f11b1689529e Linux 7.2.13-xanmod1 79513073885c Merge tag 'v7.2.13' into 7.2 3c172eede0d6 Linux 7.2.13 924fe47419ff smb: client: drain outstanding I/O before truncating on O_TRUNC open dedb4aa2c3a9 ntfs: fix memmove overlap in ntfs_new_attr_flags 7dc2c5246080 ntfs: move attribute payload before shrinking its record c5434e86d6c5 ntfs: fix resident conversion in ntfs_new_attr_flags f0b0738ba957 ntfs: take invalidate_lock in ntfs_setattr_size() 5c581a59bcce ntfs: use pagecache_isize_extended() on size extension 3d2ef2b9f4c0 workqueue: Fix unbound pool lifetime for pending pwqs f0f18075e45d sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor 396ba6f04da3 sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ 2d9d24385201 drm/amdgpu: free the userptr ranges when a CS fails after parser_bos 62ebf3310eeb drm/amdgpu: Remove the bo list mutex 357061da006f genirq/proc: Fix missing CPU header in /proc/interrupts 2c4d5de1b682 ntfs: fix undefined behavior in mft/index record size calculation 0a9122cada74 ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize 5e87da8ba8d3 ntfs: fix FITRIM range alignment ad096ce2923c ntfs: handle signal interruption in fallocate 9efbd764ab80 smb: client: reject SetEA requests that do not fit the request buffer 23ee613f831b smb: client: fix multiuser mount with krb5 596b4062e6c7 smb: client: fix heap overflow in cifs_do_set_acl() ffa66fdc7d35 smb: client: fix data corruption with concurrent writes and O_TRUNC bb187146c7e5 net/sched: cls_flower: validate mask pointer after nla_next() 015fffa48e96 ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in 03bb4338c3a7 ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION ab057f271ef6 ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION c962695467d3 net: psp: do not inherit the Rx association on clone 7afab9846120 net: ntb_netdev: Fix statistics races b45e8c24608c net: bridge: mcast: don't truncate the port group walk on teardown 05f7a2f712f8 drm/i915/dmc: Harden DMC firmware payload parsing d1d6b859e89d drm/amdgpu/userq: actually validate userq BOs 76acfb84973b drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction d6e08ec2fff4 KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes ad50f41e4f04 drm/amdgpu: Fix VCE 3 ring align_mask d5520e815c4b ipv4: avoid divide by zero in fib_rebalance 90c423b62ec9 vsock/vmci: validate packet source for connected sockets e9bf92de436b vsock/virtio: validate packet source for connected sockets 126a7c227d85 s390/pci: Fix leak of uninitialized kernel data in SCLP report cf348ec613f7 s390/pai: Handle multiple PMU stop callback invocations 8a2f7a4ad1d8 s390/ctcm: Prevent XID null dereference dca1b51693c8 page_pool: keep frag_offset aligned for odd-sized requests 9ac57e4c62e9 sctp: validate chunk length in the inqueue parser e1ef306ba20e selinux: fix BPF token permission checks fa8c78c0e49a tipc: protect node reset trace dump with node lock bc48075278e4 workqueue: Annotate cb_lock nesting when draining a dead BH pool 3c2928f1ed19 workqueue: Use raise_softirq() to trigger softirq in irq_work handler 3005459e0ddf io_uring/cancel: don't spin on local work the task can't run a1b9b87f45ea netlink: specs: add missing mask attributes for conntrack dump 64a55488a368 netlink: specs: fix the conntrack filter type fca6b33b8a60 xfs: fix zoned write iomap flags assignments 7809ac0161c7 xfs: fix capability check in xfs 6353e5cd8c43 xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf fe7393a627db net/iucv: fix the recvmsg window update a585901bb8cd mac802154: fix data race and NULL deref on local->assoc_dev 74e4ecc08c3d dm-integrity: require stable writes for internal hash modes 251b44b42492 dm-integrity: fix infinite loop on discard with large tag size 2fe1e2fe3170 dm-ebs: fix incorrect device offset check in ebs_ctr() 4f16bb982b27 dm-crypt: fix a tiny race condition in crypt_dec_pending 104f09e02038 dm cache: fix issue with background work locking 96fb82b38a55 dm cache: fix demotion stats in passthrough mode 88a51743cd80 cifs: don't update i_size in cifs_do_truncate without a cached handle bcd2ba4cc245 cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() 71154fc2e351 cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children 39aa489e8575 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) a8e45471afa2 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) 8c4f962f368d wifi: p54: validate firmware record lengths 135a0cdac6c9 tracing: Fix ignored return value of resize_buffer_duplicate_size() 89e90b16aadd tracing: Fix hist trigger timestamps for buffered events b1547c6ba93b tracing: Fix crash in print_graph_function_event() 7539c61f522f tracing: Do not initialize tracefs work if tracing is disabled 75e894f92417 tracing: Check operator stack capacity before pushing 5f6175281ec2 tracing: Take trace_types_lock when dropping the buffer_meta reference 68ecc9510bb8 tracing: Keep the predicate limit separate from program capacity e0298fcb8555 tracing: Fix the shift out of bounds in the log2 histogram modifier 2f8b49b415cd sched_ext: Propagate every bypass depth change to the descendants 3e6672f0a5a5 sched_ext: idle: Respect task affinity in restricted CPU selection 633f586329bf sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue 135e998dd1e6 drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change 49e59f9bcc94 drm/xe: Bump LRU for external objects on exec and rebind 2fbd099b4e7c drm/i915/dmc: Add sanity check for DMC load address 326ceaa89697 drm/i915/cx0_phy: Fix ARL-S host bridge detection 7a10cd79c4d9 drm/exec: don't immediately add prelocked obj to array of locked objs ba76082b1b81 drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES 6467c4cc83b9 drm/amdgpu: keep the eviction fence until the last handle is closed 5d9c2d3e67f1 drm/amdgpu: fix sched entity leak in ttm buffer entity init 64a6d40156ae drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl 253555a9bacc drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr 42bd6e453846 drm/amdgpu: destroy mutex when tearing down ttm buffer entity 123e1d47db26 drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set c65ea712a691 drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang 1f1750d47464 drm/amd/pm: add zero fan stop temperature support on smu 14.0.2 4c8b5e5b9776 drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions f721487523d4 scsi: libiscsi: Validate the task named by a management response d79343ae3223 scsi: libiscsi: Validate the ITT reflected in a Reject PDU 35b60549a956 scsi: libiscsi: Reject a negative task index from parse_pdu_itt 15791e57f57f scsi: xen/scsifront: Check for a NULL shadow entry on a backend response 18a0e3733ce3 scsi: st: Fix use-after-free race between st_remove() and st_open() 7a755f6d47b8 scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies 68e6ab180cfb ring-buffer: Fix false warning in ring_buffer_map_get_reader() 7469b3585ef5 ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() ae670c1a24fb ring-buffer: Do not show buffer_meta for CPUs without a buffer 329e1a230741 perf: Update cgroup time when rotating multiplexed events 5c9a86256c55 perf: Track the perf mlock gift separately 47e105bdc863 i2c: xiic: restore non-managed runtime PM to fix clk WARN flood 1875de656370 i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() bb39720dbd05 i2c: qcom-cci: Fix HALT_ACK reset request being dropped 7f9eb6aaf9a3 gpio: shared: gracefully handle no-device lookup of shared GPIOs 8861491f8501 gpio: shared: fix use-after-free bug when adding shared proxies deb336ae7c7b tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields 425976fc4886 tools: gpio: fix building from the top level with O= 8163c6fdd510 tools/power turbostat: Read complete CPU lists 2777f6637da0 spi: imx: fix slab corruption from undersized DMA bounce buffers fd56ac95ec31 sctp: revalidate output stream after association connect wait e3318dd73b23 riscv: dts: microchip: beaglev-fire: remove double definition of gpio interrupts 1d7a731ddb16 power: sequencing: qcom-wcn: power off WLAN at probe db531fa89c77 pinctrl: amd: Clear S4 wake bits when firmware has _AEI ca14c289ed9f net: rds: fix uninitialized trans dereference in CM event handler 2e012e431aa2 net/sched: fix use-after-free in __tcf_action_put() 5c0757b065fb mshv_vtl: Check per-CPU register page before mmap 9b016f25f717 lib/crypto: poly1305: Use memzero_explicit() in poly1305_final() 414e60bbca2e lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state 2855ddc6844f futex: Fix mm reuse handling for FUT_OFF_MMSHARED 92c9171f95ee namei: test for a negative dentry the way traverse_mounts() does bd71d33923b9 namespace: a mount that copy_tree() leaves out can't take over a lock 7abecef26a9b ntfs3: free the sbi after a grace period c0620b648321 ipc: drop the mqueue mount with kern_unmount() on setup failure 45fcfd5d9c10 eventfs: Free the eventfs_inode after an rcu grace period too 87d29b8b8497 ext4: free the sbi after a grace period 7deb57708403 pid_namespace: make zap_pid_ns_processes() freezable 472589eacdf1 fsnotify: prevent mark additions during connector teardown c9716f956216 KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry 184382f9852d KVM: SEV: Fix page dirtying in sev_gmem_post_populate() f45ee1ff6358 x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context 9e73a6754457 watch_queue: Fix note pool publication race in watch_queue_set_size() 6560c3d9a692 unicode: free the map after a grace period 0fa258819abb bootconfig: give the footer size static_assert a message fb296391f685 autofs: ignore notification errors from a replaced pipe a761789d657a ASoC: SOF: sof-client: Use event-handler mutex consistently 5e1322787c5e ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture 7cd3019e8924 afs: free the super info after a grace period c137756469d5 accel/rocket: search every core slot when looking up a scheduler 134451cf95cb accel/rocket: search every core slot when a core is removed 69f9de644f9c 9p: free the session after a grace period a8caee0e623c firewire: core: fix race condition in split transaction handling 0efe927053f7 x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx() 581fb47389fc PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV 938ff9c0e858 PCI: Ignore Immediate Readiness on Samsung 990 PRO and 990 EVO Plus NVMe 792acd173da0 printk: Postpone kthread startup f5f0028764de perf: Fix perf_pmu_migrate_context() leaving events behind cfc707a0a49f perf/x86/intel/uncore: Fix DMR CXL CM invert filter affc6d572935 net: stmmac: dwmac1000: clear the RGMII status interrupt 21596ceb6374 ring-buffer: Use subbuf_order in available memory estimation 04228a1d47b8 gpio: mxc: fix race between gpiochip registration and IRQ domain setup 31a797762ca7 gpio: mxc: fix wakeup_pads bit operations df6395fe5d4c gpio: mxc: fix both_edges bit operations 6c1e035d8815 gpio: mxc: fix race between chained IRQ handler install and probe completion 890c3bf08e0f gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths 8ee0e0366382 calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() 7939ad3b4db9 net: bcmgenet: unshare the skb before writing the control block e7694aab7ad0 net: ti: icssm-prueth: Move setting of netops to fix crash 5293e376e9d6 net: ethernet: aeroflex: move setting of netops to fix crash c51b13299b4d net: ethoc: move setting of netops to fix crash cfc11024fc06 net: au1000: move setting of netops to fix crash bfb1ca89e9f6 net: mv643xx: move setting of netops to fix crash d2eca3a54f41 net: ethernet: actions: Move setting of netops to fix crash 1c2f9c3a63ba net: hisilicon: hip04_eth: Move setting of netops to fix crash 06ef5b084b15 net: hisilicon: hisi_femac: Move setting of netops to fix crash 078deff25f8a netlink: avoid hashing the network namespace pointer 08b95ef36a64 scsi: libsas: Fix SMP IO deadlock during HA resume dc6c7cf2090a tracing: probes: error if BTF is required but unavailable ef398f6715f4 ring-buffer: Skip si_mem_available() for persistent and remote buffers 17c424d9d28d tracing: Fix simple_ring_buffer undef check on sparc64 9f533ae51608 tracing: Fix simple_ring_buffer undef check on parisc 75a6278ddb38 tracing: Fix empty symbol names in simple_ring_buffer undef check 2259809e5b70 pipe: preserve existing fasync readers on writer setup failure 3d3a7390e24c exit: fix lost-update race on the child_subreaper bitfields 460dbf849521 samples: pidfd: fix userprogs typo 2bc426a32bfb ocfs2/dlm: Protect the recovery list during debugfs reads eabb519d45fc drm/panthor: fix immortalis condition 7cadb8d82ee4 iommupt/kunit: Use if_changed_rule for the kunit 2557eb2d8bfd entry: Account the deferred hrtimer rearm as hardirq context for lockdep ae89744c5ebf sched/core: Call wakeup_preempt() for queued tasks during class change 6caa2b3edb7d scsi: target: iscsi: Fix race in discovery auth updates 756365052273 scsi: target: Disable interrupts while holding delayed_cmd_lock 67defb87a0a6 scsi: st: Save the visited block for the partition the drive is in c01068a1944b nios2: fix __wsum type degradation in csum_fold() c6ab64c4786a spi: tegra114: assert CS GPIO for every transfer in a message cd3e2918c247 drm/xe/oa: Zero OA buffer at allocation b6499d19ade1 drm/xe: skip eviction of a BO with no resource e01b5d143e24 ASoC: amd: yc: disable MSI on resume b993de8eb893 net/mlx5: HWS, fix flow meter offset within its bulk 374b28a46239 net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool dd47a6c92008 accel/rocket: clear rdev on device init failure 06935da5de83 netlink: reset skb headers before unicast and multicast filtering a87481103d4f regmap: Drop map lock during cache init and exit f98e96f937a8 ASoC: nau8822: Fix the 128x oversampling switch bits 26beeefbce5d ASoC: wm8978: Fix the 128x oversampling switch bits 40cc9bf395c8 ASoC: max98371: Fix the Speaker DHT Min Volume bits f31f55e4823b ASoC: pcm3168a: Fix the DAC zero flag polarity bit 784a5b8b91b5 ASoC: cs42l52: Fix the NG Type Switch bit 565a1a2f50de ASoC: cs42l56: Put the Limiter Cushion control on the limiter register 576466484073 ASoC: stm32: spdifrx: fix synchronization state check f92aa855f017 ASoC: Intel: avs: Reset the stream unless it is already prepared 20de4c439364 accel/amdxdna: Fix Kconfig invalid configuration 91ece3efa064 net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure 44d1ca05d609 vsock: treat TCP_CLOSING as once-established ac9132f3c0f2 gpio: nct6694: Mark the GPIO controller as sleeping 6a987992c78e drm/vc4: hdmi: Move packet RAM enable to PM runtime 4f2321b30670 pinctrl: sunxi: dt: do not accumulate npins across probe attempts 21ddf976f204 pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 45388e50d14b power: supply: core: prevent unregistering a power supply while a callback runs 57ff289505fb power: supply: generic-adc-battery: Fix temperature IIO channel conversion 74784f1ead35 tools/power turbostat: Fix add_counter issue if > 24 counters. 429bcb67630d tools/power turbostat: Fix PMT error path fd handling 0bea622befdf tools/power turbostat: Fix CWF PMT off-by-one 3513b9d7cc35 tools/power turbostat: Fix fd_perf leak on reset 35f1cce2ff38 tools/power turbostat: Warn, but don't Err on out-dated perf systems c8b8326aa547 pinctrl: qcom: spmi-gpio: make direction changes exclusive 096e20372476 pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 51f935a7e928 ARM: configs: sama5: enable current Microchip KSZ DSA symbols 6b662f6e6a56 pinctrl: qcom: qcs8300: Fix intr_target_width a723b4dd99f4 pinctrl: qcom: hawi: Fix intr_target_width d68d5e430b31 pinctrl: qcom: nord: fix GPIO interrupt target width 3195546a377c Drivers: hv: Don't reset VMBus connection state on error/exit paths bc8ca0f47696 x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() 95fec47cdbf7 Drivers: hv: Avoid infinite retry loop in init_vp_index() 43bc7d5707bb soc/tegra: pmc: Fix uninitialised clock rate a6f95263d9f3 power: supply: ds2780: Fix ds2780_get_capacity() returning raw value f93a54e83e3f power: supply: Fix maintenance charge table kernel-doc cea6e3e7a990 ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition 44f272f6cba0 soc/tegra: fuse: Add missing newline to APBMISC error message 2bd56a2de831 i2c: qcom-geni: Restore the source-clock selection policy d41b9735881a ksmbd: exempt FSCTL_PIPE_TRANSCEIVE from the generic file-id lookup