Syzbot CI

Subject	7.3.2-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-11-04 21:03:05 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 7.3 001/547] net: skbuff: propagate shared-frag marker in skb_zerocopy()	[Body]
[PATCH 7.3 002/547] ksmbd: wait for negotiation before receiving another PDU	[Body]
[PATCH 7.3 003/547] smb: smbdirect: dont wait for RDMA_CM_EVENT_DISCONNECTED in smbdirect_socket_destroy_sync()	[Body]
[PATCH 7.3 004/547] smb: smbdirect: release failed pending sockets of a listener	[Body]
[PATCH 7.3 005/547] smb: smbdirect: dont hand out already failed sockets in smbdirect_socket_accept()	[Body]
[PATCH 7.3 006/547] ksmbd: reject FSCTL_SET_ZERO_DATA on a directory handle	[Body]
[PATCH 7.3 007/547] wifi: ath12k: move dp_profile_params to dp.h	[Body]
[PATCH 7.3 008/547] wifi: ath12k: convert DP_TX_COMP_RING_SIZE to inline helper	[Body]
[PATCH 7.3 009/547] wifi: ath12k: convert DP_RXDMA_MONITOR_BUF_RING_SIZE to inline helper	[Body]
[PATCH 7.3 010/547] wifi: ath12k: convert DP_RXDMA_MONITOR_DST_RING_SIZE to inline helper	[Body]
[PATCH 7.3 011/547] wifi: ath12k: convert ATH12K_NUM_POOL_TX_DESC to inline helper	[Body]
[PATCH 7.3 012/547] wifi: ath12k: convert ATH12K_RX_DESC_COUNT to inline helper	[Body]
[PATCH 7.3 013/547] wifi: ath12k: convert DP_RX_RELEASE_RING_SIZE to inline helper	[Body]
[PATCH 7.3 014/547] wifi: ath12k: Make RXDMA buffer ring size configurable per memory profile	[Body]
[PATCH 7.3 015/547] wifi: ath12k: Increase RXDMA buffer ring size for default memory profile	[Body]
[PATCH 7.3 016/547] platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE()	[Body]
[PATCH 7.3 017/547] io_uring/waitid: own the request before clearing ->head	[Body]
[PATCH 7.3 018/547] io_uring/cmd: dont leave list poison in ->hash_node	[Body]
[PATCH 7.3 019/547] io_uring/wait: dont spin on a stuck overflow list	[Body]
[PATCH 7.3 020/547] io_uring/io-wq: dont lose the signal that ends work	[Body]
[PATCH 7.3 021/547] io_uring/io-wq: dont hide a link from cancellations	[Body]
[PATCH 7.3 022/547] io_uring: dont flood a cancelling task with task_work	[Body]
[PATCH 7.3 023/547] io_uring: dont lose the DEFER_TASKRUN wake up	[Body]
[PATCH 7.3 024/547] io_uring/cancel: rearm local work wake up before sleep	[Body]
[PATCH 7.3 025/547] io_uring/mpscq: disable preemption while pushing	[Body]
[PATCH 7.3 026/547] io_uring/io-wq: dont go to sleep on pending work	[Body]
[PATCH 7.3 027/547] io_uring/io-wq: dont strand work when a worker exits	[Body]
[PATCH 7.3 028/547] io_uring/io-wq: dont exit with a creation pending	[Body]
[PATCH 7.3 029/547] io_uring/io-wq: let cancel find picked up hashed work	[Body]
[PATCH 7.3 030/547] io_uring/poll: dont lose a cancel as io-wq arms poll	[Body]
[PATCH 7.3 031/547] io_uring: dont lose a cancel as io-wq parks a request	[Body]
[PATCH 7.3 032/547] io_uring/cancel: dont forget that the work was running	[Body]
[PATCH 7.3 033/547] io_uring/cancel: recognize "no timeout" on 32-bit	[Body]
[PATCH 7.3 034/547] io_uring/cancel: let CANCEL_ALL find parked requests	[Body]
[PATCH 7.3 035/547] io_uring: wake ring pollers for local task_work	[Body]
[PATCH 7.3 036/547] io_uring/wait: look at all CQ waiters on wake up	[Body]
[PATCH 7.3 037/547] io_uring/poll: drop stale double poll entry on rearm	[Body]
[PATCH 7.3 038/547] io_uring/futex: allocate private hash before waiting	[Body]
[PATCH 7.3 039/547] io_uring: drop the CQE cache if a refill fails	[Body]
[PATCH 7.3 040/547] io_uring: dont split 128b SQEs at the SQPOLL cap	[Body]
[PATCH 7.3 041/547] io_uring/register: dont wrap 32b CQEs when resizing	[Body]
[PATCH 7.3 042/547] io_uring/register: handle index wrap when resizing	[Body]
[PATCH 7.3 043/547] io_uring/register: keep 128b SQEs intact on resize	[Body]
[PATCH 7.3 044/547] io_uring/fdinfo: fix CQE dump of CQE32 rings	[Body]
[PATCH 7.3 045/547] io_uring/timeout: dont skip over reached sequences	[Body]
[PATCH 7.3 046/547] io_uring/timeout: keep repeat count on multishot update	[Body]
[PATCH 7.3 047/547] io_uring/timeout: use the right clock for ABS updates	[Body]
[PATCH 7.3 048/547] io_uring/wait: no early -ETIME if min_wait finds work	[Body]
[PATCH 7.3 049/547] io_uring/napi: make stale entries time out after 60s	[Body]
[PATCH 7.3 050/547] io_uring/napi: dont busy poll past an expired timeout	[Body]
[PATCH 7.3 051/547] io_uring/zcrx: fix buffer offsets in areas above 4GB	[Body]
[PATCH 7.3 052/547] io_uring/kbuf: handle index wrap in last buffer check	[Body]
[PATCH 7.3 053/547] io_uring/sqpoll: let the thread sleep on disabled rings	[Body]
[PATCH 7.3 054/547] io_uring/openclose: keep the lock in io_pipe_fixed()	[Body]
[PATCH 7.3 055/547] io_uring: dont pass restart error codes to userspace	[Body]
[PATCH 7.3 056/547] io_uring/net: dont retry recv on uncommitted buffers	[Body]
[PATCH 7.3 057/547] io_uring/timeout: no ABS update of multishot timeouts	[Body]
[PATCH 7.3 058/547] io_uring/timeout: dont end a linked timeout with 1	[Body]
[PATCH 7.3 059/547] io_uring: look up the file before queueing to io-wq	[Body]
[PATCH 7.3 060/547] io_uring/timeout: dont put a sequence target behind the last flush	[Body]
[PATCH 7.3 061/547] io_uring/timeout: dont flush with the sequence behind the last flush	[Body]
[PATCH 7.3 062/547] io_uring/timeout: dont lose a cancel as io-wq arms a timeout	[Body]
[PATCH 7.3 063/547] exec: cancel io_uring requests before de_thread()	[Body]
[PATCH 7.3 064/547] fork: move the coredump and exec checks into create_io_thread()	[Body]
[PATCH 7.3 065/547] fork: dont create io threads once PF_POSTCOREDUMP is set	[Body]
[PATCH 7.3 066/547] clk: renesas: r9a08g046: Propagate clk rate for ETH TX mux clocks	[Body]
[PATCH 7.3 067/547] ALSA: line6: Clear prev_fbuf on capture buffer release	[Body]
[PATCH 7.3 068/547] Bluetooth: forget a peers RPA once it advertises its identity address	[Body]
[PATCH 7.3 069/547] wifi: mt76: mt7925: fix reset panic caused by the WM2 rx irq mask	[Body]
[PATCH 7.3 070/547] ARM: 9524/1: mm: align hugetlb mappings to the huge page size	[Body]
[PATCH 7.3 071/547] blk-crypto: fix NULL deref and UAF in __blk_crypto_evict_key()	[Body]
[PATCH 7.3 072/547] ceph: fail readdir when the MDS reply carries no dirfrag	[Body]
[PATCH 7.3 073/547] fuse: dont BUG when the copy buffer is exhausted	[Body]
[PATCH 7.3 074/547] kcov: ignore an out-of-range comparison count in write_comp_data()	[Body]
[PATCH 7.3 075/547] kcsan: Avoid division by zero in kcsan_prandom_u32_max()	[Body]
[PATCH 7.3 076/547] ksmbd: serialize directory emptiness checks with readdir	[Body]
[PATCH 7.3 077/547] libceph: bound mon_command ack decode to front len	[Body]
[PATCH 7.3 078/547] media: cx88: Disable PCI device on MPEG initialization failure	[Body]
[PATCH 7.3 079/547] media: em28xx: reject audio endpoint with zero packet size	[Body]
[PATCH 7.3 080/547] media: go7007: only set audio_enabled if go7007_snd_init() succeeded	[Body]
[PATCH 7.3 081/547] media: usbtv: fix null-pointer dereference on disconnect	[Body]
[PATCH 7.3 082/547] net: ipv4: add zero check for snd_cwnd_clamp	[Body]
[PATCH 7.3 083/547] net: usb: pegasus: do not advance rx_skb->data on dropped frames	[Body]
[PATCH 7.3 084/547] nfsd: fix race between client_info_show() and free_client()	[Body]
[PATCH 7.3 085/547] ocfs2/dlm: drain join handlers before releasing module text	[Body]
[PATCH 7.3 086/547] ocfs2: drain quorum work before removing the cluster	[Body]
[PATCH 7.3 087/547] ocfs2: pin owning modules for open debugfs files	[Body]
[PATCH 7.3 088/547] ocfs2: publish the filecheck owner before adding sysfs attributes	[Body]
[PATCH 7.3 089/547] smb: client: do not pass a NULL buf to is_oplock_break()	[Body]
[PATCH 7.3 090/547] smb: client: fix early procfs exposure race	[Body]
[PATCH 7.3 091/547] thunderbolt: Do not RPM complete unrelated subtrees on unplug	[Body]
[PATCH 7.3 092/547] udf: fix return value for non-recorded-allocated extents in udf_map_block()	[Body]
[PATCH 7.3 093/547] wwan: wwan_hwsim: Pin module for debugfs file operations	[Body]
[PATCH 7.3 094/547] xfs: fix integer overflow problem when setting large free areas	[Body]
[PATCH 7.3 095/547] dt-bindings: interrupt-controller: gicv5: Relax IRS properties constraints	[Body]
[PATCH 7.3 096/547] irqchip/gic-v5: Fix standalone IRSes OF probe	[Body]
[PATCH 7.3 097/547] serial: core: fix TIOCSSERIAL and TIOCSERCONFIG on uninitialised ports	[Body]
[PATCH 7.3 098/547] net/sched: cls_bpf: accept dev-bound programs on shared blocks	[Body]
[PATCH 7.3 099/547] net/sched: cls_flower: avoid stale mask references after delete	[Body]
[PATCH 7.3 100/547] net/sched: sch_teql: fix slaves_lock IRQ deadlock	[Body]
[PATCH 7.3 101/547] net/sched: sch_teql: fix use-after-free on lower qdisc drop	[Body]
[PATCH 7.3 102/547] net/sched: fix packet reordering on requeue	[Body]
[PATCH 7.3 103/547] net/sched: act_ife: do not consume the inner header on egress	[Body]
[PATCH 7.3 104/547] driver core: take parent lock on deferred probe	[Body]
[PATCH 7.3 105/547] driver core: Limit the messages on a refused uevent	[Body]
[PATCH 7.3 106/547] driver core: fix parent lock use-after-free on USB disconnect	[Body]
[PATCH 7.3 107/547] driver core: take parent lock in async device attach	[Body]
[PATCH 7.3 108/547] Drivers: hv: vmbus: Bounds check the shared ring buffer indices	[Body]
[PATCH 7.3 109/547] backlight: lm3630a: Cancel delayed work before destroying workqueue	[Body]
[PATCH 7.3 110/547] backlight: qcom-wled: Fix NULL pointer dereference in wled_remove()	[Body]
[PATCH 7.3 111/547] backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe	[Body]
[PATCH 7.3 112/547] backlight: qcom-wled: Fix WLED3 brightness register stride	[Body]
[PATCH 7.3 113/547] ksmbd: accept share config responses from ksmbd-tools before 3.5.3	[Body]
[PATCH 7.3 114/547] ksmbd: avoid restoring only in-memory EOF after allocation change	[Body]
[PATCH 7.3 115/547] ksmbd: defer connection scavenging while session locks are busy	[Body]
[PATCH 7.3 116/547] ksmbd: deny access for an empty DACL instead of granting the request	[Body]
[PATCH 7.3 117/547] ksmbd: drain session procfs readers before dropping table references	[Body]
[PATCH 7.3 118/547] ksmbd: fix extended session security negotiation for raw NTLMSSP	[Body]
[PATCH 7.3 119/547] ksmbd: fix OOB read and cross-share confusion in ksmbd_validate_name_reconnect()	[Body]
[PATCH 7.3 120/547] ksmbd: fix overflow in dacloffset bounds check in build_sec_desc()	[Body]
[PATCH 7.3 121/547] ksmbd: fix parent dentry lifetime in directory enumeration	[Body]
[PATCH 7.3 122/547] ksmbd: fix session reference leak on compounded SESSION_SETUP	[Body]
[PATCH 7.3 123/547] ksmbd: hold a connection reference for each session channel	[Body]
[PATCH 7.3 124/547] ksmbd: ignore network devices of other namespaces	[Body]
[PATCH 7.3 125/547] ksmbd: limit sessions on each connection	[Body]
[PATCH 7.3 126/547] ksmbd: preserve unreadable named streams on open	[Body]
[PATCH 7.3 127/547] ksmbd: prevent session binding in compound requests	[Body]
[PATCH 7.3 128/547] ksmbd: prevent share root removal through empty paths	[Body]
[PATCH 7.3 129/547] ksmbd: prevent stale data from being written by SMB2 WRITE requests	[Body]
[PATCH 7.3 130/547] ksmbd: reclaim ended sessions on logoff and expiration	[Body]
[PATCH 7.3 131/547] ksmbd: reserve space for the UTF-16 terminator in stream info	[Body]
[PATCH 7.3 132/547] ksmbd: restore Kerberos logins with released ksmbd-tools	[Body]
[PATCH 7.3 133/547] ksmbd: return end of file for reads past a named streams data	[Body]
[PATCH 7.3 134/547] ksmbd: use u8 for SMB2 oplock level values	[Body]
[PATCH 7.3 135/547] ksmbd: validate AppInstanceId takeover target	[Body]
[PATCH 7.3 136/547] ksmbd: validate security descriptor offsets before pointer arithmetic	[Body]
[PATCH 7.3 137/547] ksmbd: verify transform SessionId matches the decrypted header	[Body]
[PATCH 7.3 138/547] vlan: restore HW VLAN tag insertion with reorder_hdr off	[Body]
[PATCH 7.3 139/547] cgroup: serialize migrations of newly forked processes	[Body]
[PATCH 7.3 140/547] wifi: b43: fix use-after-free in b43_bcma_remove()	[Body]
[PATCH 7.3 141/547] SUNRPC: fix netns use-after-free in write_gssp()	[Body]
[PATCH 7.3 142/547] spmi: Fix potential use-after-free by grabbing of_node reference	[Body]
[PATCH 7.3 143/547] smb: client: fix use-after-free infoleak via the readdir resume name	[Body]
[PATCH 7.3 144/547] smb: client: fix use-after-free in cifs_ses_add_channel()	[Body]
[PATCH 7.3 145/547] sched_ext: Fix use-after-free of a local reenq node left on an inactive cpu	[Body]
[PATCH 7.3 146/547] RDMA/uverbs: Fix DMABUF use-after-free during ufile cleanup	[Body]
[PATCH 7.3 147/547] RDMA/irdma: avoid use-after-free in icrdma_remove	[Body]
[PATCH 7.3 148/547] rapidio: mport_cdev: fix use-after-free in mport_mm_close()	[Body]
[PATCH 7.3 149/547] pps: generators: fix use-after-free when closing a removed device	[Body]
[PATCH 7.3 150/547] PM: EM: Fix use-after-free of perf domain in netlink doit handlers	[Body]
[PATCH 7.3 151/547] platform/x86: asus-wmi: fix use-after-free unregistering kbd_led led	[Body]
[PATCH 7.3 152/547] platform/x86/amd: hfi: Fix a use-after-free when unloading the driver	[Body]
[PATCH 7.3 153/547] nvmet: fix use-after-free of the old registrant in nvmet_pr_preempt()	[Body]
[PATCH 7.3 154/547] nvmet-fc: fix use-after-free in nvmet_fc_ls_create_connection()	[Body]
[PATCH 7.3 155/547] iommufd: Fix event queue release use-after-free	[Body]
[PATCH 7.3 156/547] landlock: Fix superblock use-after-free in release_inode()	[Body]
[PATCH 7.3 157/547] lockd: Fix use-after-free in nlmsvc_retry_blocked	[Body]
[PATCH 7.3 158/547] media: au0828: fix use-after-free in bulk_timeout timer on disconnect	[Body]
[PATCH 7.3 159/547] media: cx23885: Fix use-after-free in cx23885_finidev due to race condition	[Body]
[PATCH 7.3 160/547] media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path	[Body]
[PATCH 7.3 161/547] media: imon: fix use-after-free in display_close via dev_dbg	[Body]
[PATCH 7.3 162/547] media: ipu-bridge: Fix use-after-free in IVSC error path	[Body]
[PATCH 7.3 163/547] mm/hugetlb: fix use-after-free in hugetlb_mfill_atomic_pte()	[Body]
[PATCH 7.3 164/547] mm/hugetlb: fix use-after-free of a new anon folio	[Body]
[PATCH 7.3 165/547] apparmor: fix a use-after-free in aa_lookupn_ns()	[Body]
[PATCH 7.3 166/547] ASoC: audio-graph-card2: Fix use-after-free in audio_graph2_link_c2c()	[Body]
[PATCH 7.3 167/547] ata: sata_fsl: Fix use-after-free of host_priv on probe() failure	[Body]
[PATCH 7.3 168/547] drm/msm: Fix vm_bo use-after-free in with_vm_locks()	[Body]
[PATCH 7.3 169/547] s390/pci: Fix double-free and NULL deref in zpci MSI domain cleanup	[Body]
[PATCH 7.3 170/547] s390/pci: Fix MSI directed-mode teardown IRQ bit count	[Body]
[PATCH 7.3 171/547] s390/pci: Fix resource leak in zpci MSI setup	[Body]
[PATCH 7.3 172/547] s390/pci: Fix use-after-free race in zpci floating interrupt cleanup	[Body]
[PATCH 7.3 173/547] s390/pci: Add error cleanup in zpci_directed_irq_init()	[Body]
[PATCH 7.3 174/547] s390/cpum_cf: Check session mask before cpu offline	[Body]
[PATCH 7.3 175/547] s390/extable: Fix mvcos instruction decoding	[Body]
[PATCH 7.3 176/547] s390/kprobes: Prevent kprobes on instructions with exception table entry	[Body]
[PATCH 7.3 177/547] s390/probes: Fix wrong opcode for cgrb fixup	[Body]
[PATCH 7.3 178/547] s390/signal: Fix incorrect return address in signal frame	[Body]
[PATCH 7.3 179/547] s390/vmcp: Initialize full session info to zero	[Body]
[PATCH 7.3 180/547] s390/zcrypt: Fix and improve zcrypt reply message verification checks	[Body]
[PATCH 7.3 181/547] s390/zcrypt: Fix out-of-bounds ptr advance in cca_query_crypto_facility()	[Body]
[PATCH 7.3 182/547] s390/zcrypt: Guard domain index uses against speculative bypass	[Body]
[PATCH 7.3 183/547] HID: wacom: Use hdev->product in wacom_setup_touch_input_capabilities	[Body]
[PATCH 7.3 184/547] HID: wacom: Advertise SW_MUTE_DEVICE capability prior to registration	[Body]
[PATCH 7.3 185/547] HID: wacom: Fix Use-After-Free in wacom_intuos_pad	[Body]
[PATCH 7.3 186/547] HID: wacom: Fix Use-After-Free in wacom_bamboo_pad	[Body]
[PATCH 7.3 187/547] HID: wacom: Redesign shared sibling data lifecycle	[Body]
[PATCH 7.3 188/547] HID: wacom: Setup SW_MUTE_DEVICE according to the order of input registration	[Body]
[PATCH 7.3 189/547] HID: wacom: Write shared touch initial status only once	[Body]
[PATCH 7.3 190/547] klist: avoid accesses after waking klist_remove()	[Body]
[PATCH 7.3 191/547] objtool/rust: add one more `noreturn` Rust function for Rust 1.101.0	[Body]
[PATCH 7.3 192/547] rust: bindings: fix `VM_MAYSHARE` blocklist entry	[Body]
[PATCH 7.3 193/547] rust: bindings: fix VM_MAYSHARE value	[Body]
[PATCH 7.3 194/547] rust: bitmap: restrict bitmap length to at most i32::MAX	[Body]
[PATCH 7.3 195/547] rust: block: fix `Send` bound for `GenDisk`	[Body]
[PATCH 7.3 196/547] rust: block: require `Sync` for `Operations::QueueData`	[Body]
[PATCH 7.3 197/547] rust: bug: pass TAINT_WARN to warn_slowpath_fmt() on UML	[Body]
[PATCH 7.3 198/547] rust: bug: update the SAFETY comment for warn_slowpath_fmt() on UML	[Body]
[PATCH 7.3 199/547] rust: configfs: fix data offset calculation for subsystem callbacks	[Body]
[PATCH 7.3 200/547] rust: cpufreq: reject NULL from cpufreq_cpu_get()	[Body]
[PATCH 7.3 201/547] rust: fwctl: declare cfi_encoding for fwctl_rpc_scope	[Body]
[PATCH 7.3 202/547] rust: module_param: Fix potentially incorrect access of `SetOnce<T>`	[Body]
[PATCH 7.3 203/547] rust: rcpufreq_dt: add module alias	[Body]
[PATCH 7.3 204/547] accel/amdxdna: clear the mailbox channel pointer when starting it fails	[Body]
[PATCH 7.3 205/547] ALSA: control: Fix UAF in snd_ctl_elem_add() on card disconnect	[Body]
[PATCH 7.3 206/547] ALSA: emux: Fix UAF of soundfont zones at note-on	[Body]
[PATCH 7.3 207/547] ALSA: pcmtest: handle multiple wraps in random capture fill	[Body]
[PATCH 7.3 208/547] ASoC: amd: ps: fix snd_acp63_remove() teardown ordering	[Body]
[PATCH 7.3 209/547] Bluetooth: hci_vhci: Pin module for debugfs file operations	[Body]
[PATCH 7.3 210/547] drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase	[Body]
[PATCH 7.3 211/547] fbdev: atmel_lcdfb: Prevent FIFO work after removal	[Body]
[PATCH 7.3 212/547] fbdev: udlfb: dont rebuild the mode list while the framebuffer is in use	[Body]
[PATCH 7.3 213/547] filelock: keep superblock active through delegation wait	[Body]
[PATCH 7.3 214/547] fs/proc/task_mmu: pin mm_users in do_pagemap_scan()	[Body]
[PATCH 7.3 215/547] fsverity: Set S_VERITY only after rollback is no longer possible	[Body]
[PATCH 7.3 216/547] genirq: Defer kfree(irqaction) until irq_thread_dtor() finishes	[Body]
[PATCH 7.3 217/547] genirq: Move interrupt thread exit_work object to irqaction	[Body]
[PATCH 7.3 218/547] HID: hiddev: keep state alive through disconnect unlock	[Body]
[PATCH 7.3 219/547] io_uring/io-wq: save worker type before dropping its reference	[Body]
[PATCH 7.3 220/547] iomap: dont resubmit an ioend after ->writeback_submit() failed	[Body]
[PATCH 7.3 221/547] iommu/arm-smmu-v3: Disable the impl before disabling the SMMU on shutdown	[Body]
[PATCH 7.3 222/547] KVM: guest_memfd: Gracefully handle xarray errors when binding a memslot	[Body]
[PATCH 7.3 223/547] KVM: pfncache: use a dedicated invalidation sequence for cache refresh	[Body]
[PATCH 7.3 224/547] KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls	[Body]
[PATCH 7.3 225/547] media: cx23885: unregister DVB bus when SP2 CI setup fails	[Body]
[PATCH 7.3 226/547] media: gspca: use vb2_video_unregister_device() on disconnect	[Body]
[PATCH 7.3 227/547] media: imx-jpeg: cancel timeout worker when streaming stops	[Body]
[PATCH 7.3 228/547] media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers	[Body]
[PATCH 7.3 229/547] media: microchip-csi2dc: fix async notifier leak on probe error path	[Body]
[PATCH 7.3 230/547] media: microchip-isc: take a reference on the parsed endpoints	[Body]
[PATCH 7.3 231/547] media: redrat3: fix UAF in probe error path leaving rc device registered	[Body]
[PATCH 7.3 232/547] media: s5p-mfc: use timer_shutdown_sync() for the self-rearming watchdog	[Body]
[PATCH 7.3 233/547] mm/rmap: dont discard lazyfree THPs at PMD level	[Body]
[PATCH 7.3 234/547] mm/slab: sample slab_state once in kmem_cache_destroy()	[Body]
[PATCH 7.3 235/547] mm/truncate: look up the end-edge straddler by index	[Body]
[PATCH 7.3 236/547] mm: khugepaged: fix folio is used after folio_put/unlock()	[Body]
[PATCH 7.3 237/547] mm: khugepaged: fix folio is used after pte_unmap_unlock()	[Body]
[PATCH 7.3 238/547] mm: khugepaged: fix swap entry value to folio_pfn()	[Body]
[PATCH 7.3 239/547] mptcp: hold MP_JOIN msk ref when cloning reqsk	[Body]
[PATCH 7.3 240/547] mshv_vtl: detach poll waiter on POLLFREE	[Body]
[PATCH 7.3 241/547] mtd: virt-concat: unlink concat node before freeing it	[Body]
[PATCH 7.3 242/547] mtd: virt-concat: unlink discarded items before freeing	[Body]
[PATCH 7.3 243/547] net: sched: prevent scheduling deactivated qdiscs	[Body]
[PATCH 7.3 244/547] scsi: dc395x: sync the waiting_timer before freeing the host	[Body]
[PATCH 7.3 245/547] serial: core: shut down initialized port on removal	[Body]
[PATCH 7.3 246/547] staging: rtl8723bs: fix protected RX frame validation in decrypt path	[Body]
[PATCH 7.3 247/547] xen-blkfront: unbind irq before tearing down ring and shadow requests	[Body]
[PATCH 7.3 248/547] wifi: ath9k: delete channel-context timers on deinit	[Body]
[PATCH 7.3 249/547] wifi: mt76: mt7996: unlink TWT flow if the MCU rejects the agreement	[Body]
[PATCH 7.3 250/547] virtio_net: atomically disable rx mode work	[Body]
[PATCH 7.3 251/547] vfio/nvgrace-gpu: Use a core-only open_device in fallback mode	[Body]
[PATCH 7.3 252/547] usb: gadget: fix refcount underflow in gadgetfs_bind() error path	[Body]
[PATCH 7.3 253/547] ufs: use u64 for directory size in ufs_last_byte	[Body]
[PATCH 7.3 254/547] spi: spi-pci1xxxx: quiesce DMA engines on transfer timeout	[Body]
[PATCH 7.3 255/547] resource: report a devm_request_resource() conflict under the lock	[Body]
[PATCH 7.3 256/547] phy: core: Fix race-condition between _of_phy_get() and try_module_get()	[Body]
[PATCH 7.3 257/547] power: supply: pf1550: drain IRQ work before unregistering supplies	[Body]
[PATCH 7.3 258/547] power: supply: sbs-battery: disable polling before supply teardown	[Body]
[PATCH 7.3 259/547] pps: generators: dont use the drivers info after unregister	[Body]
[PATCH 7.3 260/547] nvmem: core: Fix OOB read for bit offsets of more than one byte	[Body]
[PATCH 7.3 261/547] nvmet-auth: serialize access to DH-HMAC-CHAP state to fix UAF	[Body]
[PATCH 7.3 262/547] media: rc: Ensure that rc_unregister_device() does not free input device	[Body]
[PATCH 7.3 263/547] media: rc: Ensure registered is cleared in error path	[Body]
[PATCH 7.3 264/547] media: rc: fintek-cir: process a full RX buffer instead of overflowing it	[Body]
[PATCH 7.3 265/547] media: rc: Fix race between bpf(BPG_PROG_ATTACH) and device unregister	[Body]
[PATCH 7.3 266/547] media: rc: Fix race condition during rc_register_device()	[Body]
[PATCH 7.3 267/547] media: rc: mce_kbd: Fix inconsistent locking of keylock	[Body]
[PATCH 7.3 268/547] media: rc: Use after free in ir_raw_event_handle()	[Body]
[PATCH 7.3 269/547] media: rc: After rc_unregister_device() timers can be re-armed	[Body]
[PATCH 7.3 270/547] media: rc: Fix use after free in bpf progs	[Body]
[PATCH 7.3 271/547] media: rc: Fix ABBA deadlock by making locks more fine grained	[Body]
[PATCH 7.3 272/547] ocfs2/heartbeat: unlink live slots when their node is missing	[Body]
[PATCH 7.3 273/547] ocfs2/dlm: hold a lock reference across grant AST enqueue	[Body]
[PATCH 7.3 274/547] ocfs2/dlm: hold the lookup reference across convert AST enqueue	[Body]
[PATCH 7.3 275/547] ocfs2: cancel quota sync work before freeing quota info	[Body]
[PATCH 7.3 276/547] ocfs2: fix chunk number of the first chunk in a local quota file	[Body]
[PATCH 7.3 277/547] ocfs2: pin refcount trees before dropping the lookup lock	[Body]
[PATCH 7.3 278/547] ocfs2: snapshot dentry names in file and setattr traces	[Body]
[PATCH 7.3 279/547] smb: client: fix OOB last_entry pointer from unbounded LastNameOffset	[Body]
[PATCH 7.3 280/547] smb: client: hold server info until cifsd exits	[Body]
[PATCH 7.3 281/547] smb: client: stop processing a read response after a receive error	[Body]
[PATCH 7.3 282/547] ovl: hold a reference on the parent in readdir	[Body]
[PATCH 7.3 283/547] ovl: set OVL_WHITEOUTS before publishing the upper dir	[Body]
[PATCH 7.3 284/547] ovl: take a snapshot of the name for copy up	[Body]
[PATCH 7.3 285/547] ovl: use the pinned upper dir in ovl_fix_origin()	[Body]
[PATCH 7.3 286/547] ovl: always encode the origin fh when index is enabled	[Body]
[PATCH 7.3 287/547] ovl: check that the parents of volatile/dirty are dirs	[Body]
[PATCH 7.3 288/547] ovl: check the casefold flag of directories only	[Body]
[PATCH 7.3 289/547] ovl: do not copy up a dentry that was removed	[Body]
[PATCH 7.3 290/547] ovl: do not copy up an xattr value that was never read	[Body]
[PATCH 7.3 291/547] ovl: fix a torn path in ovl_get_redirect()	[Body]
[PATCH 7.3 292/547] ovl: fix mount setup failing when override_creds drops CAP_SYS_ADMIN	[Body]
[PATCH 7.3 293/547] ovl: fortify ovl_copy_xattr() against underlying layer modifications	[Body]
[PATCH 7.3 294/547] ovl: read the nlink xattr of every indexed non-dir	[Body]
[PATCH 7.3 295/547] ovl: reserve space for the casefolded name terminator	[Body]
[PATCH 7.3 296/547] ovl: set the revalidate flags after d_instantiate()	[Body]
[PATCH 7.3 297/547] ovl: skip copy up of empty security.capability	[Body]
[PATCH 7.3 298/547] xfs: clear the symlink zapped flag if inline symlink is ok	[Body]
[PATCH 7.3 299/547] xfs: mark cow extents bad if theres no rmap mapping for them	[Body]
[PATCH 7.3 300/547] xfs: compute the correct fdblocks/frextents for repair when theyre negative	[Body]
[PATCH 7.3 301/547] xfs: fix ondisk symlink target validation in xrep_dinode_check_dfork	[Body]
[PATCH 7.3 302/547] xfs: fix xfs_rename_space_res for non-pptr filesystems	[Body]
[PATCH 7.3 303/547] xfs: fix missing xfs_qm_adjust_dqlimits call in quotacheck repair	[Body]
[PATCH 7.3 304/547] xfs: fix buffer overruns in xfs_ioc_attr_list	[Body]
[PATCH 7.3 305/547] xfs: online quotacheck must dirty dquot if enforcement adjustments needed	[Body]
[PATCH 7.3 306/547] xfs: avoid cross-rtgroup reaping after a repair	[Body]
[PATCH 7.3 307/547] xfs: actually lock the metafile reservation when adjusting after repair	[Body]
[PATCH 7.3 308/547] xfs: fix unnecessary dapos truncation in xchk_dir_walk	[Body]
[PATCH 7.3 309/547] xfs: fix buffer overflow in corrupt inline attr structure	[Body]
[PATCH 7.3 310/547] xfs: actually report corrupt xattrs as XFAIL during cross-referencing	[Body]
[PATCH 7.3 311/547] xfs: fix inode btree repair when a cluster is larger than a chunk	[Body]
[PATCH 7.3 312/547] xfs: always reset incore attr fork buffer when resetting fork	[Body]
[PATCH 7.3 313/547] xfs: dont pass iget failures up when marking ondisk inodes	[Body]
[PATCH 7.3 314/547] xfs: zero out di_metatype when removing the metadir file iflag	[Body]
[PATCH 7.3 315/547] xfs: flag excessive delalloc rt extents as corruption	[Body]
[PATCH 7.3 316/547] xfs: dont fix the directory tree if live update fails	[Body]
[PATCH 7.3 317/547] xfs: validate rc_domain in xchk_rtrefcount_mergeable	[Body]
[PATCH 7.3 318/547] xfs: dont proceed with xattr repair if the live update fails	[Body]
[PATCH 7.3 319/547] xfs: fix skipped inode mask handling in iscan	[Body]
[PATCH 7.3 320/547] xfs: dont repair fs summary counters with garbage	[Body]
[PATCH 7.3 321/547] xfs: fix lost errno returned from xfarray_foliosort	[Body]
[PATCH 7.3 322/547] xfs: allow softlimit with no hardlimit in quota scrub	[Body]
[PATCH 7.3 323/547] xfs: assign an owner to scrub_stats_fops	[Body]
[PATCH 7.3 324/547] xfs: bail out of directory tree repairs on error	[Body]
[PATCH 7.3 325/547] xfs: fix revalidation of xchk_dquot_iter cached mappings	[Body]
[PATCH 7.3 326/547] xfs: abort dirtree repair if the live update hook dies	[Body]
[PATCH 7.3 327/547] xfs: check fork type against dabtree block magic number	[Body]
[PATCH 7.3 328/547] xfs: mark overfull dabtree node blocks as corrupt	[Body]
[PATCH 7.3 329/547] xfs: jump out of xchk_bmap_check_rmap if fatal signals	[Body]
[PATCH 7.3 330/547] xfs: cross-reference the primary superblock	[Body]
[PATCH 7.3 331/547] xfs: adjust checks for cross-AG reaping issues	[Body]
[PATCH 7.3 332/547] xfs: actually check XFS_DIFLAG2_METADATA for metadata btree data forks	[Body]
[PATCH 7.3 333/547] xfs: fix xchk_stats_estimate_bufsize to allow for the trailing null	[Body]
[PATCH 7.3 334/547] netfilter: nft_payload: restrict checksum offsets to known values	[Body]
[PATCH 7.3 335/547] rtnetlink: wait for RCU readers in rtnl_link_unregister()	[Body]
[PATCH 7.3 336/547] xfs: reduce new btree slack factor if free space is negative	[Body]
[PATCH 7.3 337/547] xfs: reject absurdly large xattr value lengths in xchk_xattr_actor	[Body]
[PATCH 7.3 338/547] xfs: reject out-of-range attribute value lengths in xfs_attr_copy_value	[Body]
[PATCH 7.3 339/547] xfs: reject remote xattr entries with an out-of-range value length	[Body]
[PATCH 7.3 340/547] xfs: release ip after unlinked list store failure	[Body]
[PATCH 7.3 341/547] xfs: rescan the AGs if incore delalloc counter is negative	[Body]
[PATCH 7.3 342/547] xfs: update quota flags on secondary supers when metadir enabled	[Body]
[PATCH 7.3 343/547] xfs: abort directory tree repair whenever dl->aborted is set	[Body]
[PATCH 7.3 344/547] xfs: always forget cached ACLs if the attr fork swap succeeds	[Body]
[PATCH 7.3 345/547] xfs: always report inode repair setup failures	[Body]
[PATCH 7.3 346/547] xfs: always report scrub errors in tracepoints	[Body]
[PATCH 7.3 347/547] xfs: always zero the whole shortform header when zeroing attr fork	[Body]
[PATCH 7.3 348/547] xfs: bound da-node entry count against the correct geometry	[Body]
[PATCH 7.3 349/547] xfs: bound inode fork length against the fork size during log recovery	[Body]
[PATCH 7.3 350/547] xfs: check for fragments when full-extent sharing matches	[Body]
[PATCH 7.3 351/547] xfs: check for termination during rmap btree walk	[Body]
[PATCH 7.3 352/547] xfs: clarify various parts of the bitmap API	[Body]
[PATCH 7.3 353/547] xfs: clear set[ug]id mode bits when zapping attr fork	[Body]
[PATCH 7.3 354/547] xfs: complain loudly when dirtree checker finds broken links	[Body]
[PATCH 7.3 355/547] xfs: dont allow sm_agno for non-group metadir path checking	[Body]
[PATCH 7.3 356/547] xfs: dont clear COWEXTSIZE on directories on reflink filesystems	[Body]
[PATCH 7.3 357/547] xfs: dont overrun incore inode when cleaning attr forks	[Body]
[PATCH 7.3 358/547] xfs: dont queue rmap update twice when reaping a fork	[Body]
[PATCH 7.3 359/547] xfs: dont rescan ifree and icount when frozen	[Body]
[PATCH 7.3 360/547] xfs: dont scan across metadata/regular directory trees for dirents	[Body]
[PATCH 7.3 361/547] xfs: dont set a metadata directorys parent to sb_rootino	[Body]
[PATCH 7.3 362/547] xfs: dont subtract excess usage twice when computing agf_btreeblks	[Body]
[PATCH 7.3 363/547] xfs: dont try to repair rtsummary if the summary file isnt computed	[Body]
[PATCH 7.3 364/547] xfs: dont try to scrub self-referential dirent in metapath checker	[Body]
[PATCH 7.3 365/547] xfs: fix correction of unwritten extents in quota file data fork	[Body]
[PATCH 7.3 366/547] xfs: fix data fork block count check in xrep_inode_blockcounts	[Body]
[PATCH 7.3 367/547] xfs: init inode number for tracepoint	[Body]
[PATCH 7.3 368/547] xfs: never reset the default quota timer	[Body]
[PATCH 7.3 369/547] xfs: only written file data blocks can be shared	[Body]
[PATCH 7.3 370/547] xfs: opportunistically skip btree block checks	[Body]
[PATCH 7.3 371/547] xfs: propagate errors while checking null siblings	[Body]
[PATCH 7.3 372/547] xfs: range-check bc_levels array access in scrub tracepoints	[Body]
[PATCH 7.3 373/547] xfs: reattach dquots after changing inode ids	[Body]
[PATCH 7.3 374/547] x86/bugs: Adapt SRSO mitigation to Zen6	[Body]
[PATCH 7.3 375/547] smb: server: size directory name conversion buffer correctly	[Body]
[PATCH 7.3 376/547] smb: smbdirect: fix buffer length underflow in RDMA transfers	[Body]
[PATCH 7.3 377/547] smb: client: bound POSIX lock data area by response length	[Body]
[PATCH 7.3 378/547] smb: client: dont resurrect an exiting tcon from cached dir workers	[Body]
[PATCH 7.3 379/547] smb: client: fix buffer overflow in SMB2_tcon()	[Body]
[PATCH 7.3 380/547] smb: client: fix fiemap wild read on empty truncated response	[Body]
[PATCH 7.3 381/547] smb: client: fix OOB read of the resume name sent in TRANS2_FIND_NEXT2	[Body]
[PATCH 7.3 382/547] smb: client: fix OOB read in the SMB_FIND_FILE_UNIX name scan	[Body]
[PATCH 7.3 383/547] smb: client: fix slab-out-of-bounds write in id_mode_to_cifs_acl()	[Body]
[PATCH 7.3 384/547] smb: client: reclaim credits for decrypted reads with no matching mid	[Body]
[PATCH 7.3 385/547] smb: client: reject FIND data areas that run past the received response	[Body]
[PATCH 7.3 386/547] smb: client: reject short or out-of-range FIND response parameters	[Body]
[PATCH 7.3 387/547] smb: client: reject short SESSION_SETUP responses	[Body]
[PATCH 7.3 388/547] smb: client: require stable pages for SMB compression	[Body]
[PATCH 7.3 389/547] smb: client: validate NT transaction response layout and offsets	[Body]
[PATCH 7.3 390/547] smb: client: validate SMB1 EA list bounds before parsing	[Body]
[PATCH 7.3 391/547] smb: client: validate the data area in SMB2_read()	[Body]
[PATCH 7.3 392/547] xfs: map pNFS layouts to the end of the extent again	[Body]
[PATCH 7.3 393/547] kernfs: dont lose IN_DELETE_SELF when decoding a file handle	[Body]
[PATCH 7.3 394/547] pNFS: Fix CB_NOTIFY_DEVICEID CHANGE to consume ndc_immediate	[Body]
[PATCH 7.3 395/547] pnfs/blocklayout: Complete a device upcall only on its own reply	[Body]
[PATCH 7.3 396/547] pnfs/blocklayout: Complete a device upcall when the pipe is closed	[Body]
[PATCH 7.3 397/547] NFSv4/pnfs: bound the CB_NOTIFY_DEVICEID array count before allocating	[Body]
[PATCH 7.3 398/547] NFSv4/pnfs: Free the netid when draining a data-server address list	[Body]
[PATCH 7.3 399/547] NFSv4: Fix a regression in the handling of CB_RECALL_ANY	[Body]
[PATCH 7.3 400/547] NFSv4.1/pnfs: suspend pNFS on NFS4ERR_TOOSMALL from LAYOUTGET	[Body]
[PATCH 7.3 401/547] NFSv4/filelayout: Anchor page coalescing on pattern_offset	[Body]
[PATCH 7.3 402/547] NFSv4/flexfiles: fail I/O to the data server once a lock is lost	[Body]
[PATCH 7.3 403/547] NFSv4/flexfiles: Use the full 64-bit offset for read DS selection	[Body]
[PATCH 7.3 404/547] NFSv4/flexfiles: Use the full 64-bit stripe_unit	[Body]
[PATCH 7.3 405/547] NFSv4/flexfiles: Bound page coalescing on the absolute stripe offset	[Body]
[PATCH 7.3 406/547] NFS: Fix stale negative cache on failed nfs_mkdir()	[Body]
[PATCH 7.3 407/547] NFS/localio: detect a short read or write before the iterator has moved	[Body]
[PATCH 7.3 408/547] NFS/localio: fix nfs_local_dio_misaligned tracepoint	[Body]
[PATCH 7.3 409/547] NFS/localio: report the stability a DIO WRITE actually has	[Body]
[PATCH 7.3 410/547] NFSD: cap the number of listeners accepted in listener_set	[Body]
[PATCH 7.3 411/547] nfsd: clear XDR padding in GETXATTR replies	[Body]
[PATCH 7.3 412/547] NFSD: copy SETXATTR data from all XDR buffer segments	[Body]
[PATCH 7.3 413/547] NFSD: Destroy a recalled delegation the client does not hold	[Body]
[PATCH 7.3 414/547] NFSD: Do not send CB_RECALL_ANY to NFSv4.0 clients	[Body]
[PATCH 7.3 415/547] NFSD: Dont complete a cld upcall the daemon has not read	[Body]
[PATCH 7.3 416/547] nfsd: dont modify a session slot when replaying its cached reply	[Body]
[PATCH 7.3 417/547] nfsd: dont offer flexfiles layouts when NFSv3 isnt being served	[Body]
[PATCH 7.3 418/547] NFSD: Fail a pool_threads read whose reply does not fit	[Body]
[PATCH 7.3 419/547] nfsd: fetch direct I/O alignment for files handed to the filecache	[Body]
[PATCH 7.3 420/547] nfsd: Fix id-to-name cache entry leak in idtoname_parse()	[Body]
[PATCH 7.3 421/547] NFSD: Fix out-of-bounds read in the rpc_status dump	[Body]
[PATCH 7.3 422/547] nfsd: hold cl_lock in client_has_openowners()	[Body]
[PATCH 7.3 423/547] nfsd: honour client-provided attributes for NFS4_CREATE_EXCLUSIVE4_1	[Body]
[PATCH 7.3 424/547] NFSD: map fh_verify() status codes for NFS_ACLv3 replies	[Body]
[PATCH 7.3 425/547] NFSD: Map flex file layout IDs through the requests user namespace	[Body]
[PATCH 7.3 426/547] nfsd: preflight SEQUENCE replies before accepting a slot	[Body]
[PATCH 7.3 427/547] nfsd: propagate SETXATTR value decode errors	[Body]
[PATCH 7.3 428/547] NFSD: Reject an oversized principal hash from nfsdcld	[Body]
[PATCH 7.3 429/547] NFSD: Resolve the recall-any mask names in the trace format	[Body]
[PATCH 7.3 430/547] NFSD: Return NFSERR_ISDIR for NFSv2 READ and WRITE on a non-regular file	[Body]
[PATCH 7.3 431/547] NFSD: Set nn->cld_net before registering the cld pipe	[Body]
[PATCH 7.3 432/547] NFSD: validate transport name in listener_set before serv creation	[Body]
[PATCH 7.3 433/547] nfsd: zero NFSv4 COMPOUND tag padding	[Body]
[PATCH 7.3 434/547] SUNRPC: Copy the deferred RPC Call from the head buffer	[Body]
[PATCH 7.3 435/547] SUNRPC: Do not credit control-record octets to the RPC stream	[Body]
[PATCH 7.3 436/547] SUNRPC: fix oversized GSS proxy token copy	[Body]
[PATCH 7.3 437/547] sunrpc: honor the netlink unix_gid NEGATIVE flag	[Body]
[PATCH 7.3 438/547] SUNRPC: keep the first error in svc_register()	[Body]
[PATCH 7.3 439/547] sunrpc: pin gss module across auth_domain RCU free	[Body]
[PATCH 7.3 440/547] SUNRPC: Reject a socket that already has an svc_sock attached	[Body]
[PATCH 7.3 441/547] SUNRPC: Reject a TLS alert record that is not two octets	[Body]
[PATCH 7.3 442/547] SUNRPC: Resume receiving after a TLS control record	[Body]
[PATCH 7.3 443/547] SUNRPC: trace an accepted transport before publishing it	[Body]
[PATCH 7.3 444/547] sunrpc: treat empty auth.unix.gid replies as negative entries	[Body]
[PATCH 7.3 445/547] SUNRPC: Treat every TLS error alert as fatal	[Body]
[PATCH 7.3 446/547] rxrpc: Fix update of call->tx_pending without holding lock	[Body]
[PATCH 7.3 447/547] rxrpc: Fix lack of short-send handling in rxrpc_kernel_send_data()	[Body]
[PATCH 7.3 448/547] afs: Fix afs to abort the rxrpc call on send error	[Body]
[PATCH 7.3 449/547] rxrpc: Fix double IRQ enablement	[Body]
[PATCH 7.3 450/547] rxrpc: Fix return in rxrpc_recvmsg_data() for service calls	[Body]
[PATCH 7.3 451/547] x86/cpuid: Mark CPUID function 0x23 as being indexed	[Body]
[PATCH 7.3 452/547] x86/mm/pat: Fix effective RW computation in lookup_address_in_pgd_attr()	[Body]
[PATCH 7.3 453/547] ALSA: x86: hdmi: fix chmap array missing terminator entry	[Body]
[PATCH 7.3 454/547] KVM: Only bind memslot to guest_memfd instance for CREATE operations	[Body]
[PATCH 7.3 455/547] KVM: SVM: Trigger new ASID allocation in both VMCBs on pCPU switch	[Body]
[PATCH 7.3 456/547] KVM: nSVM: Reject KVM_SET_NESTED_STATE if L1 has EFER.LMA=1 && EFER.LME=0	[Body]
[PATCH 7.3 457/547] KVM: nSVM: Ignore EFER.LMA if EFER.LME=0 when preparing L2 state	[Body]
[PATCH 7.3 458/547] KVM: Use goto to handle errors during memslot preparation	[Body]
[PATCH 7.3 459/547] KVM: VMX: Disallow using to_vmx() in common VT code	[Body]
[PATCH 7.3 460/547] KVM: VMX: Formally define KVMs "0xdead" exit reason used for failed VM-Enter	[Body]
[PATCH 7.3 461/547] KVM: VMX: Make handle_bus_lock_vmexit() a shared helper	[Body]
[PATCH 7.3 462/547] KVM: VMX: Preserve negative return value in vmx_handle_exit() with bus lock detected	[Body]
[PATCH 7.3 463/547] KVM: x86/mmu: Bug the VM if KVM attempts to walk more levels than the MMU has	[Body]
[PATCH 7.3 464/547] KVM: x86/mmu: Bug the VM if KVM calcs a CPU role with EFER.LMA=1 && CR4.PAE=0	[Body]
[PATCH 7.3 465/547] KVM: x86/xen: Enforce 4-byte alignment of vcpu_info registration	[Body]
[PATCH 7.3 466/547] KVM: x86/xen: Take kvm->srcu in __kvm_xen_has_interrupt()	[Body]
[PATCH 7.3 467/547] KVM: x86: Clear hardware HLT state when userspace makes a vCPU not-halted	[Body]
[PATCH 7.3 468/547] KVM: x86: Preserve DR6.BLD (Bus Lock Detect) when delivering #DB payload	[Body]
[PATCH 7.3 469/547] KVM: x86: Request event processing for exception VM-Exits	[Body]
[PATCH 7.3 470/547] KVM: x86: Take SRCU in kvm_zap_gfn_range()	[Body]
[PATCH 7.3 471/547] KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak	[Body]
[PATCH 7.3 472/547] KVM: TDX: Check if there is valid exit infos based on vp_enter_ret	[Body]
[PATCH 7.3 473/547] KVM: TDX: Enable Notify VM exit	[Body]
[PATCH 7.3 474/547] KVM: TDX: Set bits 31:16 to 0 and use UNDEFINED when synthesizing exit reason	[Body]
[PATCH 7.3 475/547] KVM: TDX: Stuff exit_reason with UNDEFINED on wait_for_sept_zap return	[Body]
[PATCH 7.3 476/547] KVM: TDX: Dont assume exit_reason[31:16] is all-0 in tdx_to_vmx_exit_reason()	[Body]
[PATCH 7.3 477/547] KVM: TDX: Enable Bus Lock VM exit	[Body]
[PATCH 7.3 478/547] KVM: guest_memfd: Split bind() into prepare()+commit() phases	[Body]
[PATCH 7.3 479/547] KVM: guest_memfd: take the invalidate lock when unbinding a dying file	[Body]
[PATCH 7.3 480/547] KVM: guest_memfd: Establish memslot<=>guest_memfd bindings after memslot is ready	[Body]
[PATCH 7.3 481/547] KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users	[Body]
[PATCH 7.3 482/547] KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form	[Body]
[PATCH 7.3 483/547] HID: usbhid: skip interrupt IN polling for devices with no input reports	[Body]
[PATCH 7.3 484/547] HID: zydacron: validate key report length	[Body]
[PATCH 7.3 485/547] HID: amd_sfh: Remove unsupported motion-state field from accelerometer report	[Body]
[PATCH 7.3 486/547] HID: amd_sfh: Use report type from request node	[Body]
[PATCH 7.3 487/547] HID: asus: do not send keyboard init reports to touchpads	[Body]
[PATCH 7.3 488/547] HID: core: Fix out-of-bounds left shift by 32 in s32ton()	[Body]
[PATCH 7.3 489/547] HID: cougar: reject short special-key reports	[Body]
[PATCH 7.3 490/547] HID: cp2112: validate response report lengths	[Body]
[PATCH 7.3 491/547] HID: elo: reject short touchscreen reports	[Body]
[PATCH 7.3 492/547] HID: logitech-dj: validate unnumbered keyboard reports	[Body]
[PATCH 7.3 493/547] HID: mcp2200: validate READ_ALL response length	[Body]
[PATCH 7.3 494/547] HID: mcp2221: always initialize and cancel init_work	[Body]
[PATCH 7.3 495/547] HID: mcp2221: validate response report length	[Body]
[PATCH 7.3 496/547] HID: picoLCD: check for fb_deferred_io_init() error	[Body]
[PATCH 7.3 497/547] HID: prodikeys: validate fixed-format MIDI reports	[Body]
[PATCH 7.3 498/547] HID: pxrc: reject short input reports	[Body]
[PATCH 7.3 499/547] HID: quirks: Always poll the Anne Pro 2 with product ID a292	[Body]
[PATCH 7.3 500/547] HID: roccat: isku: reject short button reports	[Body]
[PATCH 7.3 501/547] HID: roccat: koneplus: reject short button reports	[Body]
[PATCH 7.3 502/547] HID: roccat: konepure: reject short button reports	[Body]
[PATCH 7.3 503/547] HID: roccat: kovaplus: reject short button reports	[Body]
[PATCH 7.3 504/547] HID: roccat: pyra: reject short button reports	[Body]
[PATCH 7.3 505/547] HID: roccat: ryos: reject short special reports	[Body]
[PATCH 7.3 506/547] HID: roccat: savu: reject short special reports	[Body]
[PATCH 7.3 507/547] HID: hid-lenovo-go-s: Prevent deadlock if device removed during setup	[Body]
[PATCH 7.3 508/547] HID: hid-lenovo-go-s: Return ret instead of 0 in mcu_property_out()	[Body]
[PATCH 7.3 509/547] HID: hid-lenovo-go-s: Use pm_ptr for reset_resume callback	[Body]
[PATCH 7.3 510/547] HID: hid-lenovo-go-s: Add suspend function and gate access under bool.	[Body]
[PATCH 7.3 511/547] HID: hid-lenovo-go-s: Bound stale reply window before reusing send_cmd_complete	[Body]
[PATCH 7.3 512/547] HID: hid-lenovo-go-s: Move attribute init to after device query	[Body]
[PATCH 7.3 513/547] HID: hid-lenovo-go-s: Reorganize and rename hid_gos_cfg	[Body]
[PATCH 7.3 514/547] HID: hid-lenovo-go-s: Add kobject_uevent notify during reset-resume	[Body]
[PATCH 7.3 515/547] HID: hid-lenovo-go-s: Move static led_classdev_mc to drvdata struct	[Body]
[PATCH 7.3 516/547] HID: hid-lenovo-go-s: Use devm_kzalloc for drvdata	[Body]
[PATCH 7.3 517/547] accel/amdxdna: Add support for AIE2 revision 9	[Body]
[PATCH 7.3 518/547] io_uring/kbuf: advance head when a pickup empties the buffer ring	[Body]
[PATCH 7.3 519/547] io_uring/net: keep recvmsg buffer select length within MAX_RW_COUNT	[Body]
[PATCH 7.3 520/547] io_uring/net: mask socket type with SOCK_TYPE_MASK in io_socket_bpf_populate()	[Body]
[PATCH 7.3 521/547] io_uring/register: enforce per-task restrictions in io_uring_register_blind()	[Body]
[PATCH 7.3 522/547] io_uring/net: dont retry a non-blocking connect() that fails with -EAGAIN	[Body]
[PATCH 7.3 523/547] io_uring: keep the drain active when a deferred drain request is started	[Body]
[PATCH 7.3 524/547] io_uring/io-wq: no new workers once the exit has begun	[Body]
[PATCH 7.3 525/547] io_uring/rsrc: charge buffer arrays and nodes to memcg	[Body]
[PATCH 7.3 526/547] io_uring: charge tctx nodes and personalities	[Body]
[PATCH 7.3 527/547] io_uring: free XArray nodes left by a failed store	[Body]
[PATCH 7.3 528/547] io_uring/bpf-ops: clear bpf_ctx while submitting SQEs	[Body]
[PATCH 7.3 529/547] io_uring: free the task context after a grace period	[Body]
[PATCH 7.3 530/547] io_uring/sqpoll: dont wait for the thread to exit	[Body]
[PATCH 7.3 531/547] io_uring: defer foreign io-wq enqueues to task_work	[Body]
[PATCH 7.3 532/547] io_uring/timeout: count cancelled timeouts in cq_timeouts	[Body]
[PATCH 7.3 533/547] io_uring/net: fix multishot recv length limit accounting	[Body]
[PATCH 7.3 534/547] ksmbd: fix SMB2 CREATE response buffer overflow	[Body]
[PATCH 7.3 535/547] ksmbd: fix out-of-bounds read when padding the final compound response	[Body]
[PATCH 7.3 536/547] ksmbd: use clear_and_wake_up_bit() directly	[Body]
[PATCH 7.3 537/547] ksmbd: track delivery of queued TCP writes	[Body]
[PATCH 7.3 538/547] ksmbd: retry break notifications on another connection	[Body]
[PATCH 7.3 539/547] ksmbd: fix app-instance non-durable supersede session UAF	[Body]
[PATCH 7.3 540/547] ksmbd: fix invalid pointer dereference when get_inode_acl() fails	[Body]
[PATCH 7.3 541/547] ksmbd: use the existing xattr name for a named stream	[Body]
[PATCH 7.3 542/547] ksmbd: fix named stream write and EOF handling	[Body]
[PATCH 7.3 543/547] ksmbd: rebind completed CREATE replays without draining the old channel	[Body]
[PATCH 7.3 544/547] ksmbd: fix use-after-free after a failed durable reconnect	[Body]
[PATCH 7.3 545/547] rust_binder: wake epoll on self-work queued to poll thread	[Body]
[PATCH 7.3 546/547] media: rc: Fix build failure with CONFIG_LIRC disabled	[Body]
[PATCH 7.3 547/547] ksmbd: keep retry timeout clamp bounds constant	[Body]

ID (for dev)	c1adbac3-f7f0-4cee-ae32-1db4d0f98c5b
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	79a907609d53d5cd645b42c11550d295d43abf99 [Config]		passed [Log]
[KASAN] Boot test: Base	79a907609d53d5cd645b42c11550d295d43abf99 [Config]		passed [Log]
[KASAN] Build Patched		79a907609d53d5cd645b42c11550d295d43abf99 [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		79a907609d53d5cd645b42c11550d295d43abf99 [Config] [patched]	passed [Log]
[KASAN] Fuzz	79a907609d53d5cd645b42c11550d295d43abf99 [Config]	79a907609d53d5cd645b42c11550d295d43abf99 [Config] [patched]	passed [Log] [Artifacts]

Patches (547)

Series Summary

Sessions

Session 2026-11-05