0f1ac59df670 Linux 7.1.10-xanmod1
fc11d50c4815 Merge tag 'v7.1.10' into 7.1
8d4e6356173a Linux 7.1.10
93f4d99b7e06 ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r
d31639e0dd88 erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
f07ab9771db5 spi: virtio: mark device ready before registering the controller
50ca4dbbaf3e drm/log: Fix infinite loop when scale is too large for display
16bcea56f420 drm/log: Fix out-of-bounds read on empty message length
71ba3938cd57 drm/log: Fix division by zero when scale module parameter is 0
1eea17a9184c drm/xe: Fix a bug in pc_adjust_freq_bounds()
e75b29f1d31c drm/xe: Set GT rp min frequency as 1.2GHz default for BMG/CRI
b3991da6ea98 drm/xe/oa: Check managed mutex initialization errors
027150e24e17 drm/xe/oa: Fix sync entry leak on OA config emit failure
24026a295e03 drm/xe/pxp: add termination on resume
7d228ba43279 firewire: ohci: fix NULL pointer dereference in ar_context_release
ebe2774e9564 l2tp: fix tunnel and session refcount leak on seq_file release
5685bbbd3cbf net/sched: cls_bpf: reject dev-bound programs bound to a different device
499227ca8edc accel/amdxdna: Skip unmapped range in aie2_populate_range()
914e0100df34 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
5bd8e897ecf5 regmap: sdw-mbq: don't call an unset readable_reg callback
eb5ad008574d m68k: Define NR_CPUS to 1
d7c413bd421c pid: reject allocations through dead ancestor pid namespaces
e71f8e9ed6f3 net/sched: cls_u32: skip hash tables in u32_bind_class()
6b70886ebc42 net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
f09ac5682f1b af_packet: Don't send zero-byte data in tpacket_snd().
cc90447a7f79 regmap: sdw-mbq: Fix swap of timeout and retry times
09e4c486348e ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
4b177911eb9f net/tls: Fail tls_sw_splice_read() after a failed async decrypt
0ab482b2195e net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
88b79ac89ecc net: tap: fix wrong transport_header when sending VLAN-tagged frame
6386a6ffa2ef net: packet: fix wrong transport_header when sending VLAN-tagged frame
fa8ceaae52d3 net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path
29633de25773 tcp: fix icsk_ack.ato bitfield overflow
90bb11fb29d3 veth: fix queue index used to wake the peer txq in veth_poll
bc9a00fb78e3 macvlan: inherit needed_headroom and needed_tailroom from lowerdev
5c2ca77212eb ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
8b1118fc5a5d eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
ae2e1c26082c eth: bnxt: decrease indent in bnxt_request_irq()
2a64e5e75879 eth: bnxt: keep the aRFS rmap updated when TPH is enabled
5f451cdb3f4e eth: bnxt: cancel IRQ notifier before freeing affinity mask
0c60f26caca4 netfilter: ipset: let destroy callbacks adjust ext mem size
b88250102549 netfilter: ipset: fix list type element drift bug
d16b71231e65 netfilter: flowtable: publish GC-visible tuple last
c23620a0fa5b netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
5365f012451f ipvs: revalidate ihl to prevent out-of-bounds access
24ffcb1e1688 netfilter: ipset: fix refcount race between list:set GC and swap
8bfb93a35c9f tick: Include ktime.h and jiffies.h in linux/tick.h
f5bde482b242 ASoC: tas2781: fix clang build error for goto bypassing cleanup variable
1eee6a92739a gpio: ml-ioh: share the register lock across channels
8bbf4405050b rseq: Prevent hard lockup on granted time slice extension
0f77ed5ee919 ovpn: defer key slot crypto freeing to workqueue
bbe81f40582d ovpn: run deferred work on a module-owned workqueue
e697e30f3dd2 riscv: lib: Fix ZBB strnlen reading past count boundary
0663d1df8d28 ALSA: usb-audio: Fix mixer regression on SteelSeries Arctis Nova 5
88619b117be1 sctp: validate cookie AUTH state before use
7ce010275c53 perf: Reject exited events as group leaders
e83eed1bea14 scsi: core: pair EH runtime PM get and put
fe98491cb322 riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions
4b0de8be288f ovpn: finish crypto callback cleanup before peer release
acf32a5dff08 ovpn: fix NULL dereference when killing missing key
e3702470ced9 af_unix: Unlink scc_entry in unix_del_edge().
92a959405383 regulator: fp9931: Fix VPOS/VNEG voltage selector table
d9daaca68ab9 gpiolib: Check gc->get_direction() before calling gpiod_get_direction()
413be75118d1 rhashtable: fix false-positive lockdep splat on rhltable destruction
c6237834d999 crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
3b8a9543801b crypto: ccm - Set rfc4309 maxauthsize from child
487aa5391f91 arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
bb81b608db63 clk: spacemit: k3: set hdma clock as critical
294fd02f48c5 clk: spacemit: k3: fix USB2 bus clock
94bf4fe0e463 optee: ffa: Add NULL check in optee_ffa_lend_protmem
9114f72b9161 clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK
574498e56024 ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup
b0b98763cedb net: expect instance lock in netdev_queue_get_dma_dev()
1be781e450c5 net: rename netdev_ops_assert_locked()
ca91e0cc8087 drm/amdkfd: Add bounds check for CRAT subtype length
75db927187a1 drm/mediatek: mtk_dsi: Enable HS clock only at pre-enable
6bd8d6b4eb51 drm/mediatek: Convert legacy DRM logging to drm_* helpers in mtk_dsi.c
c37a0461c0d0 ASoC: tas2562: Validate values for volume writes
9e55fe24c548 ceph: fix hanging __ceph_get_caps() with stale mds_wanted
b6a098961307 ceph: avoid fs reclaim while using current->journal_info
605cbdb7ed21 xfs: check v5 superblock features early
ff350e672534 xfs: check xfarray iteration errors when committing unlinked inode lists
233557b7b1ed xfs: don't ignore runtime errors in xrep_iunlink_reload_next
36a31b12540c xfs: don't swallow dquot recovery verification errors
03c9c9116e6d xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
96246a3200d3 xfs: avoid UAF on sc->tempip in xrep_tempfile_create
73ce20d9b6a9 xfs: don't return EFSCORRUPTED when scrubbing corrupt parent pointers
23690064f235 xfs: fix another iunlink infinite loop bug in online fsck
8ce03692a6b5 xfs: fix allocated inodes that show up in the unlinked list
a6cfd0e4bb1e xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
70714b154842 xfs: don't zap the attr fork on repair when there are queued pptr updates
08bed2b67d2e xfs: fix ilock leak on error in xfs_dq_get_next_id
8a5bb14cd964 xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev
2773bf5156d5 xfs: nlink scrub must take IOLOCK before determining ILOCK state
a3ce762bdb5d xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers
ca6085790659 xfs: set the prev pointer when reinserting an inode on the unlinked list
c57590447157 xfs: don't double-lock when deleting a self-referential directory
e753d3b5b21b xfs: only check mergeability of bnobt records
a68b492357e3 xfs: zero i_nlink before repair puts inode on unlinked list
b51051f7dc53 xfs: fix transaction block reservation in xrep_rtbitmap
5faabb37dd60 xfs: check cowextsize in xrep_inode_cowextsize
c82c1279c90a xfs: clear zapped attr fork state when bmap repair finds no attr fork
ccad4a3b96eb xfs: mark nonzero sb_gquotino as corrupt on metadir filesystems
edaf5b6bd625 xfs: bounds-check buffer log item's dirty bitmap
ccebfc309441 xfs: fix off-by-one in rtrefcount btree root level validation
61c5165f02de xfs: propagate errors from xfs_rtginode_load
e3ee74d6dbbe drm/amdgpu: disallow multiple FENCE chunks in one submit
5cbd8af02b0b drm/amdgpu: Fix UVD decode image min size calculation
ff4361816b6b drm/amdgpu: Fix UVD dpb min size calculation for H264
4530aa81c907 drm/amdgpu: Fix UVD min buffer sizes
de67fd77ff18 drm/amdgpu: Implement insert_end for VCE 3
17fbb996c05f drm/amdgpu: Reject UVD message with dimensions above 4096
80f0b53860d0 drm/amdgpu: validate GEM_CREATE domain combinations
544f760f36d4 drm/amdgpu: check ASPM on the dGPU host link
9213b2febc37 drm/amdgpu: fix missing check in vm_flush()
33bd5194ea61 drm/amdgpu: fix nbif 6.3.1 l1 low power not functional
476d259f285f drm/amdgpu: Prefer default discovery offset
0acdf1a575f5 drm/amdgpu: Reject UVD message with invalid number of h265 refs
2f41881e73f4 drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE
dacea1e4de8e drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix
4a6bc92fac30 drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()
2db92a56b000 s390/zcrypt: Pad trailing CCA or EP11 message with zeros
db21b2cf6dd0 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
2976b9d2e716 s390/zcrypt: Improve EP11 CPRB length and overflow checks
50fe5133dcb4 s390/zcrypt: Improve CCA CPRB length and overflow checks
14d41e383241 s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code
c76c4ee72bfc s390/vfio_ccw: Implement a crw lock
83a73fdeff38 s390/vfio_ccw: Calculate idal length based on idaw type
2a5ac0c0f1f7 s390/vfio_ccw: Selectively expand io_mutex
56100baa0eb7 s390/vfio_ccw: Move cp cleanup out of not operational
d5d096cd9369 s390/vfio_ccw: Fix out of bounds check on CCW array
fc59e9482117 s390/vfio_ccw: Ensure first IDAW remains constant
988d9b5be3c2 s390/vfio_ccw: Ensure index for read/write regions are within range
77f5e888d2e6 s390/vfio_ccw: Cancel existing workqueues
4ee94790490a s390/vfio_ccw: Limit the number of channel program segments
4699b54fada1 s390/vfio_ccw: Free all memory if cp_init() fails
6a06a99b9c60 drm/radeon: fix autosuspend cleanup during teardown
e4aff0f8bc31 drm/xe/guc_ads: use uncached mapping for UM queue BO
02bc8cf239a7 drm/xe/guc_ads: allocate UM queues in VRAM on dGFX
7b1ebb987d13 drm/xe/guc_ads: allocate UM queues in a separate BO
4db2b608e5f3 drm/xe: Fix xe_device_probe() failure
dea635bd1317 drm/xe: Order ring writes before ring tail updates
a5805f9e24d6 riscv: hwprobe: Register unaligned probes before usermode
f1478e8d5334 pmdomain: mediatek: Fix mt8183 hang on boot
db368164383c mmc: loongson2: Fix sg iteration in data reorder functions
f72bb95732bc drm/connector/hdmi: Fix out of bounds memory read
7599a73ff66d mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
0e1c00199394 pmdomains: mediatek: Avoid setting RTFF's CLK_DIS before NRESTORE
3c6c28b9bee7 mmc: sdhci: make tuning_err a signed int
10bf2d7261d7 pmdomain: mediatek: fix remaining %pOF after of_node_put()
ce508a334e9c mmc: sdhci: unmap the bounce buffer before device release
4a0c11683a8f mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit
3497102117e8 libceph: tolerate addrvecs with multiple entries of the same type
7130d94846da libceph: fix OOB read in decode_watchers() via missing bounds check
a9e1d197953f ceph: fix MDS random selection readiness predicate
e009c5f0ad63 libceph: Avoid using invalid osd indices from primary_temp
daeaa22a37dd Input: sur40 - fix V4L error path cleanup
beb9b0bd6e6e Input: sur40 - fix input device registration ordering
212fc482ddd7 openrisc: signal: do not restore privileged SR bits on sigreturn
7e65a89124c1 ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()
bd75a42cea7e ftrace: Protect direct_functions in update_ftrace_direct_mod
35f8e0989985 ftrace: Protect direct_functions in update_ftrace_direct_del
5ac91943ee59 ftrace: Protect direct_functions in ftrace_find_rec_direct
de4eec0dfde8 pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()
51c8d238fe72 libceph: fix multiple unsafe decodes in decode_locker()
cdefce49feed pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0
10505f28146f pmdomain: qcom: rpmhpd: Add missing MXC and MMCX power domains for Eliza
0559b86611c3 gpio: ml-ioh: use raw_spinlock_t for the register lock
44ec5936ba15 gve: fix zero-length skb frag with header-split
8021105545c1 selftests/ftrace: Convert ELF entry point to file offset in uprobe test
24bef4918f6a gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind
fa9b991bf678 gve: fix NULL dereference due to missing ptp adjfine
4e88b4fda482 crypto: qce - fix error path in devm_qce_register_algs
61b20fba32d6 crypto: starfive - use scatterlist length before DMA mapping
51c5503554c8 Input: hynitron_cstxxx - validate touch count and finger IDs
9bbd3682f8a3 Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
ddd9a53faf3b Input: synaptics-rmi4 - block s_input when F54 queue is busy
b7b9a8b1c303 Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer
88c8174d7290 Input: synaptics-rmi4 - zero report size on F54 work error
ed98ce338f9a powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak
6a4643f7eabe powerpc/pseries: lparcfg - fix kbuf[] underflow
2e509ef60ee4 Input: byd - synchronize timer deletion before freeing private data
84e5cb517f44 Input: iforce - validate input packet lengths
594b79d024e5 Input: atkbd - skip deactivate for HONOR ZQC-P
da1ecf638cd8 Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard
62e25677d144 Input: psxpad-spi - set driver data before use
1842e4712681 Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
a81cafe3c3c2 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
360fc573e6cf powerpc/pseries: pci - logic bug
d38554602a0b Input: cs40l50-vibra - validate custom data from user space
a3da1fa14797 Input: xpad - add support for ZENAIM LEVERLESS
2deef1c38c2c ASoC: SOF: topology: Use acpi mach from the machine driver
0306873bbb3a drm/amdgpu/gmc12.1: fix MMHUB0 check in pasid tlb flush
d4ffb51b9f02 drm/amdgpu/gmc12.1: implement tlb inv semaphore
1c73854a53bb drm/amdgpu: fix aperture iounmap skipped on device removal
a4d52348157e drm/amdgpu: fix JPEG v4.0.5 queue reset failure in DPG mode
09ad1526c2ef drm/amdgpu: fix JPEG v5.0.0 queue reset failure in DPG mode
c79ec4aa250b drm/amdgpu: fix JPEG v5.3.0 queue reset failure in DPG mode
9381d8ae3e31 drm/amdgpu: Use virtual alloc during coredump
fb0eb608570e drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression
34c5b3eca369 drm/amd: Disable DP audio spread spectrum for Cyan Skillfish
91731dec60e9 drm/amdgpu/userq: serialize queue map against GPU reset
a4443c272578 drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12
07fe270ec07c drm/amdgpu: reject oversized IBs with per-ring packet limits
5d222b657f02 drm/panthor: skip zero-sized firmware sections
7110b7b794a2 fbdev: core: Fix pointer desynchronization in fb_io_read()
ce7fef961c63 fbdev: clear fb_info->mode before deleting a videomode
873a1aa15c31 fbdev: bound mode sysfs output to the sysfs buffer
7bcdde412e6c ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
4fbbbb17edb4 ASoC: cs35l41: sort the register default table
2b12126944d7 ASoC: cs35l45: sort the register default table
b3f8a818796b ASoC: cs4265: sort the register default table
6b512a5330ef ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout
d48691e70d4a ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
12803e89a1e5 drm/shmem_helper: Check VMA boundaries for PMD mappings
3ee3c26ceee5 ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
2f578062a5f1 microblaze: restore the page alignment of swapper_pg_dir
75fb3151513d s390/qeth: validate user buffer length in SNMP and ARP query ioctls
72b4a0c51a4b mptcp: fastopen: only mark MPTFO subflows with SYN data
5099027f98b2 mptcp: pm: fix data race in add_addr timer callback
27ed642a4e7e mptcp: options: reset DSS fields in case of unexpected size
6bab90729215 mptcp: avoid combining some incoming suboptions
e5791c03854b selftests: mptcp: join: mark tests with data corruption as failed
8277f48a06d3 mptcp: reclaim forward-allocated memory on RX path errors
d81bda85d95f selinux: reject a permission value exceeding the class permission count
d8a10899ea3c selinux: reject an unclaimed class value in security_get_classes()
219c96de5d9b selinux: do not cancel a policy conversion that never started
1b995966c3ae selinux: reject a class permission count below its inherited common
ed901e88aa3f selinux: require every boolean value to be defined
93d620519d71 block: stop the timeout timer when releasing a never added disk