78ec63a677fc Linux 7.2.11-xanmod1 bf61e083181a Merge tag 'v7.2.11' into 7.2 a2de78ee6ed8 Linux 7.2.11 6c714d669151 HID: steam: Clean up locking c06cf54fe99b HID: steam: Refactor registration b5ea938ff776 HID: steam: Rearrange teardown sequence 7511a6696ba1 HID: steam: Fully unregister controller when hidraw is opened 2f807570bc04 mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge 1f62b83e9433 io_uring/kbuf: don't charge provided buffer rings to RLIMIT_MEMLOCK 061c25b5e45d io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK 0879e115d2e8 io_uring/memmap: account the pages a compound region really uses 9d7715bf742b drm/amd/display: Don't replace a sink mode that shares the native totals 85653fed87b3 sched_ext: Call ops.dequeue() when a task arrives on a remote local DSQ db83b53b580a sched_ext: Generate qseq from a per-task counter bf8940f1c0eb drm/vc4: Fix binner slot allocation failing on an idle GPU e81402c3d420 drm/vc4: Disable the V3D interrupt across runtime suspend 9907db2b8e7b vsock: Fix memory leak in vmci_transport_recv_dgram_cb() 6b8897ba0733 net: openvswitch: validate transport header presence in set_ipv6_addr 59abc1b61026 ptp: ocp: fix PCIe delay estimation calculation b1dadf6847be net/packet: call packet_parse_headers after virtio_net_hdr_to_skb 4eaf1285b5c1 mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() b8171b764a4a net/mlx5e: Order ICOSQ cc update after CQ doorbell 9d136b7ce24e veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down 784356aa88b8 drm/imagination: Fix reference and vm_bo handling in remap() 7363e10ad244 bareudp: set the inner protocol to the protocol of the packet 61b43a51a559 flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() fabecda2b0c1 bnxt_en: Re-write the BARs following any type of PCIe errors de8b85ac0970 bnxt_en: Fix driver init in kdump kernel c6d6dfda4a52 bnxt_en: Add bnxt_clear_bars() helper 89fc70d73f4a riscv: ptrace: Zero-initialize regset buffers before copyin fd6898cdd7a8 riscv: fix NR_CPUS range leaking 64-bit default onto 32-bit builds bf7a3ce1d563 ASoC: sdw_utils: Switch CS35L56/57/62/63 to use OT25 DAI 8962696f8dd2 ASoC: sdw_utils: Add codec info for CS35L62 2fb6d05f706d pfcp: make sure the SEID is linear before reading it 454593bcd6c4 net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET 88efb0fe529c Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modification" 6260143fcc2c net/sched: cls_route: reject change with no routing attribute dc2e787b5fb4 devlink: fix devlink_rel reference leak when notify work is pending 21cbe0b3a30e net: sparx5: start the TOD counters on non-PTP lan969x variants 5f4dfdf00777 net: always dissect GSO packets in __virtio_net_hdr_to_skb() 52efce4755a4 flow_dissector: avoid u16 truncation of skb->len when computing thoff 34a84a76d783 cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() c1a1338fe01e spi: sg2044-nor: Honor SPI clock limits 25bb46843d20 spi: sg2044-nor: Return transfer errors a728c12f8bd8 ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM eca70d840cbe ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes 65cd0e21746b ASoC: adau1372: allow sleepy powerdown GPIOs aa5cb877716b Revert "wifi: ath12k: add panic handler" 9d40dbf8d45e drm/xe/sysctrl: Fix mailbox header handling b21596ace95f wifi: mt76: mt792x: pick the SAR table layout from the table itself 9208b32b1082 wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit b07c47a189f7 wifi: mt76: mt7925: don't put the band auto marker in TGID 7199ee4b47de wifi: mt76: mt7915: disable rx napi when removing device 75b3051db533 wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout 5ac236af9e03 wifi: mt76: mt7925: restore the legacy BSS after MLO teardown eb6d2f82d01f wifi: mt76: use ALTX queue for packets to disassociated stations e0f2ae4a7539 wifi: mt76: account non-AQL frames per peer rather than per link 2ee38971c090 wifi: mt76: add PS buffering support for HW-managed TIM drivers ee50d5027dba wifi: mac80211: add ieee80211_txq_aql_pending() b17568ba7ee6 wifi: mac80211: add AQL support for multicast packets d9fc220b9b41 wifi: mt76: mt7996: take over connection monitoring 3c26759269fd scsi: ufs: mediatek: Handle mPHY power-on failures c428a7f1ea01 Revert "net: stmmac: propagate PTP addend and system time programming errors" e2be0d537c15 riscv: vector: Fix output operands in context save e1a0f618f986 riscv: vector: Fix data pointer constraints in context save/restore 50a84d34700d net: airoha: Add retry mechanism to airoha_qdma_set_trtcm_param() d10437cf1780 net: stmmac: Disable S-Tag processing on dwmac4 83846f0e0bb4 net: stmmac: Do not advertise S-VLAN stripping when it is disabled 27747cc19f40 net/mlx5: Lag, split aggregate speed into oper and max helpers 1365f994de94 net: make dev_xdp_sb_prog_count() see programs attached through a link 75e2ecc1e9dd drm/xe: Do not emit Wa_16010904313 twice 7e1a34f648bc drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums 607a6d0be341 btrfs: fix lost error return value in btrfs_listxattr() c1803697a60f btrfs: fix xattr replace when multiple xattrs are packed in the same item 4d9c1e0a7fb2 btrfs: don't stash io_uring encoded data across -EAGAIN ada1fc725a4d btrfs: unlock inode and extent in caller when io_uring read extent fails 578ef5171424 btrfs: free iov when btrfs_uring_read_extent() fails a449433b0e3d btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio a7d6c89f51fd zloop: zero out only the unread tail of short reads 4b572dcb2ad3 spi: spi-nxp-fspi: exit stop mode before waiting for DLL lock 17aa3eb1fc09 arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 73bf0f957963 nvmet: use the local P2P device on metadata allocation failure 4e01c6e28f1a nvmet: return Invalid Field for invalid NSIDs feature 82h f94ab1fffd00 ice: Restore Ordered MMIO Writes for Tx Doorbells bba6b1b086f9 bonding: fix the program leak when XDP is replaced 5537e902da64 tee: optee: ffa: support shared memory offsets on large-page kernels 5d3bd67674c8 net: stmmac: propagate PTP addend and system time programming errors a9f81c99a0f4 wifi: mt76: mt7996: program a link again if the driver holds it bea736a2b8c6 cxgb4/ch_ktls: disable softirqs around tid_list erases 865eb579b33d lib/dim: fix 32-bit overflow in dim_calc_stats() rates e7ea63b4195a amt: send the relay's General Query directly from the receive path b627c6ba20be net/sched: em_text: reject unterminated algo before autoload 7ecb0f6be0a7 drm/vc4: Use kvmalloc_objs() for the BO cache size list 40870a0290cd drm/vc4: Free the BO cache size list on teardown e281dd69236d drm/aspeed: Balance the display clock enable on teardown f7ec4dbd2a07 gpio: exar: initialize the ID before registering its cleanup d4a6ad9fc6e9 drm/dp: don't mark the AUX backlight enabled when enabling failed 988bf67a1389 cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() a258d8af2bb8 drm/bridge: Fix unlocked list access in drm_bridge_attach() f469d8508541 drm/bridge: Fix unlocked list_del in drm_bridge_add() dcf617c90ea6 Bluetooth: btintel_pcie: Add shared HW reset for clean start 266956761521 Bluetooth: btintel_pcie: fix TX descriptor bounds check ab664eb1ce6e scsi: ufs: core: Hold a clock reference across the probe 24d098f91523 fs: don't let a migrating task hide its reference from do_umount() c141e6c5d2a8 mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount a010ae1a9afc iommu/dma: skip swiotlb bounce for DMA_ATTR_MMIO in iommu_dma_map_phys 8f86e3a595af arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value a3f8afd54678 arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single 9b4a665e5300 arm64: dts: lx2160a: fix incorrect pinmux c86077791d77 clk: qcom: gpucc-kaanapali: Mark the GPU CX GDSC as votable 43fd38cf1441 clk: qcom: gpucc-glymur: Mark the GPU CX GDSC as votable 836b36b0b274 clk: qcom: gcc-kaanapali: Fix always-enabling PCIE_RSCC clocks 4751652e44f4 clk: qcom: gcc-eliza: Fix always-enabling PCIE_RSCC clocks 952b5c99a840 xfs: fix exchange-range-to-eof file size exchange 4756c94260e6 xfs: stop exchanging reflink flags when exchanging mappings f1f0c24ca701 namespace: keep the lock on a mount that a propagated copy is moved beneath 6ab37fae1419 namespace: handle mount locking for automounts correctly d23265a12e49 namespace: never expire a locked mount 2d498080c02d nullfs: don't update the access time 776e20e4fdc2 namespace: refuse an automount below a mount that is in no namespace aaabd3108550 fcntl: refuse F_SET_RW_HINT on an immutable inode b43ff2deef48 namei: don't reveal overmounted entries in refwalk 8300de4aa5d0 namespace: unhash a dentry before detaching the mounts on it 00287afa7cd9 namespace: don't let a pseudo dentry become the root of a mount 56fe03a0c05d unshare: don't drop active namespace references that were never taken 30a162502241 dcache: don't put a mountpoint on a dentry that's being removed 3dad2330c893 namespace: check the mounts before reading their parents in pivot_root() 9e820a6becdd namespace: remove the fsnotify marks of a mount namespace in process context 5a1310bd90cd namespace: don't reconfigure internal superblocks via remount and umount 87ecd4c6da14 namespace: look at the topmost mount for a mount namespace file b8a94a405ddc namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE 37a82f400efa namespace: check a recursive bind mount for mount namespace loops 18902a23ef36 namespace: check a submount for references right before unmounting it 702ff3fe4998 namespace: queue a mount only once for mount notifications f8fceeef1e1f namespace: check the target before walking it in do_mount_setattr() fc100afdd063 fs: refuse fspick() on internal superblocks 8d3527457e18 namespace: don't copy an unmounted mount tree 5077b52e9e4d namespace: don't inherit MNT_UMOUNT in clone_mnt() 98fc6c7b6ca6 statmount: read the parent of an unmounted mount under mount_lock 08d575ee8939 namespace: reset the old parent's ->overmount in mnt_change_mountpoint() a210ac218c30 fs: don't silently unmount busy mounts da408eb52170 mount: keep a copied mount unbindable 04ee82fec489 drm/amd/display: disable self-refresh on tearing flips ab13a7b90d8b drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs 1fb745806e9b drm/amdgpu/userq: return the memdup_user() error for the user MQD 8640b3f961d7 drm/amdgpu/userq: only accept doorbell BOs as queue doorbell 24285f4eb268 drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks cb4425e1474f drm/amdgpu: make Mac FB workaround generic f4a0a1ce147d drm/amdgpu: serialize vblank counter reads against GPU reset 68b9a10821cc drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info b8809ff3c384 drm/amdkfd: align SDMA doorbell base for shader doorbell writes d7cd43c2f546 drm/bridge: th1520-dw-hdmi: Fix remove() callback 7642255eed9a drm/bridge: th1520-dw-hdmi: Fix error check on dw_hdmi_probe() return value b3eaff982839 drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin ab39bc55cf08 drm/xe: Fix shrinker accounting double-subtraction on nested external pins 175d654cd483 drm/xe/i2c: cancel the client work on remove fcb137f6e7ed drm/vmwgfx: validate pitch coming from userspace 981eb78f7fa4 drm/vc4: Fix firmware reference leak in vc4_drm_bind() ade226dfd28c drm/vc4: drain the hangcheck timer and works on V3D unbind 9be126be5f78 drm/panthor: validate userspace queue count against initialized firmware slot count 7f73da0facf8 drm/imagination: Size page table preallocation by device address 49d349c42cf5 drm/i915/gt: Unmask interrupts only when ACTIVE is true 72d5cbb10d49 drm/i915/gem: Prevent overstepping exec array boundary ad3cf897bd6b drm/gud: don't keep a connector without a CRTC as connector_state d510ed273854 drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN d0aef0b03746 Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown f492de11b325 Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex b8814161b14c Bluetooth: RFCOMM: free the skb when the DLC has no owner 8a98d58f6cfe Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() 07976405a3c7 Bluetooth: MGMT: Fix status of pending commands flushed on power off 3728f6b0d599 Bluetooth: ISO: Serialize concurrent connect calls 79993e9919a8 Bluetooth: ISO: Reject concurrent BIS listener setup 762850c203fa Bluetooth: hci_sync: Fix command skb lifetime during scan setup e660a2240294 Bluetooth: hci_sock: Serialize dead-device detachment 3c5d12a2c6f3 Bluetooth: btintel_pcie: use managed IRQ teardown 8123990c45fe riscv: ptrace: reject CFI regset access when extensions are absent f71d6ea3843c riscv: patch: fix handling of bpf-jit execmem addresses 4a62302698c9 riscv: lib: Fix ZBB strnlen wrap-around regression on huge counts 3a6d3d20ef24 riscv: hwprobe: use _BITULL() rather than BIT() in MIPS vendor uapi header 8e48d8d51ab3 riscv: futex: untag the user pointer before the atomic access 958034078c5f riscv: fix load_unaligned_zeropad() fixup for RV32 7fee577a2fa7 riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE 37b4401ee6fa riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp b84bc3a64d8b scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ 96b1ae2c7db1 scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock() 991f3527a635 scsi: qedi: Initialize callback state before registration 1d35a17f1c2e scsi: ch: Do not keep references to data transfer element devices 9ff26d26973e pmdomain: rockchip: propagate subdomain add errors a2f3e21d58f7 pmdomain: rockchip: fix clock leak on domain probe failure ca26c42fa30f pmdomain: rockchip: don't ignore clock lookup errors on attach 70db811ddb55 pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains f3423b56be12 regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 a3384ec2516a regulator: of: fill in supply names in of_regulator_bulk_get_all() ca5d85335a8f regulator: ltc3676: don't read the write-only HRST and CLIRQ registers 5cd2354ebfbd power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all() 2f7240f0a6fd optee: register TEE devices only once fully initialized 80db24f3c16f openvswitch: fix soft lockup in the netlink flow dump 1b472d00b274 nvme: fix swapped ZRASF zone state values for full and read only f34b1bcac458 net: team: free skb when broadcast has no txable port bed63353341d net: team: stop reusing skb after queue override 5e5cf3ad7c09 net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop c336fe2a4044 net: usb: ax88179_178a: fix rx frame length for non-last packets 44efb6d92dd5 net: sparx5: free the matchall entry on destroy 39d1a6b60183 net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() 283caf4406e2 net: dsa: microchip: fix KSZ8765 fiber detection 7931fb918142 net: bridge: avoid recursive multicast port cleanup c223da71abfa net/smc: protect clcsock lifetime in smc_getname 00fbf71e7411 net/packet: guard the ll header push in packet_rcv_spkt() dbad91a31c48 mmc: sdhci-sprd: disable runtime PM on remove edef1355224c mmc: mtk-sd: Cancel request timeout work on remove 56ead289265f mmc: cavium-thunderx: destroy slot platform devices on remove 167251cac699 mmc: cavium-octeon: destroy slot platform devices on remove 301691c32b8a dm: fix reading free memory in do_resume 6d8bb768a865 dm-snap: reject the transient exception store for snapshot-merge f49cd7820cd0 dm-integrity: fix buffer overflow in inline mode with large tag size 40ea7dfa8cd5 dm-crypt: reject the lmk IV mode with AEAD ciphers df6c704a08bc mm: don't schedule deferred kernel page table freeing while booting badefd43eca3 mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP 5616da0f9233 memstick: rtsx_usb_ms: complete requests after eject instead of dropping them 3af81770e201 memstick: core: wait for request completion before freeing card da0b595d8e6e KEYS: Fix add_key() race with keyring restriction 5e6fb00b0c35 keys: finalize persistent keyring timeout after link attempt 8f27260b989f ip6_gre: remove obsolete ERSPAN PMTU update 596a955d2d01 io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6 f55c240192de io_uring/register: don't exempt disabled rings from task restrictions 5e4d20db5179 ice: fix metadata_dst refcount handling on representor teardown b98eb58ba2f8 ice: fix use-after-free in dynamic port cleanup bca153f1d075 ibmveth: fix TX LTB and filter unwind on open-fail d24fdec1413c ibmveth: h_free logical LAN on open-fail after register 889f76387485 gve: fix XSK buffer leak on error descriptor 7a7e6bbbf058 gve: fix XSK buffer leak when rings are stopped 3d377911ce81 gve: fix napi_disable deadlock when attempting to disable XSK pools 0bc91eda694a iavf: send MAC change request synchronously 2fd6ecda5d1f gpio: xilinx: fix runtime PM leak on request error path c0071ee496e1 gpio: mpsse: fix race when arming the IRQ poll worker fa84f091a8e7 fsverity: RCU-delay the freeing of struct fsverity_info 79da5abcac1c EDAC/amd64: Mask UMC chip select to the four implemented selects 31729932c72c e1000e: add system to disable K1 list fb10c9c60661 selftests/mm: cleanup -Wformat issues in hugetlb-mmap c4867092976f sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute c997832414f1 selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts 36a559b3f40b selinux: fix data race on AVC latest_notif b8d5c678a405 Revert "wifi: libertas: reject short monitor TX frames" 3c3b308ee6e2 tipc: hold a reference to nodes found by link name fb717c536af2 tipc: destroy topsrv workqueues before closing connections 3aa6f536a95e tcp: reject net_iov in zerocopy receive mapping hints 753d4c15d9f8 swiotlb: fix default_swiotlb_limit() for non-growable default pool eaa3a29004c0 strparser: make sure __strp_recv isn't running before tearing down the parser c2a97703359e tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() 84e3ea6502b5 xen/netfront: don't leak the skb when xennet_fill_frags() fails 098d80b04d0f x86/CPU/AMD: Fix AMD TLBI Erratum #1718 1a2668682e99 workqueue: Fix NULL current_pwq deref in chained work check 3bec3d32c2a3 wireguard: noise: reject response consumption after intermediate initiation c8b60ba3bc87 wireguard: queueing: preserve tstamp_type when encapsulating packet e4ce326b4ce2 wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() 19d6fa087dcf wifi: mt76: mt7603: initialize global station WCID 47ca6395a1d9 wifi: brcmfmac: fix P2P device removal race in brcmf_detach() dd4b2f88ee51 vsock/virtio: account only unread bytes in read_skb() 2ae87402e674 usb: f81604: fix struct f81604_int_data size mismatch 725b49c689bb dm ioctl: don't let data_start run past the buffer 6e49d611a9cf cipso: adjust cached option offsets when removing CIPSO a21c255159bf cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() 1c2e571e4cae can: fix unique skb identifier regression under RPS 8078375dfd0b can: dev: init_can_skb(): restore skb header initialization a7e5992bc370 btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() 28dd88c4a4c2 ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands fda141e41f52 ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) cc5511324044 arm64: irq: exclude the softirq stack switch from KCOV c1b708f712f5 ALSA: hda/tas2781: Accept V1 calibration data without CRC 0919d8dd19f9 ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers 6c2772fa311f Input: xpad - add support for Corsair Novablade Pro 2b0c5671e858 Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox 2caae9d1977b Input: ati_remote2 - fix type confusion in device attribute handlers 291fe0bafee7 ipv6: do not warn on route notification size race 221ef5e1e44a ipv4: do not warn on route notification size race ad2b3a68b8a7 ipv4: stop route notification sizing when nexthop group shrinks b9a30bb7b831 ipv4: stop exception dump when nexthop group shrinks f27483f9975b ipv4: stop PMTU walk when nexthop group shrinks fb0f8dfc5a03 rust_binder: reschedule node refcount update on thread exit c3e334647461 ipv4: validate checksum_start before completing checksum 8c9b310c958b ipv6: udp: Create exceptions before socket matching be4fd05398f2 ipv4: udp: Create exceptions before socket matching 4446752655c9 ipv6: Fix redirect exception creation for UDP/RAW sockets 3d73a1164a8c net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry 655f47477054 net/mlx5e: Prevent stale XSK buffer release on refill retry 43f830e2bb84 fs: Free any excess xarray nodes in clear_inode() 5213f65a9667 bnxt_en: fix DMA mapping length for padded small packets