in mdc800 driver
  - usb storage driver fixes
  - other small USB driver fixes

All of these have been in linux-next this week with no reported issues.

Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

----------------------------------------------------------------
Aleksandr Nogikh (1):
      usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs

Amit Sunil Dhamne (1):
      usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling

Andy Shevchenko (1):
      usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns()

Arthur Gautier (1):
      xhci: fix lost bounce buffers on TDs spanning several ring segments

Chang Wu (1):
      usb: typec: hd3ss3220: track VBUS enable state per consumer

Chen-Yu Tsai (1):
      usb: xhci: Fix HCS_ERST_MAX conversion

Elson Serrao (1):
      usb: dwc3: clear forceRM when issuing EndTransfer

Fan Wu (3):
      usb: typec: qcom-pmic: cancel reset_work on stop
      usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
      usb: typec: qcom-pmic-typec: drain cc_debounce_dwork if port_start() fails

Griffin Kroah-Hartman (1):
      usb: image: mdc800: change kmalloc() to kzalloc()

Ivy Lopez (1):
      usb: gadget: f_midi2: fix use-after-free in string attribute show path

Jameson Thies (1):
      usb: typec: ucsi: displayport: Fix OOB altmode array index

Jeffin Philip (3):
      usb: gadget: f_midi: initialize work in f_midi_alloc()
      usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
      usb: gadget: fix null pointer dereference in usb_put_function_instance()

Liu Qi (1):
      usb-storage: ene_ub6250: fix race between scan work and probe

Lovekesh Solanki (1):
      USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()

Marek Vasut (2):
      usb: typec: mux: Fix typec_switch_match()
      usb: typec: mux: avoid duplicated mux switches

Michal Pecio (1):
      usb: xhci: Fix isochronous scheduling regression

Myeonghun Pak (1):
      usb: storage: realtek_cr: fix use-after-free on disconnect

Pawel Laszczak (1):
      usb: cdnsp: fix wakeup from S3 after controller context loss

Radhey Shyam Pandey (1):
      usb: dwc3: google: Initialise probe properties with DWC3_DEFAULT_PROPERTIES

Sven Peter (1):
      usb: typec: tipd: Fix Thunderbolt altmode VDOs for cd321x

 drivers/usb/cdns3/cdnsp-gadget.c                   | 111 ++++++++++++++++++++-
 drivers/usb/cdns3/cdnsp-gadget.h                   |   1 +
 drivers/usb/cdns3/cdnsp-mem.c                      |  98 +++++++-----------
 drivers/usb/dwc3/dwc3-google.c                     |   1 +
 drivers/usb/dwc3/ep0.c                             |   2 +-
 drivers/usb/dwc3/gadget.c                          |  21 ++--
 drivers/usb/gadget/function/f_mass_storage.c       |   5 +-
 drivers/usb/gadget/function/f_midi.c               |   2 +-
 drivers/usb/gadget/function/f_midi2.c              |  17 ++--
 drivers/usb/gadget/functions.c                     |   2 +-
 drivers/usb/gadget/legacy/inode.c                  |   3 +-
 drivers/usb/host/xhci-mem.c                        |   2 +-
 drivers/usb/host/xhci-ring.c                       |  43 ++++++--
 drivers/usb/image/mdc800.c                         |   4 +-
 drivers/usb/storage/ene_ub6250.c                   |   2 +
 drivers/usb/storage/realtek_cr.c                   |   9 +-
 drivers/usb/typec/hd3ss3220.c                      |   9 +-
 drivers/usb/typec/mux.c                            |  21 +++-
 .../usb/typec/tcpm/qcom/qcom_pmic_typec_pdphy.c    |   2 +
 drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_port.c |   5 +
 drivers/usb/typec/tcpm/tcpm.c                      |  28 ++++--
 drivers/usb/typec/tipd/core.c                      |  17 +++-
 drivers/usb/typec/tipd/tps6598x.h                  |   4 +-
 drivers/usb/typec/ucsi/displayport.c               |   2 +-
 24 files changed, 284 insertions(+), 127 deletions(-)