c9021b8a05a9 Linux 5.15.35-xanmod1-tt 3cf637a698fc Merge branch '5.15' into 5.15-tt 16e4fc472371 Merge tag 'v5.15.35' into 5.15 81d8d30c35ed Linux 5.15.35 85f25bb9a005 ax25: Fix UAF bugs in ax25 timers 43c107021d91 ax25: Fix NULL pointer dereferences in ax25 timers da6509fba636 ax25: fix NPD bug in ax25_disconnect 1bf8946d5826 ax25: fix UAF bug in ax25_send_control() 452ae92b9906 ax25: Fix refcount leaks caused by ax25_cb_del() b982492ec3a1 ax25: fix UAF bugs of net_device caused by rebinding operation bc706d89199b ax25: fix reference count leaks of ax25_dev 9af0fd5c4453 ax25: add refcount in ax25_dev to avoid UAF bugs de6a76eea645 cpufreq: intel_pstate: ITMT support for overclocked system 74d23d422556 net: ipa: fix a build dependency 1648c7b450d8 soc: qcom: aoss: Fix missing put_device call in qmp_get d712aea3cd81 cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state 14785927a1d4 drm/i915: Sunset igpu legacy mmap support based on GRAPHICS_VER_FULL 4ef9951d0252 dma-direct: avoid redundant memory sync for swiotlb 111becd63e37 timers: Fix warning condition in __run_timers() cbdd7a33c533 dt-bindings: net: snps: remove duplicate name 83a4c1080e09 i2c: pasemi: Wait for write xfers to finish 44981e4cde68 smp: Fix offline cpu check in flush_smp_call_function_queue() 2f345bb14ad4 i2c: dev: check return value when calling dev_set_name() 6b4bf97587ef dm integrity: fix memory corruption when tag_size is less than digest size 0940795c6834 ARM: davinci: da850-evm: Avoid NULL pointer dereference 68a38b07f125 tick/nohz: Use WARN_ON_ONCE() to prevent console saturation c11ef9ded22e genirq/affinity: Consider that CPUs on nodes can be unbalanced c61d929944c9 x86/tsx: Disable TSX development mode at boot aaf27fcaefc1 x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits 2dd7d2eddf8e drm/amdgpu: Enable gfxoff quirk on MacBook Pro 804c096d640e drm/amd/display: don't ignore alpha property on pre-multiplied mode adee01bbf6cb ipv6: fix panic when forwarding a pkt with no in6 dev cab64cb82fe1 nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size 63038f6e96a7 ALSA: pcm: Test for "silence" field in struct "pcm_format_data" a53062c94b8c ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers 0349df521528 ALSA: hda/realtek: Add quirk for Clevo PD50PNT 3680b48533ae btrfs: mark resumed async balance as writing 252db93fd0bd btrfs: fix root ref counts in error handling in btrfs_get_root_ref 9b81c2c147e1 ath9k: Fix usage of driver-private space in tx_info 3386927f436e ath9k: Properly clear TX status area before reporting to mac80211 7a509a9f2bb7 cifs: verify that tcon is valid before dereference in cifs_kill_sb bd17422b9b67 gcc-plugins: latent_entropy: use /dev/urandom 05d1824a7fb4 memory: renesas-rpc-if: fix platform-device leak in error path f5e13d700a4d SUNRPC: Fix NFSD's request deferral on RDMA transports 00715427ea77 KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded 70ea5e7b38c3 mm: kmemleak: take a full lowmem check in kmemleak_*_phys() 12ba1d38115a mm: fix unexpected zeroed page mapping with zram swap bb7645c33869 mm, page_alloc: fix build_zonerefs_node() b6d17c67885a mm/secretmem: fix panic when growing a memfd_secret 4cdf0e7a5be8 perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant b8ed0f7531f3 io_uring: use nospec annotation for more indexes 5218d5cc0283 io_uring: zero tag on rsrc removal efb020924a71 drivers: net: slip: fix NPD bug in sl_tx_timeout() e455d7510db7 scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan f1933d9ee745 scsi: mvsas: Add PCI ID of RocketRaid 2640 389f37e46bdd scsi: mpt3sas: Fail reset operation if config request timed out 184b4fad0872 drbd: set QUEUE_FLAG_STABLE_WRITES 6a03581ccffa drm/amd/display: Fix allocate_mst_payload assert on resume ac2eb310af05 drm/amd/display: Revert FEC check in validation eab8e585840f drm/amd/display: Enable power gating before init_pipes d8860f1f9e41 spi: cadence-quadspi: fix protocol setup for non-1-1-X operations 6d48df738272 myri10ge: fix an incorrect free for skb in myri10ge_sw_tso b416898442f2 net: usb: aqc111: Fix out-of-bounds accesses in RX fixup c3f86aef97cf Drivers: hv: balloon: Disable balloon and hot-add accordingly 1c9fdb9587e0 net: axienet: setup mdio unconditionally 61dd8bef80c2 tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry ed2711c696ce arm64: alternatives: mark patch_alternative() as `noinstr` cfd24b14eb2d regulator: wm8994: Add an off-on delay for WM8994 variant 86d1cdf56fc5 gpu: ipu-v3: Fix dev_dbg frequency output 4583205048ae ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs 6eecc4811a47 net: micrel: fix KS8851_MLL Kconfig 9e60a788a3f7 scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 026083cb43a4 scsi: lpfc: Fix queue failures when recovering from PCI parity error b7f3b5d70c83 scsi: target: tcmu: Fix possible page UAF 44f95a5aae99 Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer 92a3499933c1 PCI: hv: Propagate coherence from VMbus device to PCI device 1b576e81d31b Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests f2658d5966bc drm/amdkfd: Check for potential null return of kmalloc_array() 9f0fabf30b48 drm/amdgpu/vcn: improve vcn dpg stop procedure 25efb191d86b drm/amdkfd: Fix Incorrect VMIDs passed to HWS 7a3bc11a4034 drm/amd/display: Update VTEM Infopacket definition 92951699a5f1 drm/amd/display: FEC check in timing validation b054e8183fbd drm/amd/display: fix audio format not updated after edid updated 37bc29a44538 drm/amdgpu/gmc: use PCI BARs for APUs in passthrough 5a3b56a4a1c7 drm/amdgpu: conduct a proper cleanup of PDB bo 01dcda701fef btrfs: do not warn for free space inode in cow_file_range bb93369f93b5 btrfs: fix fallocate to use file_modified to update permissions consistently 6dded62e5aa6 drm/amd: Add USBC connector ID 3e67054c339c block: fix offset/size check in bio_trim() 279018a01b08 net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" b8c0f6d1b04c vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used 5fda973f0ece dm mpath: only use ktime_get_ns() in historical selector 9901b07ba42b cifs: potential buffer overflow in handling symlinks 9ded5ae40f4f nfc: nci: add flush_workqueue to prevent uaf 331c99ee8dcb net: ftgmac100: access hardware register after clock ready 8f79ce226ad2 macvlan: Fix leaking skb in source mode with nodst option 8e86fba13479 perf tools: Fix misleading add event PMU debug message 1665758b4bfd ALSA: usb-audio: Limit max buffer and period sizes per time 6b38c5722610 ALSA: usb-audio: Increase max buffer size 7399ed8e6a8d testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set 9947548d9cef io_uring: verify pad field is 0 in io_get_ext_arg 7a7c9f9de961 io_uring: verify that resv2 is 0 in io_uring_rsrc_update2 22aa1597f462 io_uring: move io_uring_rsrc_update2 validation cb981d5c7511 ALSA: mtpav: Don't call card private_free at probe error path 872e5fa0781f ALSA: ad1889: Fix the missing snd_card_free() call at probe error 96aceacda8d2 netfilter: nf_tables: nft_parse_register can return a negative value 90c153ca45da sctp: Initialize daddr on peeled off socket 50d46b5ce004 scsi: iscsi: Fix unbound endpoint error handling 578616ac3d87 scsi: iscsi: Fix conn cleanup and stop race during iscsid restart 485780af7ef1 scsi: iscsi: Fix endpoint reuse regression cbd4f4e40944 scsi: iscsi: Fix offload conn cleanup when iscsid restarts cc0082d45de1 scsi: iscsi: Move iscsi_ep_disconnect() d6f6f945e850 scsi: pm80xx: Enable upper inbound, outbound queues b02c509ceef4 scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 3a523807f014 net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() 66b3107a4a06 drm/msm/dp: add fail safe mode outside of event_mutex context 815006c33391 drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() a6549b364be4 drm/msm: Fix range size vs end confusion 1c86b7ea63ff netfilter: nft_socket: make cgroup match work in input too 5a52384a5134 cfg80211: hold bss_lock while updating nontrans_list d5be67ecbeff net/sched: taprio: Check if socket flags are valid 62a48383ebe2 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link 72f9c15854b0 net: dsa: felix: suppress -EPROBE_DEFER errors 13faa76cf572 net/sched: fix initialization order when updating chain 0 head 4c979e6fcec8 mlxsw: i2c: Fix initialization error flow 152b813d8ba5 net: mdio: don't defer probe forever if PHY IRQ provider is missing 675e7d3086d0 cifs: release cached dentries only if mount is complete d40cf3492277 gpiolib: acpi: use correct format characters 93940fc4cb81 veth: Ensure eth header is in skb's linear part de8a332c86a7 net/sched: flower: fix parsing of ethertype following VLAN header 726ae7300fcc SUNRPC: Fix the svc_deferred_event trace class ec2ab59b9e66 media: rockchip/rga: do proper error checking in probe b0d8a9eb3239 firmware: arm_scmi: Fix sorting of retrieved clock rates e2da8f9ce3ea Revert "ath11k: mesh: add support for 256 bitmap in blockack frames in 11ax" 9f029cb2c92e memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe e7b1992b0722 firmware: arm_scmi: Remove clear channel call on the TX channel 77ffc38e577d drm/msm: Add missing put_task_struct() in debugfs path aa4845194b9d ALSA: nm256: Don't call card private_free at probe error path 425c83e2898d ALSA: usb-audio: Cap upper limits of buffer/period bytes for implicit fb 3bbd4850d957 ALSA: via82xx: Fix the missing snd_card_free() call at probe error 56e44ff13d84 ALSA: sonicvibes: Fix the missing snd_card_free() call at probe error 73229d7cb836 ALSA: sc6000: Fix the missing snd_card_free() call at probe error df03ce487e1b ALSA: rme96: Fix the missing snd_card_free() call at probe error ef4c35339414 ALSA: rme9652: Fix the missing snd_card_free() call at probe error 4efa63663c36 ALSA: rme32: Fix the missing snd_card_free() call at probe error bb94f5d98511 ALSA: riptide: Fix the missing snd_card_free() call at probe error 4ecd10217df6 ALSA: oxygen: Fix the missing snd_card_free() call at probe error 30b86477daaa ALSA: maestro3: Fix the missing snd_card_free() call at probe error 5fbb73cb1208 ALSA: lx6464es: Fix the missing snd_card_free() call at probe error 0651442d22e2 ALSA: lola: Fix the missing snd_card_free() call at probe error 0bec8b8a57de ALSA: korg1212: Fix the missing snd_card_free() call at probe error d9ac5256de1f ALSA: intel_hdmi: Fix the missing snd_card_free() call at probe error e87b8d0ba455 ALSA: intel8x0: Fix the missing snd_card_free() call at probe error 547c9af67b4e ALSA: ice1724: Fix the missing snd_card_free() call at probe error 141abcbf902a ALSA: hdspm: Fix the missing snd_card_free() call at probe error f006a4bcf8bb ALSA: hdsp: Fix the missing snd_card_free() call at probe error 85515309293b ALSA: galaxy: Fix the missing snd_card_free() call at probe error 841e8f8dd21f ALSA: fm801: Fix the missing snd_card_free() call at probe error 3a738f1b3ffd ALSA: es1968: Fix the missing snd_card_free() call at probe error d3c6ac7a051c ALSA: es1938: Fix the missing snd_card_free() call at probe error 20b35ba7aa2f ALSA: ens137x: Fix the missing snd_card_free() call at probe error 0d52c09f0c17 ALSA: emu10k1x: Fix the missing snd_card_free() call at probe error 2a2a75ebdbd4 ALSA: echoaudio: Fix the missing snd_card_free() call at probe error 648e89e9de29 ALSA: cs5535audio: Fix the missing snd_card_free() call at probe error 9decc5bfd173 ALSA: cs4281: Fix the missing snd_card_free() call at probe error 2dde47610757 ALSA: cmipci: Fix the missing snd_card_free() call at probe error f98476228801 ALSA: ca0106: Fix the missing snd_card_free() call at probe error e5a54e236f70 ALSA: bt87x: Fix the missing snd_card_free() call at probe error 935629ba096e ALSA: azt3328: Fix the missing snd_card_free() call at probe error 3a943321c362 ALSA: aw2: Fix the missing snd_card_free() call at probe error 811a92b866a0 ALSA: au88x0: Fix the missing snd_card_free() call at probe error ea61c1bd582b ALSA: atiixp: Fix the missing snd_card_free() call at probe error 007a9b5554e1 ALSA: als4000: Fix the missing snd_card_free() call at probe error 291d9e5e94d0 ALSA: als300: Fix the missing snd_card_free() call at probe error 5bc156409025 ALSA: ali5451: Fix the missing snd_card_free() call at probe error cfa98d6c41e0 ALSA: sis7019: Fix the missing error handling 1479bdea76dd ALSA: core: Add snd_card_free_on_error() helper 07cacfd9d9dc btrfs: release correct delalloc amount in direct IO write path 8ff8bdb8c92d net: ipa: request IPA register values be retained 587ced6b8cf3 dt-bindings: net: qcom,ipa: add optional qcom,qmp property 7883df73fd59 soc: qcom: aoss: Expose send for generic usecase ec13aa4e0085 btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() ed0e951463ea btrfs: remove no longer used counter when reading data page 6308ab54c8ec btrfs: remove unused parameter nr_pages in add_ra_bio_pages() ff810f85ed3f ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40 7cad1c40ef91 ACPI: processor idle: Allow playing dead in C3 state 631473adaaef ACPI: processor idle: Check for architectural support for LPI 5b13295ac584 cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function 9873fe0f3857 hamradio: remove needs_free_netdev to avoid UAF c799c18a287e hamradio: defer 6pack kfree after unregister_netdev 8e663865f528 drm/amd/display: Fix p-state allow debug index on dcn31 685a19fa6ae9 drm/amd/display: Add pstate verification and recovery for DCN31 b645270124fd Linux 5.15.34-xanmod1