a456799568c1 Linux 7.0.9-xanmod1 bfef477b2163 Merge tag 'v7.0.9' into 7.0 9021cc14f7d9 Linux 7.0.9 30d12ee310a6 drm/amdgpu/vcn4: Avoid overflow on msg bound check 2e43b66fceac drm/amdgpu/vcn3: Avoid overflow on msg bound check 6d3275fc4ed9 vsock/virtio: fix accept queue count leak on transport mismatch 378b131a25bd vsock/virtio: fix empty payload in tap skb for non-linear buffers 25d02b1e6192 vsock/virtio: fix length and offset in tap skb for split packets 0b6888150146 vsock: fix buffer size clamping order 5394bcb74650 mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap() 21bc3d6421b9 perf build: fix "argument list too long" in second location 20096df92b7f sched_ext: Skip tasks with stale task_rq in bypass_lb_cpu() 33fa2e6b1507 cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated 6d46255ccb18 cgroup: Increment nr_dying_subsys_* from rmdir context 3422529c58c0 spi: uniphier: fix controller deregistration ec88a12005e5 spi: uniphier: Simplify clock handling with devm_clk_get_enabled() b16033c8774f EDAC/versalnet: Fix device name memory leak f37dc28b3458 EDAC/versalnet: Refactor memory controller initialization and cleanup 8f09370ee908 kho: fix error handling in kho_add_subtree() f0b298b652e9 io_uring/zcrx: warn on freelist violations 78ef8dea8c79 io_uring/zcrx: use guards for locking b942cbe16294 usb: typec: tcpm: reset internal port states on soft reset AMS aa73a810b0ae sched_ext: Use HK_TYPE_DOMAIN_BOOT to detect isolcpus= domain isolation 7cccf4eb4f96 batman-adv: bla: put backbone reference on failed claim hash insert ab3dbd07a809 batman-adv: bla: only purge non-released claims 0cc9847c64cb batman-adv: bla: prevent use-after-free when deleting claims d5851157bd2d batman-adv: tp_meter: fix tp_num leak on kmalloc failure 67bceeb22207 batman-adv: stop caching unowned originator pointers in BAT IV 8634c1dbd73a batman-adv: stop tp_meter sessions during mesh teardown ca39545cf07c batman-adv: reject new tp_meter sessions during teardown b252797bfced batman-adv: fix integer overflow on buff_pos bf0f40d8107e sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL 1c9ceec1f547 arm64: dts: ti: k3-am69-aquila-dev: Fix DP regulator enable GPIO afe001526d9f arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 87c08a226dcd arm64: dts: qcom: lemans: Correct QUP interrupt numbers 7e1db40456a7 arm64: dts: qcom: kodiak: Fix PCIe1 PHY ref clock voting 309f1209423a drm/amdgpu/pm: align Hawaii mclk workaround with radeon 2d6e84f1cd0f drm/amdgpu/pm: add missing revision check for CI a4fd82fb0757 drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission 1df1dad6980a drm/amdkfd: Make all TLB-flushes heavy-weight 7f5950e89566 drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds c982bfd7d1b1 drm/sti: remove bridge when sti_hda component_add fails 164fd3372ac3 drm/bridge: tda998x: Use __be32 for audio port OF property pointer 010d96968add drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ 9734bb908758 drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds 336a9186f3a4 drm/amdgpu/userq: fix access to stale wptr mapping 73d0450c8000 drm/exynos: remove bridge when component_add fails 791941be5da1 drm/amdgpu: zero-initialize GART table on allocation a5810f3a1c6f drm/radeon: add missing revision check for CI 61bd96d3e547 drm: Set old handle to NULL before prime swap in change_handle fea04cf6f234 drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise 5cb5cf6671ee drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() eea1e10f8d99 drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() 18fec083a019 drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() 8fa8c2a22585 drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure 5ed57e26e2c0 drm/udl: Increase GET_URB_TIMEOUT bff69464ecd2 drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. 6abd3a4417cb drm/amdkfd: validate SVM ioctl nattr against buffer size 5f30028f2853 drm/appletbdrm: Use kvzalloc for big allocations c5fc49d8470c drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() 6daa62617775 drm/amd/display: Change dither policy for 10 bpc output back to dithering e382e0b81a3e drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg 3c817a60b09e drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg ea2c554e700b drm/amdgpu/vce: Prevent partial address patches 5c3e8ebad0c9 drm/amdgpu/vcn4: Prevent OOB reads when parsing IB ee26fcf7c5cf drm/amdgpu: Add bounds checking to ib_{get,set}_value 7b80137eb8aa drm/amdkfd: Add upper bound check for num_of_nodes 4231f2daf424 drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x d7f7d011a6ea drm/amdgpu: gate VM CPU HDP flush on reset lock b3562a2f3036 drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. 48e388924d6e drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . 9b1b19c45bd0 drm/amd: Add missing firmware declaration for PSP v15.0.0 bbe0ab88f49d drm/amd/display: fix math_mod() using arg1 instead of arg2 047d44d8d29a drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure 765708fd5a93 drm/i915/psr: Init variable to avoid early exit from et alignment loop 9c5164781cb3 drm/v3d: Reject empty multisync extension to prevent infinite loop 2f5c90478749 drm/msm: always recover the gpu 74e37f07f2ef drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property 271059f1d902 drm/colorop: Fix blob property reference tracking in state lifecycle b079e85c91f4 drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() d67a5311818b spi: cadence-quadspi: fix unclocked access on unbind 004cce9adbdf spi: cadence-quadspi: fix runtime pm and clock imbalance on unbind f3dd6698761e spi: cadence-quadspi: fix clock imbalance on probe failure b0dfd8ebe77b spi: cadence-quadspi: fix runtime pm disable imbalance on probe failure c5f87fccd3fb spi: cadence: fix clock imbalance on probe failure 02bcd5b06c7c spi: cadence: fix unclocked access on unbind 3759892d8653 spi: cadence-quadspi: fix controller deregistration 9900d9e86e15 spi: cadence: fix controller deregistration bbcd6dd8e9f2 spi: mpc52xx: fix use-after-free on unbind 7fea80d93bfd spi: mpc52xx: fix controller deregistration 5c77f11b9b5f spi: mpc52xx: fix use-after-free on registration failure e41b69aa6739 spi: orion: fix clock imbalance on registration failure dabab3183ae1 spi: orion: fix runtime pm leak on unbind e701f3ea1156 spi: orion: fix controller deregistration 87974bcbce09 spi: mxic: fix controller deregistration 7e527e8b085e spi: imx: fix runtime pm leak on probe deferral 271f8aa6f99b spi: octeon: fix controller deregistration bc7656d29dd4 spi: mpfs: fix controller deregistration 182a5e2464a3 spi: img-spfi: fix controller deregistration 59d8ca5e5b13 spi: slave-mt27xx: fix controller deregistration 8efe5a5e6c1a spi: sh-msiof: fix controller deregistration fee6abd9845c spi: rspi: fix controller deregistration ddc7658a079e spi: sprd: fix controller deregistration a604c8b88d5c spi: pic32-sqi: fix controller deregistration e842fe0ab242 spi: cavium-thunderx: fix controller deregistration 332dc249f1b1 spi: npcm-pspi: fix controller deregistration 5c8ffd07d69f spi: coldfire-qspi: fix controller deregistration 6aaed27f02d2 spi: bcmbca-hsspi: fix controller deregistration 5750743a39c9 spi: fsl: fix controller deregistration 0ca006b3512e spi: sh-hspi: fix controller deregistration 108a64b27a52 spi: ch341: fix devres lifetime 4ce53134d450 spi: pl022: fix controller deregistration d819bb3eb4e5 spi: mtk-nor: fix controller deregistration a59f721998c3 spi: ep93xx: fix controller deregistration e6a85c123f0f spi: pic32: fix controller deregistration 98da2279f465 spi: omap2-mcspi: fix controller deregistration ce598dd5fd8b spi: fsl-espi: fix controller deregistration a55fe36d72c1 spi: s3c64xx: fix controller deregistration 9e86d14eafe2 spi: dln2: fix controller deregistration eec5c30f6c52 spi: mt65xx: fix controller deregistration 147ab97f8526 spi: mxs: fix controller deregistration d8ab4b47edf4 drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() 24a3c0a61df9 media: qcom: camss: Add missing clocks for VFE lite on sa8775p 6fb1a2768b98 media: iris: switch to hardware mode after firmware boot 494ffd1712a5 media: iris: fix use-after-free of fmt_src during MBPF check c7c469127876 media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init() 6ca2302d4c6c media: venus: fix QCOM_MDT_LOADER dependency 169185f94a81 media: qcom: iris: increase H265D_MAX_SLICE to fix H.265 decoding on SC7280 5afd433604ce media: qcom: camss: Fix csid IRQ offset for sa8775p a98a8dd66ebf media: qcom: camss: Fix csid clock configuration for sa8775p 18c64439f249 media: iris: Fix use-after-free in iris_release_internal_buffers() 2ed65808d6d4 media: iris: fix QCOM_MDT_LOADER dependency 7565b8ea1527 media: omap3isp: drop the use count of v4l2 pipeline df641d0c3649 media: i2c: ov08d10: fix runtime PM handling in probe d8dff05aa849 media: i2c: ov08d10: fix image vertical start setting 451f49aaf74b media: staging: imx: request mbus_config in csi_start 4c7d695c1531 media: i2c: imx412: Assert reset GPIO during probe 34c007233783 media: dib8000: avoid division by 0 in dib8000_set_dds() 3f92a68d408d media: pci: zoran: fix potential memory leak in zoran_probe() e6508591f959 arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt 5af2da71e14c arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon 124660033517 vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy 9322368edb55 platform/x86: hp-wmi: Ignore backlight and FnLock events 2f4af1af4f85 drm/atomic: Add affected colorops with affected planes 1cc98c976fda drm/colorop: Preserve bypass value in duplicate_state() bfbb67db1243 spi: aspeed-smc: fix controller deregistration 9e7f0cf8d981 spi: amlogic-spisg: fix controller deregistration 6c22a6d8e4c1 media: saa7164: add ioremap return checks and cleanups e3129967c1a3 media: ipu-bridge: Add upside-down sensor DMI quirk for Dell XPS 13 9340 and XPS 14 9440 473c93145cc7 spi: at91-usart: fix controller deregistration e5260656429d arm64: dts: ti: k3-am69-aquila-clover: Fix DP regulator enable GPIO bc43788e1c0a spi: qup: fix controller deregistration 0509205939c0 spi: meson-spicc: fix controller deregistration aa24c80b7f21 spi: lantiq-ssc: fix controller deregistration cf8fee872d9a regulator: bd9571mwv: fix OF node reference imbalance 5d3aa60b8665 regulator: s2dos05: fix OF node reference imbalance 3de1a18ea573 regulator: act8945a: fix OF node reference imbalance 483d865a9221 media: i2c: imx283: Fix hang when going from large to small resolution c352f90e093a media: intel/ipu6: fix error pointer dereference 23cb9854f9cd media: mali-c55: Fully reset the ISP configuration 318142640590 media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads b4cf91658a63 media: videobuf2: Set vma_flags in vb2_dma_sg_mmap 57b885858dc9 regulator: rk808: fix OF node reference imbalance 3a4a0d32cf7a regulator: bq257xx: fix OF node reference imbalance fb38901702ac media: i2c: imx283: Enter full standby when stopping streaming 6b03ecf75bda media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl a3f16a2ffda3 media: rc: streamzap: Error handling in probe 0bd8ac88ec5f media: rc: xbox_remote: heed DMA restrictions 12280a777bfc media: ti: vpe: Add missing v4l2_device_unregister in vip_remove() c30aabf20a00 regulator: max77650: fix OF node reference imbalance 835525072f38 spi: st-ssc4: fix controller deregistration 9abe2dd7a9d3 regulator: mt6357: fix OF node reference imbalance 6850a439f8d2 staging: media: atomisp: Disallow all private IOCTLs 68de84fd76ce arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux 86c2781ab366 spi: atmel: fix controller deregistration 4f8f911c8529 spi: bcm63xx: fix controller deregistration 2d21997fb1a5 drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages b5528f4aef93 drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages ec6e96b225d8 arm64: dts: freescale: imx95-toradex-smarc: fix PMIC_SD2_VSEL label position f67ea77629ad media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change() a59ea8f83658 media: chips-media: wave5: add missing spinlock protection for send_eos_event() 20de85d55da2 media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init() 8e647e6a9abe media: dt-bindings: rockchip,vdec: Mark reg-names required for RK35{76,88} e01c6cd9ae22 media: dt-bindings: rockchip,vdec: Add alternative reg-names order for RK35{76,88} f727e3251cee media: i2c: ov8856: free control handler on error in ov8856_init_controls() 079ed9c90885 media: renesas: vin: Fix RAW8 (again) c4bb1515b266 media: renesas: vsp1: Fix NULL pointer deref on module unload bbd367d8c21b media: mali-c55: Fix Iridix bypass macros ad7dcf73d3df media: mali-c55: Initialize the ISP in enable_streams() c746522bd326 media: rzv2h-ivc: Fix concurrent buffer list access 09b786ef55ce media: rzv2h-ivc: Fix FM_STOP register write 3da66467e31e media: rzv2h-ivc: Write AXIRX_PIXFMT once 02afba0fb022 media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 2b81892bb0fd media: rzv2h-ivc: Avoid double job scheduling 6fd57db879eb drm/msm/hdmi: Fix wrong CTRL1 register used in writing info frames 862a7ec51875 media: uvcvideo: Enable VB2_DMABUF for metadata stream c9bf6be4388c HID: pidff: Fix integer overflow in pidff_rescale 2473a334c292 HID: appletb-kbd: run inactivity autodim from workqueues 93d989e47bc3 HID: appletb-kbd: fix UAF in inactivity-timer cleanup path 208f6d5b1dfd HID: playstation: Clamp num_touch_reports