Linux Kernel 7.1.10

The 120 most recent commits in this release — the full changelog is longer:

• Linux 7.1.10
• ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r
• erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
• spi: virtio: mark device ready before registering the controller
• drm/log: Fix infinite loop when scale is too large for display
• drm/log: Fix out-of-bounds read on empty message length
• drm/log: Fix division by zero when scale module parameter is 0
• drm/xe: Fix a bug in pc_adjust_freq_bounds()
• drm/xe: Set GT rp min frequency as 1.2GHz default for BMG/CRI
• drm/xe/oa: Check managed mutex initialization errors
• drm/xe/oa: Fix sync entry leak on OA config emit failure
• drm/xe/pxp: add termination on resume
• firewire: ohci: fix NULL pointer dereference in ar_context_release
• l2tp: fix tunnel and session refcount leak on seq_file release
• net/sched: cls_bpf: reject dev-bound programs bound to a different device
• accel/amdxdna: Skip unmapped range in aie2_populate_range()
• net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
• regmap: sdw-mbq: don't call an unset readable_reg callback
• m68k: Define NR_CPUS to 1
• pid: reject allocations through dead ancestor pid namespaces
• net/sched: cls_u32: skip hash tables in u32_bind_class()
• net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
• af_packet: Don't send zero-byte data in tpacket_snd().
• regmap: sdw-mbq: Fix swap of timeout and retry times
• ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
• net/tls: Fail tls_sw_splice_read() after a failed async decrypt
• net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
• net: tap: fix wrong transport_header when sending VLAN-tagged frame
• net: packet: fix wrong transport_header when sending VLAN-tagged frame
• net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path
• tcp: fix icsk_ack.ato bitfield overflow
• veth: fix queue index used to wake the peer txq in veth_poll
• macvlan: inherit needed_headroom and needed_tailroom from lowerdev
• ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
• eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
• eth: bnxt: decrease indent in bnxt_request_irq()
• eth: bnxt: keep the aRFS rmap updated when TPH is enabled
• eth: bnxt: cancel IRQ notifier before freeing affinity mask
• netfilter: ipset: let destroy callbacks adjust ext mem size
• netfilter: ipset: fix list type element drift bug
• netfilter: flowtable: publish GC-visible tuple last
• netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
• ipvs: revalidate ihl to prevent out-of-bounds access
• netfilter: ipset: fix refcount race between list:set GC and swap
• tick: Include ktime.h and jiffies.h in linux/tick.h
• ASoC: tas2781: fix clang build error for goto bypassing cleanup variable
• gpio: ml-ioh: share the register lock across channels
• rseq: Prevent hard lockup on granted time slice extension
• ovpn: defer key slot crypto freeing to workqueue
• ovpn: run deferred work on a module-owned workqueue
• riscv: lib: Fix ZBB strnlen reading past count boundary
• ALSA: usb-audio: Fix mixer regression on SteelSeries Arctis Nova 5
• sctp: validate cookie AUTH state before use
• perf: Reject exited events as group leaders
• scsi: core: pair EH runtime PM get and put
• riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions
• ovpn: finish crypto callback cleanup before peer release
• ovpn: fix NULL dereference when killing missing key
• af_unix: Unlink scc_entry in unix_del_edge().
• regulator: fp9931: Fix VPOS/VNEG voltage selector table
• gpiolib: Check gc->get_direction() before calling gpiod_get_direction()
• rhashtable: fix false-positive lockdep splat on rhltable destruction
• crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
• crypto: ccm - Set rfc4309 maxauthsize from child
• arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
• clk: spacemit: k3: set hdma clock as critical
• clk: spacemit: k3: fix USB2 bus clock
• optee: ffa: Add NULL check in optee_ffa_lend_protmem
• clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK
• ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup
• net: expect instance lock in netdev_queue_get_dma_dev()
• net: rename netdev_ops_assert_locked()
• drm/amdkfd: Add bounds check for CRAT subtype length
• drm/mediatek: mtk_dsi: Enable HS clock only at pre-enable
• drm/mediatek: Convert legacy DRM logging to drm_* helpers in mtk_dsi.c
• ASoC: tas2562: Validate values for volume writes
• ceph: fix hanging __ceph_get_caps() with stale mds_wanted
• ceph: avoid fs reclaim while using current->journal_info
• xfs: check v5 superblock features early
• xfs: check xfarray iteration errors when committing unlinked inode lists
• xfs: don't ignore runtime errors in xrep_iunlink_reload_next
• xfs: don't swallow dquot recovery verification errors
• xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
• xfs: avoid UAF on sc->tempip in xrep_tempfile_create
• xfs: don't return EFSCORRUPTED when scrubbing corrupt parent pointers
• xfs: fix another iunlink infinite loop bug in online fsck
• xfs: fix allocated inodes that show up in the unlinked list
• xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
• xfs: don't zap the attr fork on repair when there are queued pptr updates
• xfs: fix ilock leak on error in xfs_dq_get_next_id
• xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev
• xfs: nlink scrub must take IOLOCK before determining ILOCK state
• xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers
• xfs: set the prev pointer when reinserting an inode on the unlinked list
• xfs: don't double-lock when deleting a self-referential directory
• xfs: only check mergeability of bnobt records
• xfs: zero i_nlink before repair puts inode on unlinked list
• xfs: fix transaction block reservation in xrep_rtbitmap
• xfs: check cowextsize in xrep_inode_cowextsize
• xfs: clear zapped attr fork state when bmap repair finds no attr fork
• xfs: mark nonzero sb_gquotino as corrupt on metadir filesystems
• xfs: bounds-check buffer log item's dirty bitmap
• xfs: fix off-by-one in rtrefcount btree root level validation
• xfs: propagate errors from xfs_rtginode_load
• drm/amdgpu: disallow multiple FENCE chunks in one submit
• drm/amdgpu: Fix UVD decode image min size calculation
• drm/amdgpu: Fix UVD dpb min size calculation for H264
• drm/amdgpu: Fix UVD min buffer sizes
• drm/amdgpu: Implement insert_end for VCE 3
• drm/amdgpu: Reject UVD message with dimensions above 4096
• drm/amdgpu: validate GEM_CREATE domain combinations
• drm/amdgpu: check ASPM on the dGPU host link
• drm/amdgpu: fix missing check in vm_flush()
• drm/amdgpu: fix nbif 6.3.1 l1 low power not functional
• drm/amdgpu: Prefer default discovery offset
• drm/amdgpu: Reject UVD message with invalid number of h265 refs
• drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE
• drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix
• drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()
• s390/zcrypt: Pad trailing CCA or EP11 message with zeros