Syzbot CI

Subject	6.6.158-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-09-30 15:11:25 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 6.6 0001/1193] ksmbd: fix use-after-free in oplock break notification	[Body]
[PATCH 6.6 0002/1193] drm/gem: Consider GEM object reclaimable if shrinking fails	[Body]
[PATCH 6.6 0003/1193] bus: fsl-mc: wait for the MC firmware to complete its boot	[Body]
[PATCH 6.6 0004/1193] drm/amd/display: Fix DPMS using partially updated pipe context	[Body]
[PATCH 6.6 0005/1193] drm/panel: jadard-jd9365da-h3: set prepare_prev_first	[Body]
[PATCH 6.6 0006/1193] drm/amd/pm: Check SMUv13.0.6/12 metrics integrity	[Body]
[PATCH 6.6 0007/1193] ALSA: usb-audio: Propagate write errors in generic mixer put callbacks	[Body]
[PATCH 6.6 0008/1193] ima: return error early if file xattr cannot be changed	[Body]
[PATCH 6.6 0009/1193] usb: gadget: udc: skip pullup() if already connected	[Body]
[PATCH 6.6 0010/1193] tee: optee: Allow MT_NORMAL_TAGGED shared memory	[Body]
[PATCH 6.6 0011/1193] tools/nolibc: avoid call to wcslen() in _start_c() inserted by clang	[Body]
[PATCH 6.6 0012/1193] PCI: Stop setting cached power state to unknown on unbind	[Body]
[PATCH 6.6 0013/1193] hfsplus: fix issue of direct writes beyond end-of-file	[Body]
[PATCH 6.6 0014/1193] wifi: nl80211: reject beacons with bad HE operation	[Body]
[PATCH 6.6 0015/1193] wifi: mac80211: always allow transmitting null-data on TXQs	[Body]
[PATCH 6.6 0016/1193] wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result()	[Body]
[PATCH 6.6 0017/1193] kcsan: Silence -Wmaybe-uninitialized when calling __kcsan_check_access()	[Body]
[PATCH 6.6 0018/1193] firmware: stratix10-svc: change get provision data to async SMC call	[Body]
[PATCH 6.6 0019/1193] bridge: Do not suppress ARP probes and DAD NS unconditionally	[Body]
[PATCH 6.6 0020/1193] soundwire: validate DT compatible before parsing it	[Body]
[PATCH 6.6 0021/1193] spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM	[Body]
[PATCH 6.6 0022/1193] media: rc: mceusb: Add support for 04eb:e033	[Body]
[PATCH 6.6 0023/1193] thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()	[Body]
[PATCH 6.6 0024/1193] thunderbolt: Keep XDomain reference during the lifetime of a service	[Body]
[PATCH 6.6 0025/1193] thunderbolt: Keep the domain reference while processing hotplug	[Body]
[PATCH 6.6 0026/1193] thunderbolt: Set tb->root_switch to NULL when domain is stopped	[Body]
[PATCH 6.6 0027/1193] thunderbolt: Dont create multiple DMA tunnels on firmware connection manager	[Body]
[PATCH 6.6 0028/1193] media: dm1105: fix missing error check for dma_alloc_coherent	[Body]
[PATCH 6.6 0029/1193] net: dsa: mv88e6xxx: fix number of g1 interrupts for 6320 family	[Body]
[PATCH 6.6 0030/1193] PCI: switchtec: Add Gen6 Device IDs	[Body]
[PATCH 6.6 0031/1193] net: dsa: mv88e6xxx: define .pot_clear() for 6321	[Body]
[PATCH 6.6 0032/1193] net: dsa: mv88e6xxx: enable .rmu_disable() for 6320 family	[Body]
[PATCH 6.6 0033/1193] media: em28xx-video: fix missing res_free() on init_usb_xfer failure	[Body]
[PATCH 6.6 0034/1193] crypto: ixp4xx - fix buffer chain unwind on allocation failure	[Body]
[PATCH 6.6 0035/1193] crypto: omap - add omap_des_unregister_algs helper	[Body]
[PATCH 6.6 0036/1193] clk: renesas: cpg-mssr: Add number of clock cells check	[Body]
[PATCH 6.6 0037/1193] drm/bridge: tc358768: Set pre_enable_prev_first for reverse order	[Body]
[PATCH 6.6 0038/1193] ASoC: ti: omap3pandora: update board check to use DT compatible	[Body]
[PATCH 6.6 0039/1193] mmc: core: Add validation for host-provided max_segs	[Body]
[PATCH 6.6 0040/1193] mmc: davinci: avoid NULL deref of host->data in IRQ handler	[Body]
[PATCH 6.6 0041/1193] drm/amd/display: Fix CRC open failure during active rendering	[Body]
[PATCH 6.6 0042/1193] PCI: intel-gw: Enable clock before PHY init	[Body]
[PATCH 6.6 0043/1193] hfsplus: rework hfsplus_readdir() logic	[Body]
[PATCH 6.6 0044/1193] net: phy: motorcomm: use device properties for firmware tuning	[Body]
[PATCH 6.6 0045/1193] drm/gud: Add RCade Display Adapter VID/PID pair	[Body]
[PATCH 6.6 0046/1193] media: video-i2c: use vb2_video_unregister_device on driver removal	[Body]
[PATCH 6.6 0047/1193] wifi: rtw89: phy: check length before parsing PHY status IE	[Body]
[PATCH 6.6 0048/1193] net: dsa: realtek: rtl8365mb: add support for RTL8367SB	[Body]
[PATCH 6.6 0049/1193] integrity: Check for NULL returned by asymmetric_key_public_key	[Body]
[PATCH 6.6 0050/1193] drivers/of: validate status properties in reconfig state changes	[Body]
[PATCH 6.6 0051/1193] soundwire: intel: Move suspend tracking from trigger to pm suspend	[Body]
[PATCH 6.6 0052/1193] clk: samsung: exynos850: mark APM I3C clocks as critical	[Body]
[PATCH 6.6 0053/1193] scsi: pm8001: Reject firmware update in fatal error state	[Body]
[PATCH 6.6 0054/1193] scsi: pm8001: Reject non-fatal dump when controller is crashed	[Body]
[PATCH 6.6 0055/1193] crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y	[Body]
[PATCH 6.6 0056/1193] crypto: atmel-ecc - add support for atecc608b	[Body]
[PATCH 6.6 0057/1193] media: imon: Add iMON VFD HID OEM v1.2 key mappings	[Body]
[PATCH 6.6 0058/1193] RDMA/mlx5: Use QP port when decoding responder CQEs	[Body]
[PATCH 6.6 0059/1193] mailbox: Make mbox_send_message() return error code when tx fails	[Body]
[PATCH 6.6 0060/1193] PCI: Wait for device readiness after D3hot -> D0uninitialized transition	[Body]
[PATCH 6.6 0061/1193] drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id	[Body]
[PATCH 6.6 0062/1193] drm/amdkfd: Fix OOB memory exposure in get_wave_state()	[Body]
[PATCH 6.6 0063/1193] drm/amdkfd: Check bounds on allocate_doorbell	[Body]
[PATCH 6.6 0064/1193] ALSA: usx2y: Drain pending US-428 pipe-4 output commands	[Body]
[PATCH 6.6 0065/1193] sched/fair: Reject misfit pulls onto busy SMT siblings on asym-capacity	[Body]
[PATCH 6.6 0066/1193] 9p: invalidate readdir buffer on seek	[Body]
[PATCH 6.6 0067/1193] arm64/daifflags: Make local_daif_*() helpers __always_inline	[Body]
[PATCH 6.6 0068/1193] 9p: use kvzalloc for readdir buffer	[Body]
[PATCH 6.6 0069/1193] bridge: Add missing READ_ONCE() annotations around FDB destination port	[Body]
[PATCH 6.6 0070/1193] thunderbolt: Dont access path config space on Lane 1 adapters in tb_switch_reset_host()	[Body]
[PATCH 6.6 0071/1193] thunderbolt: Improve multi-display DisplayPort tunnel allocation	[Body]
[PATCH 6.6 0072/1193] firmware: arm_scmi: Validate SENSOR_UPDATE payload size	[Body]
[PATCH 6.6 0073/1193] firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size	[Body]
[PATCH 6.6 0074/1193] thunderbolt: Increase timeout for Configuration Ready bit	[Body]
[PATCH 6.6 0075/1193] thunderbolt: Verify Router Ready bit is set after router enumeration	[Body]
[PATCH 6.6 0076/1193] bitfield: wire __bf_shf to __builtin_ctzll	[Body]
[PATCH 6.6 0077/1193] nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl	[Body]
[PATCH 6.6 0078/1193] net: usb: qmi_wwan: add MeiG SRM813Q	[Body]
[PATCH 6.6 0079/1193] net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()	[Body]
[PATCH 6.6 0080/1193] net/sched: sch_drr: make cl->quantum lockless	[Body]
[PATCH 6.6 0081/1193] net/rds: Dont sleep inside rds_ib_conn_path_shutdown	[Body]
[PATCH 6.6 0082/1193] befs: handle set_blocksize failures	[Body]
[PATCH 6.6 0083/1193] ntfs3: handle set_blocksize failures	[Body]
[PATCH 6.6 0084/1193] affs: handle set_blocksize failures	[Body]
[PATCH 6.6 0085/1193] bfs: handle set_blocksize failures	[Body]
[PATCH 6.6 0086/1193] minix: handle set_blocksize failures	[Body]
[PATCH 6.6 0087/1193] qnx4: handle set_blocksize failures	[Body]
[PATCH 6.6 0088/1193] jfs: handle set_blocksize failures	[Body]
[PATCH 6.6 0089/1193] hpfs: handle set_blocksize failures	[Body]
[PATCH 6.6 0090/1193] omfs: handle set_blocksize failures	[Body]
[PATCH 6.6 0091/1193] isofs: handle set_blocksize failures	[Body]
[PATCH 6.6 0092/1193] usbip: vhci_hcd: fix NULL deref in status_show_vhci	[Body]
[PATCH 6.6 0093/1193] usb: core: hcd: fix possible deadlock in rh control transfers	[Body]
[PATCH 6.6 0094/1193] usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log	[Body]
[PATCH 6.6 0095/1193] USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set	[Body]
[PATCH 6.6 0096/1193] usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue	[Body]
[PATCH 6.6 0097/1193] serial: 8250: fix possible ISR soft lockup	[Body]
[PATCH 6.6 0098/1193] usb: host: add ARCH_AIROHA in XHCI MTK dependency	[Body]
[PATCH 6.6 0099/1193] char/nvram: Remove redundant nvram_mutex	[Body]
[PATCH 6.6 0100/1193] rcu-tasks: Fix possible boot-time tests failed for the call_rcu_tasks()	[Body]
[PATCH 6.6 0101/1193] wifi: rtw89: pci: enable LTR based on pcie control register	[Body]
[PATCH 6.6 0102/1193] netlabel: fix IPv6 unlabeled address add error handling	[Body]
[PATCH 6.6 0103/1193] rds: filter RDS_INFO_* getsockopt by callers netns	[Body]
[PATCH 6.6 0104/1193] rds: annotate data-race around rs_seen_congestion	[Body]
[PATCH 6.6 0105/1193] s390/zcore: Removed unused variables	[Body]
[PATCH 6.6 0106/1193] clk: socfpga: agilex: implement l3_main_free_clk	[Body]
[PATCH 6.6 0107/1193] thermal/drivers/tegra/soctherma: Switch to devm cooling device registration	[Body]
[PATCH 6.6 0108/1193] drm/panel: simple: Add AM-1280800W8TZQW-T00H	[Body]
[PATCH 6.6 0109/1193] mips: cps: Assemble jr.hb with an R2 ISA level	[Body]
[PATCH 6.6 0110/1193] iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind	[Body]
[PATCH 6.6 0111/1193] irqchip/gic-v4: Dont advertise VLPIs if no ITS is probed	[Body]
[PATCH 6.6 0112/1193] ALSA: usb-audio: Add quirk for Novation Mininova	[Body]
[PATCH 6.6 0113/1193] net: hsr: require valid EOT supervision TLV	[Body]
[PATCH 6.6 0114/1193] ipv6: addrconf: fix temp address generation after prefix deprecation	[Body]
[PATCH 6.6 0115/1193] net: thunderx: fix PTP device ref leak in nicvf_probe()	[Body]
[PATCH 6.6 0116/1193] drm/amd/pm/si: Fix updating clock limits from power states	[Body]
[PATCH 6.6 0117/1193] ACPICA: Fix condition check in acpi_ps_parse_loop()	[Body]
[PATCH 6.6 0118/1193] ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()	[Body]
[PATCH 6.6 0119/1193] ACPICA: add boundary checks in acpi_ps_get_next_field()	[Body]
[PATCH 6.6 0120/1193] ACPICA: validate byte_count in acpi_ps_get_next_package_length()	[Body]
[PATCH 6.6 0121/1193] ACPICA: Prevent adding invalid references	[Body]
[PATCH 6.6 0122/1193] ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)	[Body]
[PATCH 6.6 0123/1193] ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg()	[Body]
[PATCH 6.6 0124/1193] ACPICA: validate handler object type in two places	[Body]
[PATCH 6.6 0125/1193] ACPICA: Add package limit checks in parser functions	[Body]
[PATCH 6.6 0126/1193] ACPICA: Add validation for node in acpi_ns_build_normalized_path()	[Body]
[PATCH 6.6 0127/1193] ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op()	[Body]
[PATCH 6.6 0128/1193] ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()	[Body]
[PATCH 6.6 0129/1193] ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()	[Body]
[PATCH 6.6 0130/1193] ACPICA: add boundary checks in two places	[Body]
[PATCH 6.6 0131/1193] hfs: rework hfsplus_readdir() logic	[Body]
[PATCH 6.6 0132/1193] pinctrl: renesas: rzv2m: Use -ENOTSUPP instead of -EOPNOTSUPP	[Body]
[PATCH 6.6 0133/1193] host1x: bus: Fix missing ops null check in error teardown	[Body]
[PATCH 6.6 0134/1193] scripts: modpost: detect and report truncated buf_printf() output	[Body]
[PATCH 6.6 0135/1193] drm/nouveau/gsp: add SEC2 to GA100 chip table	[Body]
[PATCH 6.6 0136/1193] ASoC: Intel: catpt: Complete coredump handling	[Body]
[PATCH 6.6 0137/1193] libbpf: Add __NR_bpf definition for LoongArch	[Body]
[PATCH 6.6 0138/1193] soundwire: dmi-quirks: Disable ghost Realtek devices	[Body]
[PATCH 6.6 0139/1193] gfs2: page poisoning fix	[Body]
[PATCH 6.6 0140/1193] soundwire: only handle alert events when the peripheral is attached	[Body]
[PATCH 6.6 0141/1193] mmc: davinci: fix mmc_add_host order in probe	[Body]
[PATCH 6.6 0142/1193] mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC	[Body]
[PATCH 6.6 0143/1193] tracing: Disable KCOV instrumentation for trace_irqsoff.o	[Body]
[PATCH 6.6 0144/1193] mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC	[Body]
[PATCH 6.6 0145/1193] iio: light: stk3310: Deal with the ps interrupt issue in PM	[Body]
[PATCH 6.6 0146/1193] perf/ftrace: Fix WARNING in __unregister_ftrace_function	[Body]
[PATCH 6.6 0147/1193] iio: accel: mma8452: switch to non-devm request_threaded_irq()	[Body]
[PATCH 6.6 0148/1193] libbpf: Also reset {insn,data}_cur on realloc failure	[Body]
[PATCH 6.6 0149/1193] net: ibm: emac: Reserve VLAN header in MJS limit	[Body]
[PATCH 6.6 0150/1193] wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi	[Body]
[PATCH 6.6 0151/1193] ASoC: qcom: q6apm: return error code to consumers on failures	[Body]
[PATCH 6.6 0152/1193] ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive	[Body]
[PATCH 6.6 0153/1193] ata: ahci: fail probe if BAR too small for claimed ports	[Body]
[PATCH 6.6 0154/1193] ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach	[Body]
[PATCH 6.6 0155/1193] net: qrtr: fix node refcount leak on ctrl packet alloc failure	[Body]
[PATCH 6.6 0156/1193] net: wwan: t7xx: Add delay between MD and SAP suspend	[Body]
[PATCH 6.6 0157/1193] iommu/rockchip: disable fetch dte time limit	[Body]
[PATCH 6.6 0158/1193] fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib	[Body]
[PATCH 6.6 0159/1193] fs/ntfs3: validate index entry key bounds	[Body]
[PATCH 6.6 0160/1193] ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()	[Body]
[PATCH 6.6 0161/1193] ASoC: codecs: rk3328: Use managed GPIO and clock helpers	[Body]
[PATCH 6.6 0162/1193] ALSA: seq: oss: Reject reads that cannot fit the next event	[Body]
[PATCH 6.6 0163/1193] dpaa2-switch: rework FDB management on the bridge leave path	[Body]
[PATCH 6.6 0164/1193] dpaa2-switch: fix the error path in dpaa2_switch_rx()	[Body]
[PATCH 6.6 0165/1193] net: dsa: sja1105: flower: reject cross-chip redirect	[Body]
[PATCH 6.6 0166/1193] dpaa2-switch: fix handling of NAPI on the remove path	[Body]
[PATCH 6.6 0167/1193] thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries	[Body]
[PATCH 6.6 0168/1193] xhci: Prevent queuing new commands if xhci is inaccessible	[Body]
[PATCH 6.6 0169/1193] drm/amdkfd: fix UAF race in destroy_queue_cpsch	[Body]
[PATCH 6.6 0170/1193] drm/amd/pm: bound pp_dpm_set_pp_table() memcpy	[Body]
[PATCH 6.6 0171/1193] drm/amdgpu: fix buffer overflow during vBIOS update	[Body]
[PATCH 6.6 0172/1193] RDMA/irdma: Fix typo in SQ completions generation	[Body]
[PATCH 6.6 0173/1193] net/mlx5: E-Switch, align disable sequence with switchdev-to-legacy transition	[Body]
[PATCH 6.6 0174/1193] clk: keystone: dont cache clock rate	[Body]
[PATCH 6.6 0175/1193] ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP	[Body]
[PATCH 6.6 0176/1193] ipmi: si: Use platform_get_irq_optional() to retrieve interrupt	[Body]
[PATCH 6.6 0177/1193] drm/amdkfd: Unwind debug trap enable on copy_to_user failure	[Body]
[PATCH 6.6 0178/1193] wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications	[Body]
[PATCH 6.6 0179/1193] RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()	[Body]
[PATCH 6.6 0180/1193] RDMA/mlx5: Fix state and counter desync on loopback enable failure	[Body]
[PATCH 6.6 0181/1193] bpf: NUL-terminate replaced sysctl value	[Body]
[PATCH 6.6 0182/1193] net: cpsw_new: unregister devlink on port registration failure	[Body]
[PATCH 6.6 0183/1193] hsr: broadcast netlink notifications in the devices net namespace	[Body]
[PATCH 6.6 0184/1193] net: microchip: sparx5: clean up PSFP resources on flower setup failure	[Body]
[PATCH 6.6 0185/1193] ALSA: es18xx: check control allocation before private data setup	[Body]
[PATCH 6.6 0186/1193] netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()	[Body]
[PATCH 6.6 0187/1193] btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()	[Body]
[PATCH 6.6 0188/1193] btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF	[Body]
[PATCH 6.6 0189/1193] NFS: fix eof updates after NFSv4.2 fallocate/zero-range	[Body]
[PATCH 6.6 0190/1193] RDMA/rtrs-srv: Fix integer underflow in process_read and process_write	[Body]
[PATCH 6.6 0191/1193] xprtrdma: Add request-pool slack for delayed recycling	[Body]
[PATCH 6.6 0192/1193] configfs_depend_prep(): pass configfs_dirent instead of dentry	[Body]
[PATCH 6.6 0193/1193] net: ibm: emac: mal: fix potential system hang in mal_remove()	[Body]
[PATCH 6.6 0194/1193] tls: Flush backlog before waiting for a new record	[Body]
[PATCH 6.6 0195/1193] platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table	[Body]
[PATCH 6.6 0196/1193] wifi: mt76: transform aspm_conf for pci_disable_link_state	[Body]
[PATCH 6.6 0197/1193] btrfs: protect sb_write_pointer() with invalidate lock	[Body]
[PATCH 6.6 0198/1193] hwmon: (adt7462) Add of_match_table to support devicetree	[Body]
[PATCH 6.6 0199/1193] net: dsa: qca8k: Add support for force mode for fixed link topology	[Body]
[PATCH 6.6 0200/1193] vdpa/ifcvf: handle dev_set_name() failure in ifcvf_vdpa_dev_add()	[Body]
[PATCH 6.6 0201/1193] ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC	[Body]
[PATCH 6.6 0202/1193] ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8	[Body]
[PATCH 6.6 0203/1193] ata: libata-pmp: add JMicron JMS562 quirk	[Body]
[PATCH 6.6 0204/1193] platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table	[Body]
[PATCH 6.6 0205/1193] nvme-fc: Do not cancel requests in io target before it is initialized	[Body]
[PATCH 6.6 0206/1193] sctp: Unwind address notifier registration on failure	[Body]
[PATCH 6.6 0207/1193] PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems	[Body]
[PATCH 6.6 0208/1193] dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc	[Body]
[PATCH 6.6 0209/1193] hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i	[Body]
[PATCH 6.6 0210/1193] spi: xilinx: let transfers timeout in case of no IRQ	[Body]
[PATCH 6.6 0211/1193] Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV	[Body]
[PATCH 6.6 0212/1193] Bluetooth: btusb: Add support for TP-Link TL-UB250	[Body]
[PATCH 6.6 0213/1193] Bluetooth: L2CAP: validate connectionless PSM length	[Body]
[PATCH 6.6 0214/1193] ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt	[Body]
[PATCH 6.6 0215/1193] ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence	[Body]
[PATCH 6.6 0216/1193] ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure	[Body]
[PATCH 6.6 0217/1193] Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV	[Body]
[PATCH 6.6 0218/1193] sparc64: uprobes: add missing break	[Body]
[PATCH 6.6 0219/1193] net: stmmac: xgmac2: disable RBUE in default RX interrupt mask	[Body]
[PATCH 6.6 0220/1193] ptp: ocp: add shutdown callback	[Body]
[PATCH 6.6 0221/1193] vsock: use sk_acceptq_is_full() helper in all transports	[Body]
[PATCH 6.6 0222/1193] e1000e: limit endianness conversion to boundary words	[Body]
[PATCH 6.6 0223/1193] net/sched: act_csum: dont mangle UDP tunnel GSO packets	[Body]
[PATCH 6.6 0224/1193] smb: client: fix races in cifsd thread creation	[Body]
[PATCH 6.6 0225/1193] i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA	[Body]
[PATCH 6.6 0226/1193] sparc: Disable compat support with LLD	[Body]
[PATCH 6.6 0227/1193] ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT	[Body]
[PATCH 6.6 0228/1193] HID: hidpp: fix potential UAF in hidpp_connect_event()	[Body]
[PATCH 6.6 0229/1193] fuse: set ff->flock only on success	[Body]
[PATCH 6.6 0230/1193] scsi: bfa: Reduce kernel stack usage in bfa_fcs_lport_fdmi_build_portattr_block()	[Body]
[PATCH 6.6 0231/1193] gpio: pisosr: Read "ngpios" as u32	[Body]
[PATCH 6.6 0232/1193] spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()	[Body]
[PATCH 6.6 0233/1193] ALSA: usb-audio: Add quirk flags for SC13A	[Body]
[PATCH 6.6 0234/1193] tls: reject the combination of TLS and sockmap	[Body]
[PATCH 6.6 0235/1193] ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10	[Body]
[PATCH 6.6 0236/1193] leds: uleds: Return -EFAULT on copy_to_user() failure	[Body]
[PATCH 6.6 0237/1193] leds: pca9532: Dont stop blinking for non-zero brightness	[Body]
[PATCH 6.6 0238/1193] mfd: tps65219: Make poweroff handler conditional on system-power-controller	[Body]
[PATCH 6.6 0239/1193] mfd: rsmu: Add 8a34002 support	[Body]
[PATCH 6.6 0240/1193] drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl	[Body]
[PATCH 6.6 0241/1193] drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap	[Body]
[PATCH 6.6 0242/1193] drm/amdgpu: Use system unbound workqueue for soft IH ring	[Body]
[PATCH 6.6 0243/1193] ALSA: usb-audio: Add quirk for YAMAHA CDS3000	[Body]
[PATCH 6.6 0244/1193] PCI: iproc: Protect root bus removal with rescan lock	[Body]
[PATCH 6.6 0245/1193] PCI: altera: Protect root bus removal with rescan lock	[Body]
[PATCH 6.6 0246/1193] PCI: rockchip: Protect root bus removal with rescan lock	[Body]
[PATCH 6.6 0247/1193] PCI: mediatek: Protect root bus removal with rescan lock	[Body]
[PATCH 6.6 0248/1193] md/raid5: account discard IO	[Body]
[PATCH 6.6 0249/1193] md/raid5: let stripe batch bm_seq comparison wrap-safe	[Body]
[PATCH 6.6 0250/1193] f2fs: validate inline dentry name lengths before conversion	[Body]
[PATCH 6.6 0251/1193] rtc: aspeed: add AST2700 compatible	[Body]
[PATCH 6.6 0252/1193] ksmbd: fix lease break and ack state handling	[Body]
[PATCH 6.6 0253/1193] ksmbd: validate SMB2 lease create contexts	[Body]
[PATCH 6.6 0254/1193] ksmbd: align SMB2 oplock break ack handling	[Body]
[PATCH 6.6 0255/1193] ksmbd: use connection ClientGUID for lease lookup	[Body]
[PATCH 6.6 0256/1193] ksmbd: treat unnamed DATA stream as base file	[Body]
[PATCH 6.6 0257/1193] ksmbd: apply create security descriptor first	[Body]
[PATCH 6.6 0258/1193] ksmbd: deny renaming directory with open children	[Body]
[PATCH 6.6 0259/1193] ksmbd: start file id allocation at 1	[Body]
[PATCH 6.6 0260/1193] ksmbd: break RH leases before delete-on-close	[Body]
[PATCH 6.6 0261/1193] ksmbd: treat read-control opens as stat opens only for leases	[Body]
[PATCH 6.6 0262/1193] PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device()	[Body]
[PATCH 6.6 0263/1193] PCI/sysfs: Use kstrtobool() to parse the ROM attribute input	[Body]
[PATCH 6.6 0264/1193] regulator: da9121: Use subvariant ids in the I2C table	[Body]
[PATCH 6.6 0265/1193] net: au1000: move free_irq out of the close-time spinlocked section	[Body]
[PATCH 6.6 0266/1193] blk-cgroup: protect iterating blkgs with blkcg->lock in blkcg_print_stat()	[Body]
[PATCH 6.6 0267/1193] rtc: bq32000: add delay between RTC reads	[Body]
[PATCH 6.6 0268/1193] eth: mlx5: fix macsec dependency	[Body]
[PATCH 6.6 0269/1193] fbdev: pm2fb: unwind WC setup on probe failure	[Body]
[PATCH 6.6 0270/1193] spi: core: Abort active target transfer on controller suspend	[Body]
[PATCH 6.6 0271/1193] btrfs: tree-checker: validate INODE_REFs namelen	[Body]
[PATCH 6.6 0272/1193] drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend	[Body]
[PATCH 6.6 0273/1193] netfilter: nf_conntrack_expect: zero at allocation time	[Body]
[PATCH 6.6 0274/1193] ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr	[Body]
[PATCH 6.6 0275/1193] drm/arm/komeda: fix error handling for clk_prepare_enable() and callers	[Body]
[PATCH 6.6 0276/1193] ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr	[Body]
[PATCH 6.6 0277/1193] ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling	[Body]
[PATCH 6.6 0278/1193] xen/front-pgdir-shbuf: free grant reference head on errors	[Body]
[PATCH 6.6 0279/1193] freevxfs: dont BUG() on unknown typed-extent type	[Body]
[PATCH 6.6 0280/1193] xen/gntalloc: validate grant count before allocation	[Body]
[PATCH 6.6 0281/1193] cachefiles: Fix double fput	[Body]
[PATCH 6.6 0282/1193] ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table	[Body]
[PATCH 6.6 0283/1193] drm/amdgpu: flush pending RCU callbacks on module unload	[Body]
[PATCH 6.6 0284/1193] ksmbd: fix credit charge calculation for SMB2 QUERY_INFO	[Body]
[PATCH 6.6 0285/1193] ALSA: usb-audio: caiaq: validate EP1 reply lengths	[Body]
[PATCH 6.6 0286/1193] wifi: ralink: RT2X00: init EEPROM properly	[Body]
[PATCH 6.6 0287/1193] wifi: mac80211: validate deauth frame length before reason access	[Body]
[PATCH 6.6 0288/1193] wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers	[Body]
[PATCH 6.6 0289/1193] wifi: libertas: reject short monitor TX frames	[Body]
[PATCH 6.6 0290/1193] wifi: cfg80211: validate assoc response length before status and IE access	[Body]
[PATCH 6.6 0291/1193] ksmbd: find bound sessions during reauthentication	[Body]
[PATCH 6.6 0292/1193] ksmbd: mark invalid session responses as signed	[Body]
[PATCH 6.6 0293/1193] ksmbd: validate SID namespace before mapping IDs	[Body]
[PATCH 6.6 0294/1193] wifi: cfg80211: validate rx/tx MLME callback frame lengths before access	[Body]
[PATCH 6.6 0295/1193] gpio: dwapb: Mask interrupts at hardware initialization	[Body]
[PATCH 6.6 0296/1193] wifi: libipw: fix key index receive bound checks	[Body]
[PATCH 6.6 0297/1193] netfilter: ipset: mark the rcu locked areas properly	[Body]
[PATCH 6.6 0298/1193] wifi: rsi: validate beacon length before fixed buffer copy	[Body]
[PATCH 6.6 0299/1193] smb/client: reduce fallocate zero buffer allocation	[Body]
[PATCH 6.6 0300/1193] ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series	[Body]
[PATCH 6.6 0301/1193] btrfs: only account delalloc bytes for regular file inodes in btrfs_getattr()	[Body]
[PATCH 6.6 0302/1193] btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()	[Body]
[PATCH 6.6 0303/1193] spi: dw-dma: Wait for controller idle before completing Tx	[Body]
[PATCH 6.6 0304/1193] wifi: iwlwifi: mvm: validate sta_id in BA window status notif	[Body]
[PATCH 6.6 0305/1193] btrfs: fix reloc root cleanup in merge_reloc_roots()	[Body]
[PATCH 6.6 0306/1193] wifi: iwlwifi: mvm: fix an off-by-1 boundary check	[Body]
[PATCH 6.6 0307/1193] wifi: iwlwifi: mvm: fix sched scan IE sizing	[Body]
[PATCH 6.6 0308/1193] ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs	[Body]
[PATCH 6.6 0309/1193] blk-cgroup: fix leaks and online flag on radix_tree_insert failure	[Body]
[PATCH 6.6 0310/1193] smb/client: flush dirty data before punching a hole	[Body]
[PATCH 6.6 0311/1193] wifi: iwlwifi: mvm: fix a possible underflow	[Body]
[PATCH 6.6 0312/1193] arm64: fixmap: Allow 256K early_ioremap() at any offset	[Body]
[PATCH 6.6 0313/1193] wifi: iwlwifi: mvm: add a check on the tid coming from the firmware	[Body]
[PATCH 6.6 0314/1193] wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif	[Body]
[PATCH 6.6 0315/1193] arm64: kprobes: Allow reentering kprobes while single-stepping	[Body]
[PATCH 6.6 0316/1193] drm/amd/pm/si: Dont schedule thermal work when queue isnt initialized	[Body]
[PATCH 6.6 0317/1193] ALSA: hda/realtek: Add quirk for HP Pavilion x360	[Body]
[PATCH 6.6 0318/1193] wifi: iwlwifi: bound aligned TLV advance in FW parser	[Body]
[PATCH 6.6 0319/1193] ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless	[Body]
[PATCH 6.6 0320/1193] wifi: iwlwifi: acpi: validate WGDS table revision index	[Body]
[PATCH 6.6 0321/1193] ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE	[Body]
[PATCH 6.6 0322/1193] wifi: mwifiex: replace one-element arrays with flexible array members	[Body]
[PATCH 6.6 0323/1193] smb: client: bound dirent name against end of SMB response in cifs_filldir	[Body]
[PATCH 6.6 0324/1193] regulator: core: clamp voltage constraints before applying apply_uV	[Body]
[PATCH 6.6 0325/1193] wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO	[Body]
[PATCH 6.6 0326/1193] ksmbd: preserve VFS inherited POSIX ACL mask	[Body]
[PATCH 6.6 0327/1193] drm/gma500: return errors from Oaktrail HDMI I2C reads	[Body]
[PATCH 6.6 0328/1193] phonet: check register_netdevice_notifier() error in phonet_device_init()	[Body]
[PATCH 6.6 0329/1193] ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4	[Body]
[PATCH 6.6 0330/1193] ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx	[Body]
[PATCH 6.6 0331/1193] ice: pass the return value of skb_checksum_help()	[Body]
[PATCH 6.6 0332/1193] powerpc/pseries: Ensure vpa,slb_shadow & dtl are unregistered during crash	[Body]
[PATCH 6.6 0333/1193] cifs: validate idmap key payload length	[Body]
[PATCH 6.6 0334/1193] wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()	[Body]
[PATCH 6.6 0335/1193] Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame	[Body]
[PATCH 6.6 0336/1193] ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision)	[Body]
[PATCH 6.6 0337/1193] Drivers: hv: vmbus: add VTL2 redirect connection ID	[Body]
[PATCH 6.6 0338/1193] ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx	[Body]
[PATCH 6.6 0339/1193] vhost-scsi: flush backend after device ioctls	[Body]
[PATCH 6.6 0340/1193] hwmon: (corsair-psu) Fix linear11 calculation	[Body]
[PATCH 6.6 0341/1193] spi: dw: fix wrong RX_SAMPLE_DLY setting after resume	[Body]
[PATCH 6.6 0342/1193] ASoC: rt5645: Perform the initial jack detect at probe	[Body]
[PATCH 6.6 0343/1193] scsi: core: Do not block on tag allocation in scsi_eh_lock_door()	[Body]
[PATCH 6.6 0344/1193] ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx	[Body]
[PATCH 6.6 0345/1193] netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state	[Body]
[PATCH 6.6 0346/1193] firmware: stratix10-svc: fix FCS SMC call kernel-doc	[Body]
[PATCH 6.6 0347/1193] ksmbd: remove stale channels from all sessions on teardown	[Body]
[PATCH 6.6 0348/1193] tracing/histograms: Simplify last_cmd_set()	[Body]
[PATCH 6.6 0349/1193] wifi: mt76: mt7921: validate CLC firmware records	[Body]
[PATCH 6.6 0350/1193] wifi: mt76: mt7921: skip unknown CLC firmware records	[Body]
[PATCH 6.6 0351/1193] ppp_async: drop the errored frame instead of resetting its headroom	[Body]
[PATCH 6.6 0352/1193] drop_monitor: perform u64_stats updates under IRQ-disabled section	[Body]
[PATCH 6.6 0353/1193] drop_monitor: fix size calculations for 64-bit attributes	[Body]
[PATCH 6.6 0354/1193] net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD	[Body]
[PATCH 6.6 0355/1193] tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()	[Body]
[PATCH 6.6 0356/1193] Bluetooth: ISO: fix malformed ISO_END/CONT handling	[Body]
[PATCH 6.6 0357/1193] bpf: Mask pseudo pointer values in verifier logs	[Body]
[PATCH 6.6 0358/1193] sctp: fix err_chunk memory leaks in INIT handling	[Body]
[PATCH 6.6 0359/1193] coresight: platform: defer connection counter increment until alloc succeeds	[Body]
[PATCH 6.6 0360/1193] RDMA/bnxt_re: Proper rollback if the ioremap fails	[Body]
[PATCH 6.6 0361/1193] bpf: Guard __get_user acesss with access_ok for uprobe_multi data	[Body]
[PATCH 6.6 0362/1193] ipv4: fib: Dont dump dying fib_info in fib_leaf_notify().	[Body]
[PATCH 6.6 0363/1193] ASoC: topology: Check PCM and DAI name strings before use	[Body]
[PATCH 6.6 0364/1193] ASoC: meson: aiu: Validate written enum values	[Body]
[PATCH 6.6 0365/1193] ksmbd: use memcmp() to compare ClientGUIDs	[Body]
[PATCH 6.6 0366/1193] af_unix: Unlink scc_entry in unix_del_edge().	[Body]
[PATCH 6.6 0367/1193] of: dynamic: Fix overlayed devices not probing because of fw_devlink	[Body]
[PATCH 6.6 0368/1193] mm/damon/core: avoid infinite kdamond_merge_regions() internal loop	[Body]
[PATCH 6.6 0369/1193] Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU"	[Body]
[PATCH 6.6 0370/1193] Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU"	[Body]
[PATCH 6.6 0371/1193] ARM: 9484/1: enable interrupts when unhandled user faults are triggered	[Body]
[PATCH 6.6 0372/1193] ARM: ensure interrupts are enabled in __do_user_fault()	[Body]
[PATCH 6.6 0373/1193] EDAC/igen6: Fix interleave boundary condition	[Body]
[PATCH 6.6 0374/1193] EDAC/igen6: Fix channel selection hash	[Body]
[PATCH 6.6 0375/1193] EDAC/igen6: Fix channel address decode for non-hash mode	[Body]
[PATCH 6.6 0376/1193] EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation	[Body]
[PATCH 6.6 0377/1193] drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()	[Body]
[PATCH 6.6 0378/1193] accel/qaic: Address potential out-of-bounds read in resp_worker()	[Body]
[PATCH 6.6 0379/1193] nvme-rdma: fix -EIO cleanup order in queue_rq	[Body]
[PATCH 6.6 0380/1193] selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter	[Body]
[PATCH 6.6 0381/1193] ufs: convert to new timestamp accessors	[Body]
[PATCH 6.6 0382/1193] ufs: Convert ufs_get_page() to use a folio	[Body]
[PATCH 6.6 0383/1193] ufs: Convert ufs_get_page() to ufs_get_folio()	[Body]
[PATCH 6.6 0384/1193] ufs: do not treat unreadable directory blocks as empty	[Body]
[PATCH 6.6 0385/1193] drm/cirrus: Use video aperture helpers	[Body]
[PATCH 6.6 0386/1193] drm/cirrus-qemu: Validate BAR0 size during probe	[Body]
[PATCH 6.6 0387/1193] net: icmp: avoid invalid transport header access in icmp_send tracepoint	[Body]
[PATCH 6.6 0388/1193] net/sched: act_api: budget all shared attributes in notify skbs	[Body]
[PATCH 6.6 0389/1193] net/sched: act_api: size the RTM_GETACTION reply from the actions	[Body]
[PATCH 6.6 0390/1193] rtnl: add helper to send if skb is not null	[Body]
[PATCH 6.6 0391/1193] net/sched: act_api: dont open code max()	[Body]
[PATCH 6.6 0392/1193] net/sched: act_api: conditional notification of events	[Body]
[PATCH 6.6 0393/1193] net/sched: act_api: fix skb sizing and action leak on reoffload delete	[Body]
[PATCH 6.6 0394/1193] sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START	[Body]
[PATCH 6.6 0395/1193] scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()	[Body]
[PATCH 6.6 0396/1193] scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()	[Body]
[PATCH 6.6 0397/1193] smb/client: mark file sparse before emulating insert range	[Body]
[PATCH 6.6 0398/1193] smb: client: transport: Fix debug printing in __release_mid()	[Body]
[PATCH 6.6 0399/1193] sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration	[Body]
[PATCH 6.6 0400/1193] raw: annotate disconnect-side IPv4 match writers	[Body]
[PATCH 6.6 0401/1193] net: amd-xgbe: discard rx packets with bad FCS	[Body]
[PATCH 6.6 0402/1193] vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()	[Body]
[PATCH 6.6 0403/1193] watchdog: msc313e: Fix NULL pointer dereference in PM callbacks	[Body]
[PATCH 6.6 0404/1193] OPP: of: Fix potential multiplication overflow when calculating freq	[Body]
[PATCH 6.6 0405/1193] ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF	[Body]
[PATCH 6.6 0406/1193] ksmbd: rate limit unmapped SID errors	[Body]
[PATCH 6.6 0407/1193] s390/checksum: call instrument_read() instead of kasan_check_read()	[Body]
[PATCH 6.6 0408/1193] s390/checksum: provide and use cksm() inline assembly	[Body]
[PATCH 6.6 0409/1193] s390/os_info: Introduce value entries	[Body]
[PATCH 6.6 0410/1193] s390/ipl: Fix NULL deref in kdump without re-IPL parm block	[Body]
[PATCH 6.6 0411/1193] s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block	[Body]
[PATCH 6.6 0412/1193] workqueue: replace use of system_wq with system_percpu_wq	[Body]
[PATCH 6.6 0413/1193] workqueue: reject watchdog thresholds that overflow jiffies	[Body]
[PATCH 6.6 0414/1193] Bluetooth: btintel: Print firmware SHA1	[Body]
[PATCH 6.6 0415/1193] Bluetooth: btintel: Export few static functions	[Body]
[PATCH 6.6 0416/1193] Bluetooth: btintel: validate version TLV value lengths	[Body]
[PATCH 6.6 0417/1193] Bluetooth: hci_core: Fix race condition during device registration	[Body]
[PATCH 6.6 0418/1193] Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan	[Body]
[PATCH 6.6 0419/1193] Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM	[Body]
[PATCH 6.6 0420/1193] Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout()	[Body]
[PATCH 6.6 0421/1193] ASoC: ab8500: Reset the audio block before configuring it	[Body]
[PATCH 6.6 0422/1193] ASoC: ab8500: Repair the DAPM capture graph	[Body]
[PATCH 6.6 0423/1193] ASoC: ab8500: Correct digital interface format setup	[Body]
[PATCH 6.6 0424/1193] ASoC: ab8500: Validate and program TDM slots correctly	[Body]
[PATCH 6.6 0425/1193] net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted	[Body]
[PATCH 6.6 0426/1193] ppp: ppp_async: simplify tty disc_data access	[Body]
[PATCH 6.6 0427/1193] ip6_gre: check tunnel info before xmit in ip6gre_tunnel_xmit	[Body]
[PATCH 6.6 0428/1193] tipc: fix NULL deref in tipc_named_node_up() on empty publication list	[Body]
[PATCH 6.6 0429/1193] ipv6: sr: restore network header before routing and forwarding	[Body]
[PATCH 6.6 0430/1193] af_packet: Dont cast tpacket_hdr.tp_len to int in tpacket_parse_header().	[Body]
[PATCH 6.6 0431/1193] staging: fbtft: make dirty_lock IRQ-safe	[Body]
[PATCH 6.6 0432/1193] ALSA: hda/core: Use guard() for mutex locks	[Body]
[PATCH 6.6 0433/1193] ALSA: hda: restore MFG widget enumeration after core split	[Body]
[PATCH 6.6 0434/1193] s390/boot: Fix physical memory search range	[Body]
[PATCH 6.6 0435/1193] ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits	[Body]
[PATCH 6.6 0436/1193] ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()	[Body]
[PATCH 6.6 0437/1193] btrfs: detach failed sprout device from transaction update list	[Body]
[PATCH 6.6 0438/1193] btrfs: restore active device pointers after failed sprout	[Body]
[PATCH 6.6 0439/1193] bonding: alb: fix uninitialized transport header access in alb_determine_nd()	[Body]
[PATCH 6.6 0440/1193] scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues()	[Body]
[PATCH 6.6 0441/1193] perf/core: Skip empty AUX records with only format flags	[Body]
[PATCH 6.6 0442/1193] locking/lockdep: Invalidate stale class_cache entries for zapped classes	[Body]
[PATCH 6.6 0443/1193] ALSA: rawmidi: Expose the tied device number in info ioctl	[Body]
[PATCH 6.6 0444/1193] ALSA: rawmidi: Show substream activity in info ioctl	[Body]
[PATCH 6.6 0445/1193] ALSA: ump: Copy FB name string more safely	[Body]
[PATCH 6.6 0446/1193] ALSA: ump: Copy safe string name to rawmidi	[Body]
[PATCH 6.6 0447/1193] ALSA: ump: Update rawmidi name per EP name update	[Body]
[PATCH 6.6 0448/1193] ALSA: ump: do not touch legacy_rmidi before it exists	[Body]
[PATCH 6.6 0449/1193] ASoC: ux500: Fix MSP stream lifecycle handling	[Body]
[PATCH 6.6 0450/1193] ASoC: ux500: Propagate MSP setup errors	[Body]
[PATCH 6.6 0451/1193] ASoC: ux500: Correct MSP frame and bit clock setup	[Body]
[PATCH 6.6 0452/1193] ASoC: ux500: Validate MSP DAI configuration	[Body]
[PATCH 6.6 0453/1193] mfd: db8500-prcmu: Remove needless return in three void APIs	[Body]
[PATCH 6.6 0454/1193] arm: Handle KCOV __init vs inline mismatches	[Body]
[PATCH 6.6 0455/1193] mfd: db8500-prcmu: Fold dbx500 header into db8500	[Body]
[PATCH 6.6 0456/1193] ASoC: ux500: Request the MSP MMIO resource	[Body]
[PATCH 6.6 0457/1193] ASoC: ux500: Program the MSP FIFO watermarks	[Body]
[PATCH 6.6 0458/1193] btrfs: fix transaction use-after-free in raid stripe insertion	[Body]
[PATCH 6.6 0459/1193] btrfs: directly return 0 on no error code in btrfs_insert_raid_extent()	[Body]
[PATCH 6.6 0460/1193] btrfs: fix the possible bioc_list memory leak during error	[Body]
[PATCH 6.6 0461/1193] btrfs: send: fix lost error return value in will_overwrite_ref()	[Body]
[PATCH 6.6 0462/1193] btrfs: do not force reloc root creation during qgroup_account_snapshot()	[Body]
[PATCH 6.6 0463/1193] ipvs: fix reversed sequence option serialization	[Body]
[PATCH 6.6 0464/1193] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()	[Body]
[PATCH 6.6 0465/1193] tracing/probes: Fix use-after-free on field name/type of events with multiple probes	[Body]
[PATCH 6.6 0466/1193] bpf: reject BPF_PSEUDO_FUNC reference to the main program	[Body]
[PATCH 6.6 0467/1193] bonding: do not clear curr_active_slave prematurely when releasing all slaves	[Body]
[PATCH 6.6 0468/1193] net/rds: use wq_has_sleeper() in release_in_xmit()	[Body]
[PATCH 6.6 0469/1193] net/rds: use clear_bit_unlock() in release_refill()	[Body]
[PATCH 6.6 0470/1193] net/rds: clear cp_flags bits individually in rds_conn_path_reset()	[Body]
[PATCH 6.6 0471/1193] net/rds: tcp: dont force RDS_CONN_RESETTING over a concurrent shutdown	[Body]
[PATCH 6.6 0472/1193] net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()	[Body]
[PATCH 6.6 0473/1193] net/rds: acquire the fastpath locks in rds_conn_shutdown()	[Body]
[PATCH 6.6 0474/1193] net/rds: dont let rds_conn_shutdown() consume a concurrent drop	[Body]
[PATCH 6.6 0475/1193] net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset	[Body]
[PATCH 6.6 0476/1193] selftests/alsa: Fix the step check for INTEGER controls	[Body]
[PATCH 6.6 0477/1193] ALSA: caiaq: Fix potential double-free at error path	[Body]
[PATCH 6.6 0478/1193] bpf: Fix NULL-ptr-deref when showing a void BTF type	[Body]
[PATCH 6.6 0479/1193] bpf: Fix NULL-ptr-deref in btf_var_show()	[Body]
[PATCH 6.6 0480/1193] nvme_core: scan namespaces asynchronously	[Body]
[PATCH 6.6 0481/1193] nvme: remove stale namespaces by NSID range during scan	[Body]
[PATCH 6.6 0482/1193] ASoC: Intel: avs: Clean up the bus when fetching ML caps fails	[Body]
[PATCH 6.6 0483/1193] net: bcmasp: clear txcb->last before writing each descriptor	[Body]
[PATCH 6.6 0484/1193] net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times	[Body]
[PATCH 6.6 0485/1193] bpf: Mark bpf_btf_find_by_name_kind() as sleepable	[Body]
[PATCH 6.6 0486/1193] selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs	[Body]
[PATCH 6.6 0487/1193] selftests/bpf: Fix flaky bpf_nf test when random NAT port is 0	[Body]
[PATCH 6.6 0488/1193] nexthop: Initialize extack in remove_nh_grp_entry()	[Body]
[PATCH 6.6 0489/1193] bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit()	[Body]
[PATCH 6.6 0490/1193] net: dsa: bcm_sf2: bound the CFP rule dump by the callers buffer size	[Body]
[PATCH 6.6 0491/1193] net: dsa: mv88e6xxx: bound the policy rule dump by the callers buffer size	[Body]
[PATCH 6.6 0492/1193] net: bridge: mcast: properly convert mglist to rcu	[Body]
[PATCH 6.6 0493/1193] octeontx2-af: mcs: Clear stale X2P calibration state before calibration	[Body]
[PATCH 6.6 0494/1193] net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow	[Body]
[PATCH 6.6 0495/1193] s390/ism: folio_put() after error	[Body]
[PATCH 6.6 0496/1193] vxlan: reject dynamic fdb entries that reference a nexthop id	[Body]
[PATCH 6.6 0497/1193] net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations	[Body]
[PATCH 6.6 0498/1193] pds_core: fix cmd_regs access racing BAR unmap on reset	[Body]
[PATCH 6.6 0499/1193] powerpc/kexec_file: Use inclusive range checks in add_usable_mem()	[Body]
[PATCH 6.6 0500/1193] net/sched: defer qdisc freeing after failed creation	[Body]
[PATCH 6.6 0501/1193] net/mlx5e: Fix setting RS FEC after remapping	[Body]
[PATCH 6.6 0502/1193] net/mlx5e: Fix ETS zero BW reporting when one TC holds 100%	[Body]
[PATCH 6.6 0503/1193] net/mlx5e: Fix use-after-free race in sample_restore_put()	[Body]
[PATCH 6.6 0504/1193] net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put	[Body]
[PATCH 6.6 0505/1193] net/mlx5: E-Switch, prevent mc_list repopulation during vport disable	[Body]
[PATCH 6.6 0506/1193] net_sched: sch_fq_pie: implement lockless fq_pie_dump()	[Body]
[PATCH 6.6 0507/1193] net/sched: fq_pie: clamp quantum in change path	[Body]
[PATCH 6.6 0508/1193] net/sched: sfq: clamp quantum in change path	[Body]
[PATCH 6.6 0509/1193] net/sched: hhf: clamp quantum in change and init paths	[Body]
[PATCH 6.6 0510/1193] net/sched: pie: clamp psched_mtu in pie_drop_early	[Body]
[PATCH 6.6 0511/1193] net/sched: drr: clamp quantum in change class	[Body]
[PATCH 6.6 0512/1193] net/sched: ets: clamp quantum in parse and fallback paths	[Body]
[PATCH 6.6 0513/1193] workqueue: Introduce from_work() helper for cleaner callback declarations	[Body]
[PATCH 6.6 0514/1193] net: macb: rename bp->sgmii_phy field to bp->phy	[Body]
[PATCH 6.6 0515/1193] net: macb: fix NULL pointer dereference on unbind with fixed-link	[Body]
[PATCH 6.6 0516/1193] bpf: Reject non-scalar bpf_loop iteration counts	[Body]
[PATCH 6.6 0517/1193] ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev	[Body]
[PATCH 6.6 0518/1193] ASoC: bcm: bcm63xx: Publish the OF module aliases	[Body]
[PATCH 6.6 0519/1193] ASoC: Intel: SST: Publish the PCI module aliases	[Body]
[PATCH 6.6 0520/1193] netfilter: nfnetlink_log: cope with concurrent instance destruction	[Body]
[PATCH 6.6 0521/1193] netfilter: ip6_tables: set F_PROTO when proto value is nonzero	[Body]
[PATCH 6.6 0522/1193] ASoC: mt6351: Publish the OF module alias	[Body]
[PATCH 6.6 0523/1193] virtio_console: do not free control-out buffers on remove	[Body]
[PATCH 6.6 0524/1193] vdpa: introduce dedicated descriptor group for virtqueue	[Body]
[PATCH 6.6 0525/1193] vhost-vdpa: introduce descriptor group backend feature	[Body]
[PATCH 6.6 0526/1193] vdpa: introduce .reset_map operation callback	[Body]
[PATCH 6.6 0527/1193] vhost-vdpa: introduce IOTLB_PERSIST backend feature bit	[Body]
[PATCH 6.6 0528/1193] vdpa: introduce .compat_reset operation callback	[Body]
[PATCH 6.6 0529/1193] vhost-vdpa: clean iotlb map during reset for older userspace	[Body]
[PATCH 6.6 0530/1193] vhost/vdpa: reject VRING_NUM larger than device max	[Body]
[PATCH 6.6 0531/1193] vhost-vdpa: dont install the eventfd_ctx_fdget() error in config_ctx	[Body]
[PATCH 6.6 0532/1193] vdpa_sim_blk: reject out-of-range sector starts	[Body]
[PATCH 6.6 0533/1193] vdpa_sim_net: check TX pull result before RX copy	[Body]
[PATCH 6.6 0534/1193] virtio-pci: return IRQ_HANDLED after non-zero ISR	[Body]
[PATCH 6.6 0535/1193] virtio_input: reset device if input_register_device() fails	[Body]
[PATCH 6.6 0536/1193] virtio_input: stop callbacks before unregistering input device	[Body]
[PATCH 6.6 0537/1193] ipv6: lockless IPV6_UNICAST_HOPS implementation	[Body]
[PATCH 6.6 0538/1193] ipv6: lockless IPV6_MULTICAST_LOOP implementation	[Body]
[PATCH 6.6 0539/1193] ipv6: lockless IPV6_MULTICAST_HOPS implementation	[Body]
[PATCH 6.6 0540/1193] ipv6: lockless IPV6_MTU implementation	[Body]
[PATCH 6.6 0541/1193] net: ipv6: Fix UDP length overflow with PMTU discover and big MTU	[Body]
[PATCH 6.6 0542/1193] net: ipv6: Clamp to IP6_MAX_MTU in ip6_dst_mtu_maybe_forward	[Body]
[PATCH 6.6 0543/1193] net: ethernet: cortina: Fix budget accounting	[Body]
[PATCH 6.6 0544/1193] net: ethernet: cortina: Finish RX updates before NAPI completion	[Body]
[PATCH 6.6 0545/1193] net: ethernet: cortina: Count dropped frames as NAPI work	[Body]
[PATCH 6.6 0546/1193] net: ethernet: cortina: No mapping is a dropped rx	[Body]
[PATCH 6.6 0547/1193] net: ethernet: cortina: Count RX drops once per frame	[Body]
[PATCH 6.6 0548/1193] net: ethernet: cortina: Count RX descriptors for freeq refill	[Body]
[PATCH 6.6 0549/1193] drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER	[Body]
[PATCH 6.6 0550/1193] ALSA: hda: Introduce auto cleanup macros for PM	[Body]
[PATCH 6.6 0551/1193] ALSA: hda/common: Use cleanup macros for PM controls	[Body]
[PATCH 6.6 0552/1193] ALSA: hda/common: Use guard() for mutex locks	[Body]
[PATCH 6.6 0553/1193] ALSA: hda: Report a change when only the channel status bytes move	[Body]
[PATCH 6.6 0554/1193] ice: add missing xa_destroy for sched_node_ids	[Body]
[PATCH 6.6 0555/1193] Bluetooth: btusb: Fix UAF of btusb_data by rx_work	[Body]
[PATCH 6.6 0556/1193] net: macb: destroy the phylink instance on the probe error path	[Body]
[PATCH 6.6 0557/1193] watchdog: fix hrtimer start when pretimeout is zero	[Body]
[PATCH 6.6 0558/1193] watchdog: msc313e: Avoid division by zero	[Body]
[PATCH 6.6 0559/1193] watchdog: msc313e: Fix clock leak and spurious timer in settimeout()	[Body]
[PATCH 6.6 0560/1193] watchdog: msc313e: Enable clock before accessing hardware registers	[Body]
[PATCH 6.6 0561/1193] watchdog: msc313e: Fix spurious reset on suspend	[Body]
[PATCH 6.6 0562/1193] watchdog: msc313e: Fix undefined behavior	[Body]
[PATCH 6.6 0563/1193] watchdog: msc313e: Sync timeout value if WDT was running at boot	[Body]
[PATCH 6.6 0564/1193] net/micrel: Fix typos in micrel driver code comments	[Body]
[PATCH 6.6 0565/1193] net: ks8851: Fix receiver error in 100BASE-TX mode following software power-down	[Body]
[PATCH 6.6 0566/1193] hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown()	[Body]
[PATCH 6.6 0567/1193] hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors	[Body]
[PATCH 6.6 0568/1193] octeontx2-pf: reset HTB scheduler topology before freeing queues	[Body]
[PATCH 6.6 0569/1193] vxlan: use generic function for tunnel IPv4 route lookup	[Body]
[PATCH 6.6 0570/1193] ipv6: remove "proto" argument from udp_tunnel6_dst_lookup()	[Body]
[PATCH 6.6 0571/1193] ipv6: add new arguments to udp_tunnel6_dst_lookup()	[Body]
[PATCH 6.6 0572/1193] vxlan: use generic function for tunnel IPv6 route lookup	[Body]
[PATCH 6.6 0573/1193] vxlan: Pull inner IP header in vxlan_xmit_one().	[Body]
[PATCH 6.6 0574/1193] vxlan: initialize _md in vxlan_xmit_one()	[Body]
[PATCH 6.6 0575/1193] ppp_synctty: ensure a writeable skb header	[Body]
[PATCH 6.6 0576/1193] net: stmmac: initialize ptp_lock at probe time	[Body]
[PATCH 6.6 0577/1193] selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value	[Body]
[PATCH 6.6 0578/1193] perf/core: Check sample_type in perf_sample_save_callchain	[Body]
[PATCH 6.6 0579/1193] perf/x86/intel/ds: Clarify adaptive PEBS processing	[Body]
[PATCH 6.6 0580/1193] perf/x86/intel/ds: Remove redundant assignments to sample.period	[Body]
[PATCH 6.6 0581/1193] perf/x86/intel/ds: Factor out PEBS group processing code to functions	[Body]
[PATCH 6.6 0582/1193] perf/x86/intel: Correct pt_regs->flags update for PEBS path	[Body]
[PATCH 6.6 0583/1193] net/sched: cls_route: free emptied bucket on filter move	[Body]
[PATCH 6.6 0584/1193] net/sched: cls_route: Reject handle aliasing	[Body]
[PATCH 6.6 0585/1193] net/sched: cls_route: make netlink errors meaningful	[Body]
[PATCH 6.6 0586/1193] net/sched: cls_route: Fix in-place replace	[Body]
[PATCH 6.6 0587/1193] net/sched: cls_api: Dont replay RTM_GETCHAIN in tc_ctl_chain().	[Body]
[PATCH 6.6 0588/1193] net: sun4i-emac: fix missing of_node_put() for phy_node	[Body]
[PATCH 6.6 0589/1193] net: hinic: fix mailbox segment buffer overflow	[Body]
[PATCH 6.6 0590/1193] octeontx2-af: fix PF/CGX debugfs PCI bus lookup	[Body]
[PATCH 6.6 0591/1193] net/rds: fix tcp stream corruption with large pages	[Body]
[PATCH 6.6 0592/1193] openvswitch: fix wrong flag value in get_ipv6_ext_hdrs()	[Body]
[PATCH 6.6 0593/1193] sunvdc: unmap LDC cookies when the descriptor send fails	[Body]
[PATCH 6.6 0594/1193] scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands	[Body]
[PATCH 6.6 0595/1193] ksmbd: prevent out-of-bounds reads in share config responses	[Body]
[PATCH 6.6 0596/1193] powerpc/ps3: Fix repository.c build failure	[Body]
[PATCH 6.6 0597/1193] powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver	[Body]
[PATCH 6.6 0598/1193] crypto: x86/aria - add missing vzeroupper in AVX2 code	[Body]
[PATCH 6.6 0599/1193] crypto: x86/aria - add missing vzeroupper in AVX-512 code	[Body]
[PATCH 6.6 0600/1193] x86/mm: Fix user-space data loss with MADV_FREE and THP	[Body]
[PATCH 6.6 0601/1193] ipv6: fix fib6 walker UAF on seq stop	[Body]
[PATCH 6.6 0602/1193] tracing: Fix memory corruption from the histogram stacktrace modifier	[Body]
[PATCH 6.6 0603/1193] ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough	[Body]
[PATCH 6.6 0604/1193] ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf	[Body]
[PATCH 6.6 0605/1193] dm/amdgpu: fix malformed link_settings debugfs output	[Body]
[PATCH 6.6 0606/1193] watchdog: sunxi_wdt: preserve boot-enabled watchdog	[Body]
[PATCH 6.6 0607/1193] ufs: create the root dentry after loading cylinder metadata	[Body]
[PATCH 6.6 0608/1193] ufs: validate cylinder group metadata before caching it	[Body]
[PATCH 6.6 0609/1193] tunnels: Drop stale dst when building an ICMP error for PMTUD	[Body]
[PATCH 6.6 0610/1193] tick/broadcast: Plug clockevents replacement race	[Body]
[PATCH 6.6 0611/1193] tracing/user_events: Dont destroy fields when event removal fails	[Body]
[PATCH 6.6 0612/1193] tracing: Free histogram the var ref when its initialization fails	[Body]
[PATCH 6.6 0613/1193] tracing: Free histogram var refs regardless of how often they are referenced	[Body]
[PATCH 6.6 0614/1193] tracing: Free histogram the field rejected for a bad modifier	[Body]
[PATCH 6.6 0615/1193] tracing: Let histogram values keep the percent and graph modifiers	[Body]
[PATCH 6.6 0616/1193] tracing: Keep the entry count when the histogram stats allocation fails	[Body]
[PATCH 6.6 0617/1193] ASoC: sprd: validate compress buffer sizes against fixed allocations	[Body]
[PATCH 6.6 0618/1193] ASoC: sti: initialize IRQ lock before requesting IRQ	[Body]
[PATCH 6.6 0619/1193] Bluetooth: btrtl: Dont leak return code when parsing firmware format v2	[Body]
[PATCH 6.6 0620/1193] cpufreq: zero-initialize policy cpumask before sysfs publication	[Body]
[PATCH 6.6 0621/1193] cpufreq: initialize policy rwsem before sysfs publication	[Body]
[PATCH 6.6 0622/1193] exec: do_close_on_exec() before taking exec_update_lock	[Body]
[PATCH 6.6 0623/1193] drm/drm_exec: fix up contended obj when num_objects is 0	[Body]
[PATCH 6.6 0624/1193] drm/i915: Fix memory leak in query_perf_config_list()	[Body]
[PATCH 6.6 0625/1193] ring-buffer: Acquire the lock with irqsave in rb_wake_up_waiters()	[Body]
[PATCH 6.6 0626/1193] net: hso: fix TIOCMIWAIT race	[Body]
[PATCH 6.6 0627/1193] net: mana: Reserve extra CQ slot for the fence completion CQE	[Body]
[PATCH 6.6 0628/1193] net: mpls: clear inner_protocol when the last label is popped	[Body]
[PATCH 6.6 0629/1193] net: openvswitch: fix use-after-free of the flow table mask array	[Body]
[PATCH 6.6 0630/1193] netfilter: nf_log: unregister loggers before per-net teardown	[Body]
[PATCH 6.6 0631/1193] netfilter: report NLM_F_DUMP_FILTERED when all is filtered out	[Body]
[PATCH 6.6 0632/1193] vdpa: ifcvf: Put device on unsupported feature error	[Body]
[PATCH 6.6 0633/1193] vdpa: solidrun: Free IRQs after request failure	[Body]
[PATCH 6.6 0634/1193] scripts/sorttable: Mark long_size as __maybe_unused	[Body]
[PATCH 6.6 0635/1193] fbdev: vfb: defer cleanup until the last reference	[Body]
[PATCH 6.6 0636/1193] inet: frags: invalidate queues before flushing them	[Body]
[PATCH 6.6 0637/1193] ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink	[Body]
[PATCH 6.6 0638/1193] ieee802154: hwsim: serialize pib updates to fix double-free	[Body]
[PATCH 6.6 0639/1193] ipv4: fib: bound automatic table ID allocation	[Body]
[PATCH 6.6 0640/1193] ipvs: reject invalid states in connection template sync records	[Body]
[PATCH 6.6 0641/1193] mac802154: fix use-after-free of sdata via queued RX frames	[Body]
[PATCH 6.6 0642/1193] KVM: PPC: Book3S HV: Set irqfd->producer only on success	[Body]
[PATCH 6.6 0643/1193] s390/qeth: allow bridgeport queries despite OS_MISMATCH	[Body]
[PATCH 6.6 0644/1193] s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm	[Body]
[PATCH 6.6 0645/1193] hwmon: (applesmc) fix key backlight workqueue leak on register failure	[Body]
[PATCH 6.6 0646/1193] hwmon: (gpio-fan) Fix use-after-free in alarm work	[Body]
[PATCH 6.6 0647/1193] hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS	[Body]
[PATCH 6.6 0648/1193] media: hevc: add bounded tile-count helpers	[Body]
[PATCH 6.6 0649/1193] media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity	[Body]
[PATCH 6.6 0650/1193] media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity	[Body]
[PATCH 6.6 0651/1193] media: v4l2-h264: Fix memcmp() size in B1 reference list comparison	[Body]
[PATCH 6.6 0652/1193] media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer	[Body]
[PATCH 6.6 0653/1193] media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity	[Body]
[PATCH 6.6 0654/1193] media: v4l2-ctrls: validate HEVC tile counts	[Body]
[PATCH 6.6 0655/1193] media: v4l2-ctrls: validate AV1 tile counts	[Body]
[PATCH 6.6 0656/1193] bnxt_en: Only restore LRO if the device supports TPA	[Body]
[PATCH 6.6 0657/1193] bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()	[Body]
[PATCH 6.6 0658/1193] bnxt_en: Propagate RX ring init failures in bnxt_init_nic()	[Body]
[PATCH 6.6 0659/1193] mptcp: options: handle MPC data + csum reqd + no csum	[Body]
[PATCH 6.6 0660/1193] mptcp: subflow: no need to copy thmac during ulp_clone	[Body]
[PATCH 6.6 0661/1193] mptcp: syncookies: remember the request backup flag	[Body]
[PATCH 6.6 0662/1193] selftests: mptcp: fix an UAF in mptcp_connect.c	[Body]
[PATCH 6.6 0663/1193] smb: client: reject userspace cifs.idmap descriptions	[Body]
[PATCH 6.6 0664/1193] smb: client: pin DFS superblock in iterator callback	[Body]
[PATCH 6.6 0665/1193] smb: client: fix one-byte OOB read in smb2_parse_native_symlink()	[Body]
[PATCH 6.6 0666/1193] smb: client: fix file type corruption in cifs_reparse_point_to_fattr()	[Body]
[PATCH 6.6 0667/1193] smb: client: fix file type corruption in wsl_to_fattr()	[Body]
[PATCH 6.6 0668/1193] smb: client: avoid leaking refcount in cifs_queue_oplock_break()	[Body]
[PATCH 6.6 0669/1193] smb: client: avoid leaking refcount when cifs_sb_tlink() fails	[Body]
[PATCH 6.6 0670/1193] smb: client: fix heap overflow in DACL owner/group rewrite	[Body]
[PATCH 6.6 0671/1193] xfs: snapshot scrub stats when rendering them	[Body]
[PATCH 6.6 0672/1193] xfs: snapshot old AGFL before rewriting it	[Body]
[PATCH 6.6 0673/1193] xfs: signal inode btree xref error if get_rec returns an error	[Body]
[PATCH 6.6 0674/1193] xfs: count escaped corruption errors in scrub stats	[Body]
[PATCH 6.6 0675/1193] xfs: bail out on bitmap errors in xrep_agfl_fill	[Body]
[PATCH 6.6 0676/1193] Revert "arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries"	[Body]
[PATCH 6.6 0677/1193] Revert "arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries"	[Body]
[PATCH 6.6 0678/1193] Revert "arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries"	[Body]
[PATCH 6.6 0679/1193] Revert "arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries"	[Body]
[PATCH 6.6 0680/1193] Revert "arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries"	[Body]
[PATCH 6.6 0681/1193] Revert "arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries"	[Body]
[PATCH 6.6 0682/1193] Revert "arm64: dts: qcom: sc8180x: Fix the PCIe iommu-map entries"	[Body]
[PATCH 6.6 0683/1193] Revert "nvme-apple: Reset q->sq_tail during queue init"	[Body]
[PATCH 6.6 0684/1193] Revert "nvme-apple: Prevent shared tags across queues on Apple A11"	[Body]
[PATCH 6.6 0685/1193] Revert "nvme-apple: Drop the PRP null check chicken bit"	[Body]
[PATCH 6.6 0686/1193] Revert "nvme: apple: Add Apple A11 support"	[Body]
[PATCH 6.6 0687/1193] Revert "selftests/mm: skip COW tmpfile cases when fallocate() is unsupported"	[Body]
[PATCH 6.6 0688/1193] Revert "selftests/mm: report unique test names for each cow test"	[Body]
[PATCH 6.6 0689/1193] Revert "perf tests: Fix flakiness in BPF counters test on hybrid systems"	[Body]
[PATCH 6.6 0690/1193] perf evsel: Add per-thread warning for EOPNOTSUPP open failues	[Body]
[PATCH 6.6 0691/1193] usb: xusbatm: dont rely on id table pointer arithmetic	[Body]
[PATCH 6.6 0692/1193] wifi: ath9k_htc: dont store usb_device_id	[Body]
[PATCH 6.6 0693/1193] usb: usbtmc: dont store usb_device_id	[Body]
[PATCH 6.6 0694/1193] usb: serial: spcp8x5: dont store usb_device_id	[Body]
[PATCH 6.6 0695/1193] media: as102: do not rely on id table address comparison	[Body]
[PATCH 6.6 0696/1193] net: usb: pegasus: dont rely on id table pointer arithmetic	[Body]
[PATCH 6.6 0697/1193] ALSA: us122l: Prevent write upgrades for read mappings	[Body]
[PATCH 6.6 0698/1193] i2c: smbus: reject oversized block transfers in the common path	[Body]
[PATCH 6.6 0699/1193] net: appletalk: fix NULL pointer dereference in aarp_send_ddp()	[Body]
[PATCH 6.6 0700/1193] fou: Fix use-after-free in fou_create()	[Body]
[PATCH 6.6 0701/1193] crypto: sun8i-ss - Remove crypto_rng interface	[Body]
[PATCH 6.6 0702/1193] crypto: sun8i-ce - Remove crypto_rng interface	[Body]
[PATCH 6.6 0703/1193] netfilter: nft_set_pipapo_avx2: add missing vzeroupper	[Body]
[PATCH 6.6 0704/1193] workqueue: Update documentation as per system_percpu_wq naming	[Body]
[PATCH 6.6 0705/1193] Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config	[Body]
[PATCH 6.6 0706/1193] mptcp: fix bad accounting in __mptcp_subflow_push_pending()	[Body]
[PATCH 6.6 0707/1193] mptcp: avoid unneeded actions on subflow reset	[Body]
[PATCH 6.6 0708/1193] mptcp: close race between scheduler and state change	[Body]
[PATCH 6.6 0709/1193] Revert "hwmon: (emc1403) Drop hysteresis for low limit temperature"	[Body]
[PATCH 6.6 0710/1193] Revert "hwmon: (emc1403) Rely on subsystem locking"	[Body]
[PATCH 6.6 0711/1193] selftests/landlock: Add tests for access through disconnected paths	[Body]
[PATCH 6.6 0712/1193] selftests/landlock: Add disconnected leafs and branch test suites	[Body]
[PATCH 6.6 0713/1193] Revert "alpha: dont leak hardware-fabricated FP exception bits to user space"	[Body]
[PATCH 6.6 0714/1193] Revert "alpha: fix ieee_swcr_to_fpcr setting FPCR_DNOD unconditionally"	[Body]
[PATCH 6.6 0715/1193] selftests/landlock: Add tests for whiteout object creation	[Body]
[PATCH 6.6 0716/1193] sunvdc: fix -EIO issue due to lack of retries	[Body]
[PATCH 6.6 0717/1193] media: video-i2c: fix buffer queue ordering	[Body]
[PATCH 6.6 0718/1193] ipv6: Select best matching nexthop object in fib6_table_lookup()	[Body]
[PATCH 6.6 0719/1193] ipv6: Honor oif when choosing nexthop for locally generated traffic	[Body]
[PATCH 6.6 0720/1193] xfrm: avoid RCU warnings around the per-netns netlink socket	[Body]
[PATCH 6.6 0721/1193] xfrm: fix compat ALLOCSPI request use-after-free	[Body]
[PATCH 6.6 0722/1193] xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()	[Body]
[PATCH 6.6 0723/1193] esp: downgrade zerocopy managed frags before mutating skb frags	[Body]
[PATCH 6.6 0724/1193] ARM: socfpga: select the PL310 erratum 753970 workaround	[Body]
[PATCH 6.6 0725/1193] RDMA/siw: Introduce siw_cep_set_free_and_put	[Body]
[PATCH 6.6 0726/1193] RDMA/siw: Cleanup siw_accept	[Body]
[PATCH 6.6 0727/1193] RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept	[Body]
[PATCH 6.6 0728/1193] RDMA/rxe: validate access flags before swapping the MRs PD	[Body]
[PATCH 6.6 0729/1193] RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access	[Body]
[PATCH 6.6 0730/1193] firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS	[Body]
[PATCH 6.6 0731/1193] clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate	[Body]
[PATCH 6.6 0732/1193] RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds	[Body]
[PATCH 6.6 0733/1193] net: convert dev->reg_state to u8	[Body]
[PATCH 6.6 0734/1193] RDMA/core: Reject unregistering netdevs in ib_get_eth_speed	[Body]
[PATCH 6.6 0735/1193] IB/iser: reject a remote invalidation of an unregistered direction	[Body]
[PATCH 6.6 0736/1193] IB/isert: wait for deferred control PDU completions before releasing the connection	[Body]
[PATCH 6.6 0737/1193] RDMA/mad: Fix receive buffer leak when PKey enforcement fails	[Body]
[PATCH 6.6 0738/1193] RDMA/irdma: Enforce local fence for IB_WR_REG_MR	[Body]
[PATCH 6.6 0739/1193] RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted	[Body]
[PATCH 6.6 0740/1193] dmaengine: sprd: Fix runtime PM reference leak in probe	[Body]
[PATCH 6.6 0741/1193] wifi: virt_wifi: free skb when disconnected	[Body]
[PATCH 6.6 0742/1193] wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path	[Body]
[PATCH 6.6 0743/1193] wifi: libipw: reject too-short beacon and probe responses	[Body]
[PATCH 6.6 0744/1193] wifi: libipw: reject too-short association responses	[Body]
[PATCH 6.6 0745/1193] IB/IPoIB: Avoid restoring OPER_UP after multicast flush	[Body]
[PATCH 6.6 0746/1193] wifi: cfg80211: check IP header size in cfg80211_classify8021d()	[Body]
[PATCH 6.6 0747/1193] soundwire: cadence_master: wait and cancel cdns->work before clock stop	[Body]
[PATCH 6.6 0748/1193] MIPS: Octeon: apply USB FDT fixups also when USB is modular	[Body]
[PATCH 6.6 0749/1193] dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask	[Body]
[PATCH 6.6 0750/1193] dma-coherent: report a failed reserved memory assignment	[Body]
[PATCH 6.6 0751/1193] dmaengine: Fix device kref underflow in dma_chan_put()	[Body]
[PATCH 6.6 0752/1193] dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()	[Body]
[PATCH 6.6 0753/1193] dmaengine: wait for RCU readers before releasing dma_device	[Body]
[PATCH 6.6 0754/1193] wifi: cfg80211: only group hidden BSSes with beacon entries	[Body]
[PATCH 6.6 0755/1193] wifi: cfg80211: dont filter by BSS type when removing stale entries	[Body]
[PATCH 6.6 0756/1193] wifi: mac80211: dont offload TC setup on AP_VLAN interfaces	[Body]
[PATCH 6.6 0757/1193] wifi: mac80211: suppress chanctx warning for debugfs reset	[Body]
[PATCH 6.6 0758/1193] wifi: mac80211: unlist vifs when their netdev is unregistered	[Body]
[PATCH 6.6 0759/1193] wifi: mac80211_hwsim: dont hand frames to mac80211 while stopping	[Body]
[PATCH 6.6 0760/1193] wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown	[Body]
[PATCH 6.6 0761/1193] wifi: mac80211: require a peer station for TDLS setup confirm	[Body]
[PATCH 6.6 0762/1193] wifi: mac80211: dont allow link changes when iface is down	[Body]
[PATCH 6.6 0763/1193] wifi: mac80211: dont RCU-dereference the mesh CSA settings we just set	[Body]
[PATCH 6.6 0764/1193] wifi: mac80211: dont access the TSF of a down interface	[Body]
[PATCH 6.6 0765/1193] wifi: mac80211: add HE 6 GHz capability in the scan elems len	[Body]
[PATCH 6.6 0766/1193] wifi: mac80211: mesh: release the channel if start fails	[Body]
[PATCH 6.6 0767/1193] wifi: mac80211: rework ack_frame_id handling a bit	[Body]
[PATCH 6.6 0768/1193] wifi: mac80211: set up the TX info early to fix failure paths	[Body]
[PATCH 6.6 0769/1193] mm: memblock: show all region flags in debugfs	[Body]
[PATCH 6.6 0770/1193] scsi: qla2xxx: Fix the ql2xfc2target parameter description	[Body]
[PATCH 6.6 0771/1193] dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order	[Body]
[PATCH 6.6 0772/1193] dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA	[Body]
[PATCH 6.6 0773/1193] RDMA/efa: Keep admin queues alive while IRQ is registered	[Body]
[PATCH 6.6 0774/1193] RDMA/efa: Keep EQ resources alive while IRQ is registered	[Body]
[PATCH 6.6 0775/1193] RDMA/siw: Bound fragmented header copies by the remaining length	[Body]
[PATCH 6.6 0776/1193] netfilter: nft_nat: fully initialise new_addr in netmap setup	[Body]
[PATCH 6.6 0777/1193] netfilter: flowtable: hold reference on ct until flow is released	[Body]
[PATCH 6.6 0778/1193] perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations	[Body]
[PATCH 6.6 0779/1193] drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr	[Body]
[PATCH 6.6 0780/1193] keys: fix lost wakeup when reaping a dead key type	[Body]
[PATCH 6.6 0781/1193] ALSA: bcd2000: Fix race between rawmidi and disconnect	[Body]
[PATCH 6.6 0782/1193] phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow	[Body]
[PATCH 6.6 0783/1193] phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting	[Body]
[PATCH 6.6 0784/1193] ALSA: pcm: set timer->private_data before registering the PCM timer	[Body]
[PATCH 6.6 0785/1193] Input: trackpoint - fix the inertia attribute name in the ABI document	[Body]
[PATCH 6.6 0786/1193] ALSA: 6fire: Clean ups with guard()	[Body]
[PATCH 6.6 0787/1193] ALSA: usb: 6fire: Avoid embedded URBs	[Body]
[PATCH 6.6 0788/1193] ALSA: 6fire: fix OOB write from device-reported iso length	[Body]
[PATCH 6.6 0789/1193] wifi: virt_wifi: dont transfer operstate before register	[Body]
[PATCH 6.6 0790/1193] drm/ast: Automatically clean up poll helper	[Body]
[PATCH 6.6 0791/1193] drm/vc4: Use managed KMS polling to fix UAF on unbind	[Body]
[PATCH 6.6 0792/1193] ALSA: hda: trace PCM open only after assigning a stream	[Body]
[PATCH 6.6 0793/1193] btrfs: tree-checker: print dev extent offset in error message	[Body]
[PATCH 6.6 0794/1193] drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL	[Body]
[PATCH 6.6 0795/1193] seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation	[Body]
[PATCH 6.6 0796/1193] ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup	[Body]
[PATCH 6.6 0797/1193] net: fddi: skfp: fix NULL deref when setting the MAC address while down	[Body]
[PATCH 6.6 0798/1193] wifi: brcmfmac: fix lost 802.1x TX completion wakeup	[Body]
[PATCH 6.6 0799/1193] net: bridge: mst: move switchdev call outside rcu	[Body]
[PATCH 6.6 0800/1193] tcp: Dont call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().	[Body]
[PATCH 6.6 0801/1193] tcp: do not let tcp_rmem be set below 4096	[Body]
[PATCH 6.6 0802/1193] ksmbd: return buffer overflow for partial filesystem info	[Body]
[PATCH 6.6 0803/1193] ksmbd: fix partial file information responses	[Body]
[PATCH 6.6 0804/1193] ksmbd: keep compound responses on query info errors	[Body]
[PATCH 6.6 0805/1193] dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()	[Body]
[PATCH 6.6 0806/1193] Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()	[Body]
[PATCH 6.6 0807/1193] Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events	[Body]
[PATCH 6.6 0808/1193] Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown	[Body]
[PATCH 6.6 0809/1193] Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup	[Body]
[PATCH 6.6 0810/1193] pppoatm: ensure a writable skb header and linear data	[Body]
[PATCH 6.6 0811/1193] drop_monitor: synchronize tracepoint unregistration on error path	[Body]
[PATCH 6.6 0812/1193] drop_monitor: fix out-of-bounds write in reset_per_cpu_data()	[Body]
[PATCH 6.6 0813/1193] KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()	[Body]
[PATCH 6.6 0814/1193] KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure	[Body]
[PATCH 6.6 0815/1193] powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba	[Body]
[PATCH 6.6 0816/1193] ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments	[Body]
[PATCH 6.6 0817/1193] ASoC: hdmi-codec: Report a change when the channel status moves	[Body]
[PATCH 6.6 0818/1193] net: netsec: fix device_node reference leak on phy_np	[Body]
[PATCH 6.6 0819/1193] net: lock the socket in sock_gettstamp()	[Body]
[PATCH 6.6 0820/1193] net: ethernet: cortina: Ack RX overrun interrupt correctly	[Body]
[PATCH 6.6 0821/1193] net: macb: fix ordering around PTP timestamp read	[Body]
[PATCH 6.6 0822/1193] net: mvpp2: prevent buffer overflow in page_pool allocation	[Body]
[PATCH 6.6 0823/1193] drm/amdgpu: check ras and obj before dereference	[Body]
[PATCH 6.6 0824/1193] btrfs: simplify error check condition at btrfs_dirty_inode()	[Body]
[PATCH 6.6 0825/1193] btrfs: remove redundant root argument from btrfs_update_inode()	[Body]
[PATCH 6.6 0826/1193] btrfs: abort transaction on failure to update inode for hole punching and reflinking	[Body]
[PATCH 6.6 0827/1193] mm/huge_memory: use folios memcg inside __folio_split()	[Body]
[PATCH 6.6 0828/1193] net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue	[Body]
[PATCH 6.6 0829/1193] net: cpsw: Execute ndo_set_rx_mode callback in a work queue	[Body]
[PATCH 6.6 0830/1193] wifi: rtw88: TX QOS Null data the same way as Null data	[Body]
[PATCH 6.6 0831/1193] wifi: rtw88: Fix the random "error beacon valid" messages for USB	[Body]
[PATCH 6.6 0832/1193] Input: xpad - add support for Victrix Pro BFG Controller	[Body]
[PATCH 6.6 0833/1193] Input: xpad - add support for Azeron devices	[Body]
[PATCH 6.6 0834/1193] Input: xpad - fix PDP Marvel Xbox 360 controller	[Body]
[PATCH 6.6 0835/1193] ALSA: virtio: reset device before deleting virtqueues	[Body]
[PATCH 6.6 0836/1193] ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type	[Body]
[PATCH 6.6 0837/1193] ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY	[Body]
[PATCH 6.6 0838/1193] cifs: Fix server use-after-free in cifs_chan_skip_or_disable()	[Body]
[PATCH 6.6 0839/1193] exec: Cleanup POSIX timers right after de_thread()	[Body]
[PATCH 6.6 0840/1193] rds: ib: use rds_conn_drop() on protocol version mismatch	[Body]
[PATCH 6.6 0841/1193] tcp: exclude old ACKs from tcp fast path	[Body]
[PATCH 6.6 0842/1193] RDMA/ucma: Serialize join and leave on copy_to_user failure	[Body]
[PATCH 6.6 0843/1193] RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()	[Body]
[PATCH 6.6 0844/1193] openvswitch: avoid reallocating confirmed conntrack labels	[Body]
[PATCH 6.6 0845/1193] net: xfrm: reject unrepresentable espintcp transport headers	[Body]
[PATCH 6.6 0846/1193] HID: logitech-hidpp: fix race condition when accessing stale stack pointer	[Body]
[PATCH 6.6 0847/1193] kselftest/arm64: Fix size of thread_data values for pthread_join()	[Body]
[PATCH 6.6 0848/1193] arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc	[Body]
[PATCH 6.6 0849/1193] arm64: dts: renesas: r8a779f0: Set UFS lane count	[Body]
[PATCH 6.6 0850/1193] arm64: percpu: Fix this_cpu_write() casting	[Body]
[PATCH 6.6 0851/1193] arm64: percpu: Fix this_cpu_and() mask generation	[Body]
[PATCH 6.6 0852/1193] Bluetooth: btusb: fix NXP IW610 composite device handling	[Body]
[PATCH 6.6 0853/1193] Bluetooth: eir: validate service data length before reading UUID	[Body]
[PATCH 6.6 0854/1193] Bluetooth: hci_codec: validate vendor codec count length	[Body]
[PATCH 6.6 0855/1193] Bluetooth: hci_sync: Serialize local codec list cleanup	[Body]
[PATCH 6.6 0856/1193] dmaengine: sun6i: fix non-atomic read of DMA position registers	[Body]
[PATCH 6.6 0857/1193] dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status	[Body]
[PATCH 6.6 0858/1193] dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()	[Body]
[PATCH 6.6 0859/1193] ipv6: xfrm: use full sockets in local error paths	[Body]
[PATCH 6.6 0860/1193] net: lan743x: fix RX checksum use-after-free	[Body]
[PATCH 6.6 0861/1193] net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()	[Body]
[PATCH 6.6 0862/1193] net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain	[Body]
[PATCH 6.6 0863/1193] net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value	[Body]
[PATCH 6.6 0864/1193] net/sched: hhf: cap hh_flows_limit at change time	[Body]
[PATCH 6.6 0865/1193] net/packet: clear RX owner on VNET header error	[Body]
[PATCH 6.6 0866/1193] net/packet: avoid truncating TPACKET_V3 private size	[Body]
[PATCH 6.6 0867/1193] scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()	[Body]
[PATCH 6.6 0868/1193] xfrm: serialize state GC with device state flush	[Body]
[PATCH 6.6 0869/1193] memstick: ms_block: destroy io_queue workqueue on removal	[Body]
[PATCH 6.6 0870/1193] mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio()	[Body]
[PATCH 6.6 0871/1193] keys: translate request_key_auth pid for the reading procfs instance	[Body]
[PATCH 6.6 0872/1193] KEYS: trusted: Fix tpm2_load_cmd() boundary check	[Body]
[PATCH 6.6 0873/1193] i2c: at91: release DMA channels on remove and probe error	[Body]
[PATCH 6.6 0874/1193] i2c: atr: fix dangling adapter pointer on add failure	[Body]
[PATCH 6.6 0875/1193] i2c: imx: release DMA channels on probe error	[Body]
[PATCH 6.6 0876/1193] i2c: imx: disable autosuspend on remove	[Body]
[PATCH 6.6 0877/1193] IB/mlx4: Fix use-after-free on pkey sysfs registration failure	[Body]
[PATCH 6.6 0878/1193] IB/hfi1: Resolve the credit-return buffer through the send contexts node	[Body]
[PATCH 6.6 0879/1193] IB/hfi1: Fix the PIO_CRED credit-return mmap	[Body]
[PATCH 6.6 0880/1193] selinux: preserve user SID across nested backing files	[Body]
[PATCH 6.6 0881/1193] selinux: recheck intermediate backing files on mprotect()	[Body]
[PATCH 6.6 0882/1193] selinux: always fill AVC decision in avc_has_perm_noaudit()	[Body]
[PATCH 6.6 0883/1193] mmc: core: Cancel SDIO IRQ work before freeing host	[Body]
[PATCH 6.6 0884/1193] mmc: core: Fix OF node reference leak on card add failure	[Body]
[PATCH 6.6 0885/1193] mmc: hsq: Fix use-after-free in retry work	[Body]
[PATCH 6.6 0886/1193] mmc: mxcmmc: cancel data work and watchdog on remove	[Body]
[PATCH 6.6 0887/1193] mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260	[Body]
[PATCH 6.6 0888/1193] mmc: sdhci-of-aspeed: Remove children before releasing SDC resources	[Body]
[PATCH 6.6 0889/1193] mmc: sdio_uart: fix xmit_fifo leak when the port table is full	[Body]
[PATCH 6.6 0890/1193] mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt	[Body]
[PATCH 6.6 0891/1193] mmc: spi: reset bytes_xfered before retrying CRC failures	[Body]
[PATCH 6.6 0892/1193] mmc: sdhci_am654: Reset command and data lines on failed tuning	[Body]
[PATCH 6.6 0893/1193] Input: adp5588-keys - cache GPIO state before registering the gpiochip	[Body]
[PATCH 6.6 0894/1193] Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026	[Body]
[PATCH 6.6 0895/1193] Input: cyttsp5 - clamp the HID report size before memcpy	[Body]
[PATCH 6.6 0896/1193] Input: evdev - zero absinfo before partial copy in EVIOCSABS	[Body]
[PATCH 6.6 0897/1193] Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P	[Body]
[PATCH 6.6 0898/1193] Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()	[Body]
[PATCH 6.6 0899/1193] Input: soc_button_array - fix MS Surface Pro 11 probe failure	[Body]
[PATCH 6.6 0900/1193] Input: soc_button_array - check btns_desc->package.count	[Body]
[PATCH 6.6 0901/1193] Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722)	[Body]
[PATCH 6.6 0902/1193] Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound	[Body]
[PATCH 6.6 0903/1193] Input: zero ff_effect before compat copy in input_ff_effect_from_user	[Body]
[PATCH 6.6 0904/1193] hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()	[Body]
[PATCH 6.6 0905/1193] hwmon: (pmbus/core) increase number of phases and add new mask	[Body]
[PATCH 6.6 0906/1193] hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding	[Body]
[PATCH 6.6 0907/1193] hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676	[Body]
[PATCH 6.6 0908/1193] hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove	[Body]
[PATCH 6.6 0909/1193] hwmon: (w83793) release probe data through kref	[Body]
[PATCH 6.6 0910/1193] watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog	[Body]
[PATCH 6.6 0911/1193] watchdog: digicolor: Avoid division by zero	[Body]
[PATCH 6.6 0912/1193] watchdog: msc313e: Fix premature reset during timeout update	[Body]
[PATCH 6.6 0913/1193] watchdog: msc313e: Propagate error code in resume()	[Body]
[PATCH 6.6 0914/1193] watchdog: rtd119x: Avoid division by zero	[Body]
[PATCH 6.6 0915/1193] watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init()	[Body]
[PATCH 6.6 0916/1193] watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start()	[Body]
[PATCH 6.6 0917/1193] wifi: brcmsmac: fix UAF in brcms_free_timer()	[Body]
[PATCH 6.6 0918/1193] wifi: iwlegacy: fix broadcast stations deallocation	[Body]
[PATCH 6.6 0919/1193] wifi: libertas_tf: fix UAF in lbtf_free_adapter()	[Body]
[PATCH 6.6 0920/1193] wifi: rsi: fix heap OOB write on key removal	[Body]
[PATCH 6.6 0921/1193] wifi: wlcore: release runtime PM ref on regdomain config failure	[Body]
[PATCH 6.6 0922/1193] wifi: wilc1000: fix out-of-bounds read in P2P public action frames	[Body]
[PATCH 6.6 0923/1193] wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()	[Body]
[PATCH 6.6 0924/1193] wifi: p54: validate curve data length in the calibration curve converters	[Body]
[PATCH 6.6 0925/1193] wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST	[Body]
[PATCH 6.6 0926/1193] wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length	[Body]
[PATCH 6.6 0927/1193] wifi: mwifiex: validate scan response extents	[Body]
[PATCH 6.6 0928/1193] wifi: mwifiex: validate action frame fixed fields	[Body]
[PATCH 6.6 0929/1193] wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver	[Body]
[PATCH 6.6 0930/1193] drm/gud: fix out-of-bounds write in gud_plane_atomic_check()	[Body]
[PATCH 6.6 0931/1193] drm/msm/adreno: fix autosuspend cleanup during teardown	[Body]
[PATCH 6.6 0932/1193] drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure	[Body]
[PATCH 6.6 0933/1193] smb: client: cancel reconnect work in clean_demultiplex_info()	[Body]
[PATCH 6.6 0934/1193] smb: client: fix rlist race and missing initialization	[Body]
[PATCH 6.6 0935/1193] smb: client: reject short Next offsets in parse_server_interfaces()	[Body]
[PATCH 6.6 0936/1193] smb: client: fix smbd_connection leak on cifs_get_tcp_session() error	[Body]
[PATCH 6.6 0937/1193] smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs	[Body]
[PATCH 6.6 0938/1193] smb: client: fix potential OOB read in smb3_enum_snapshots()	[Body]
[PATCH 6.6 0939/1193] smb: client: fix server->total_read for compound encrypted PDUs	[Body]
[PATCH 6.6 0940/1193] smb: client: fix missing lower-bound check on DFS referral string offsets	[Body]
[PATCH 6.6 0941/1193] smb: client: fix missing iov bounds check in parse_posix_sids()	[Body]
[PATCH 6.6 0942/1193] ipv6: mcast: Use in6_dev_get() in ipv6_dev_mc_dec().	[Body]
[PATCH 6.6 0943/1193] ipv6: mcast: Dont hold RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP.	[Body]
[PATCH 6.6 0944/1193] ipv6: mcast: Dont hold RTNL for IPV6_DROP_MEMBERSHIP and MCAST_LEAVE_GROUP.	[Body]
[PATCH 6.6 0945/1193] ipv6: mcast: Dont hold RTNL for MCAST_ socket options.	[Body]
[PATCH 6.6 0946/1193] ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()	[Body]
[PATCH 6.6 0947/1193] ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()	[Body]
[PATCH 6.6 0948/1193] ksmbd: fix partial normalized name responses	[Body]
[PATCH 6.6 0949/1193] spi: spi-zynqmp-gqspi: stop the controller on shutdown	[Body]
[PATCH 6.6 0950/1193] selftests/landlock: Add layout1.refer_mount_root	[Body]
[PATCH 6.6 0951/1193] spi: zynqmp-gqspi: Use devm_spi_alloc_host()	[Body]
[PATCH 6.6 0952/1193] erofs: fix large folio race in erofs_fscache_req_complete	[Body]
[PATCH 6.6 0953/1193] apparmor: free the allocated pdb objects	[Body]
[PATCH 6.6 0954/1193] apparmor: Fix memory leak in unpack_profile()	[Body]
[PATCH 6.6 0955/1193] apparmor: Fix 8-byte alignment for initial dfa blob streams	[Body]
[PATCH 6.6 0956/1193] netfilter: nf_tables: Tolerate chains with no remaining hooks	[Body]
[PATCH 6.6 0957/1193] netfilter: nf_tables: Simplify chain netdev notifier	[Body]
[PATCH 6.6 0958/1193] remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage	[Body]
[PATCH 6.6 0959/1193] KVM: s390: Fix IRQ injection with SIGP Stop and Store Status	[Body]
[PATCH 6.6 0960/1193] bpf: Fix bpf_skb_change_tail wrt csum partial skbs	[Body]
[PATCH 6.6 0961/1193] bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL	[Body]
[PATCH 6.6 0962/1193] selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc	[Body]
[PATCH 6.6 0963/1193] bpf: Fix divide-by-zero in btf_struct_walk()	[Body]
[PATCH 6.6 0964/1193] bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()	[Body]
[PATCH 6.6 0965/1193] tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context	[Body]
[PATCH 6.6 0966/1193] HID: elecom: fix bus type for M-XGL20DLBK	[Body]
[PATCH 6.6 0967/1193] bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()	[Body]
[PATCH 6.6 0968/1193] bpf: Fix out-of-bounds read of rtt_min in sock_ops	[Body]
[PATCH 6.6 0969/1193] bpf, sockmap: Fix self-redirect copied_seq double-counting	[Body]
[PATCH 6.6 0970/1193] pinctrl: meson: Fix typo in s4 group name	[Body]
[PATCH 6.6 0971/1193] HID: amd_sfh: Validate PCI BAR size before mapping	[Body]
[PATCH 6.6 0972/1193] KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes	[Body]
[PATCH 6.6 0973/1193] KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save	[Body]
[PATCH 6.6 0974/1193] KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0	[Body]
[PATCH 6.6 0975/1193] squashfs: Add dictionary size range check to prevent shift-out-of-bounds	[Body]
[PATCH 6.6 0976/1193] Bluetooth: SMP: reject Security Request over BR/EDR	[Body]
[PATCH 6.6 0977/1193] Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel	[Body]
[PATCH 6.6 0978/1193] cgroup: selftests: Move memcontrol specific helpers out of common cgroup_util.c	[Body]
[PATCH 6.6 0979/1193] selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode	[Body]
[PATCH 6.6 0980/1193] scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume()	[Body]
[PATCH 6.6 0981/1193] docs: s390/pci: Improve and update PCI documentation	[Body]
[PATCH 6.6 0982/1193] s390/pci/docs: Fix sriov_numvfs attribute name	[Body]
[PATCH 6.6 0983/1193] s390/cio: Fix cio_update_schib() to not cache invalid schib	[Body]
[PATCH 6.6 0984/1193] s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points	[Body]
[PATCH 6.6 0985/1193] s390/cio: Guard PMCW field accesses with dnv check	[Body]
[PATCH 6.6 0986/1193] fs: avoid repeated scans in evict_inodes()	[Body]
[PATCH 6.6 0987/1193] xsk: Use a 32-bit compare in xsk_map_gen_lookup	[Body]
[PATCH 6.6 0988/1193] bpf: Skip unsettled links in link iterator	[Body]
[PATCH 6.6 0989/1193] net/sched: cls_u32: fix manual hash table handle IDR aliasing	[Body]
[PATCH 6.6 0990/1193] bpf: Restrict CO-RE poisoning to relocatable instructions	[Body]
[PATCH 6.6 0991/1193] libbpf: Reject truncated ldimm64 CO-RE relocations	[Body]
[PATCH 6.6 0992/1193] netfilter: flowtable: publish HW_DEAD after worker is done	[Body]
[PATCH 6.6 0993/1193] netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation	[Body]
[PATCH 6.6 0994/1193] netfilter: nfnetlink_queue: hold nfnl mutex in event notifier	[Body]
[PATCH 6.6 0995/1193] netfilter: nft_synproxy: use the family-aware checksum helper	[Body]
[PATCH 6.6 0996/1193] ipvs: revalidate ihl before icmp_send	[Body]
[PATCH 6.6 0997/1193] netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name	[Body]
[PATCH 6.6 0998/1193] arm64: io: Reject non-user protection in ioremap_prot()	[Body]
[PATCH 6.6 0999/1193] ocfs2: make ocfs2_calc_xattr_init() return void	[Body]
[PATCH 6.6 1000/1193] drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update	[Body]
[PATCH 6.6 1001/1193] drm/nouveau/clk: dont clobber reclock status when restoring volt/fan	[Body]
[PATCH 6.6 1002/1193] net/sched: act_ct: dont WARN on benign flow_offload_alloc() failure	[Body]
[PATCH 6.6 1003/1193] net: gue: reject invalid REMCSUM offsets	[Body]
[PATCH 6.6 1004/1193] net: Do not return value from init_dummy_netdev()	[Body]
[PATCH 6.6 1005/1193] net: core: Fix documentation	[Body]
[PATCH 6.6 1006/1193] net: create a dummy net_device allocator	[Body]
[PATCH 6.6 1007/1193] net: mediatek: mtk_eth_sock: allocate dummy net_device dynamically	[Body]
[PATCH 6.6 1008/1193] net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure	[Body]
[PATCH 6.6 1009/1193] ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().	[Body]
[PATCH 6.6 1010/1193] sctp: avoid livelock while updating retransmit path	[Body]
[PATCH 6.6 1011/1193] net: usb: catc: bound the RX packet length in catc_rx_done()	[Body]
[PATCH 6.6 1012/1193] net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget	[Body]
[PATCH 6.6 1013/1193] drm/virtio: fix object leak when drm_gem_handle_create() fails	[Body]
[PATCH 6.6 1014/1193] drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()	[Body]
[PATCH 6.6 1015/1193] drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()	[Body]
[PATCH 6.6 1016/1193] drm/virtio: release the GEM object on virtio_gpu_vram_create() errors	[Body]
[PATCH 6.6 1017/1193] drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach	[Body]
[PATCH 6.6 1018/1193] Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough	[Body]
[PATCH 6.6 1019/1193] Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()	[Body]
[PATCH 6.6 1020/1193] net: usb: sr9700: include receive overhead in the length check	[Body]
[PATCH 6.6 1021/1193] tg3: clean up PHYLIB resources on probe failure	[Body]
[PATCH 6.6 1022/1193] s390/debug: Do not register views for failed static debug areas	[Body]
[PATCH 6.6 1023/1193] s390/debug: Fix NULL pointer dereference in debug_info_copy()	[Body]
[PATCH 6.6 1024/1193] net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error	[Body]
[PATCH 6.6 1025/1193] genetlink: report the real command id for dump-only ops in policy dumps	[Body]
[PATCH 6.6 1026/1193] bpf: Fix bounds check for skb-backed dynptrs	[Body]
[PATCH 6.6 1027/1193] bpf: Fix bpf_sock context code generation	[Body]
[PATCH 6.6 1028/1193] bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc	[Body]
[PATCH 6.6 1029/1193] net/mlx5: Bridge, dont fail switchdev events of sibling eswitch ports	[Body]
[PATCH 6.6 1030/1193] net/mlx5: Bridge, dont fail unlink of untracked/unsupported peer ports	[Body]
[PATCH 6.6 1031/1193] sctp: hold asoc or transport before mod_timer() in timer handlers	[Body]
[PATCH 6.6 1032/1193] net: stmmac: selftests: Support running selftests on DSA conduits	[Body]
[PATCH 6.6 1033/1193] net: stmmac: selftests: Check the dev->features for S-TAG offload testing	[Body]
[PATCH 6.6 1034/1193] net: stmmac: selftests: Capture all packets for vlan checks	[Body]
[PATCH 6.6 1035/1193] net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K	[Body]
[PATCH 6.6 1036/1193] bpf: Reject dev-bound-only programs on other devices	[Body]
[PATCH 6.6 1037/1193] nfc: nfcmrvl: validate helper command length before pull	[Body]
[PATCH 6.6 1038/1193] nfc: st21nfca: validate received frame size	[Body]
[PATCH 6.6 1039/1193] nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()	[Body]
[PATCH 6.6 1040/1193] selftests: nci: Correct pthread_create return value check	[Body]
[PATCH 6.6 1041/1193] nfc: llcp: Fix race condition in accept_queue lifecycle	[Body]
[PATCH 6.6 1042/1193] selftests: nci: Fix uninitialized family ID on missing attribute	[Body]
[PATCH 6.6 1043/1193] selftests/nci: Fix out-of-bounds store on thread join	[Body]
[PATCH 6.6 1044/1193] nfc: virtual_ncidev: Add missing ioctl compat handler	[Body]
[PATCH 6.6 1045/1193] nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure	[Body]
[PATCH 6.6 1046/1193] nfc: st21nfca: validate ISO15693 inventory length	[Body]
[PATCH 6.6 1047/1193] nfc: llcp: fix -ENOMEM on connect with zero-length service name	[Body]
[PATCH 6.6 1048/1193] nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()	[Body]
[PATCH 6.6 1049/1193] nfc: llcp: fix slab-out-of-bounds reads when logging service names	[Body]
[PATCH 6.6 1050/1193] nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()	[Body]
[PATCH 6.6 1051/1193] net/sched: act_gate: budget the per-entry list in get_fill_size	[Body]
[PATCH 6.6 1052/1193] veth: manage XDP program pointers during channel resize	[Body]
[PATCH 6.6 1053/1193] net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()	[Body]
[PATCH 6.6 1054/1193] vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets	[Body]
[PATCH 6.6 1055/1193] bpf: Fix immediate JMP JEQ/JNE on MIPS32	[Body]
[PATCH 6.6 1056/1193] bpf: Fix BSWAP 32 and 16 on MIPS64	[Body]
[PATCH 6.6 1057/1193] driver core: Better advertise dev_err_probe()	[Body]
[PATCH 6.6 1058/1193] driver core: Make dev_err_probe() silent for -ENOMEM	[Body]
[PATCH 6.6 1059/1193] driver core: Add device probe log helper dev_warn_probe()	[Body]
[PATCH 6.6 1060/1193] tg3: use random MAC address when tg3_get_device_address fails	[Body]
[PATCH 6.6 1061/1193] net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems	[Body]
[PATCH 6.6 1062/1193] net: bcmgenet: initialize u64 stats seq counter for all queues	[Body]
[PATCH 6.6 1063/1193] net: bcmgenet: move bcmgenet_power_up into resume_noirq	[Body]
[PATCH 6.6 1064/1193] net: bcmgenet: allow return of power up status	[Body]
[PATCH 6.6 1065/1193] net: bcmgenet: do not skip WoL power up on GENET V1	[Body]
[PATCH 6.6 1066/1193] net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr	[Body]
[PATCH 6.6 1067/1193] net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT	[Body]
[PATCH 6.6 1068/1193] ip_gre: Reject enabling collect metadata through changelink	[Body]
[PATCH 6.6 1069/1193] vxlan: use one headroom snapshot for neighbour replies	[Body]
[PATCH 6.6 1070/1193] net: xps: reject an out of range traffic class	[Body]
[PATCH 6.6 1071/1193] bonding: crypto offload enabled, non-offload slave failover, rekey failed	[Body]
[PATCH 6.6 1072/1193] net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621	[Body]
[PATCH 6.6 1073/1193] tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()	[Body]
[PATCH 6.6 1074/1193] nfp: hold IPsec RX state under the XArray lock	[Body]
[PATCH 6.6 1075/1193] net/smc: fix UAF on lgr list traversal in smcr_port_err()	[Body]
[PATCH 6.6 1076/1193] tipc: Fix a data race on mon->peer_cnt in mon_timeout()	[Body]
[PATCH 6.6 1077/1193] net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails	[Body]
[PATCH 6.6 1078/1193] llc: fix skb UAF and leaks on llc_mac_hdr_init() failure	[Body]
[PATCH 6.6 1079/1193] bridge: check llc_mac_hdr_init() return value in br_send_bpdu()	[Body]
[PATCH 6.6 1080/1193] net/sched: sch_teql: fix shadowed err in __teql_resolve()	[Body]
[PATCH 6.6 1081/1193] vlan: ensure sufficient headroom in vlan_dev_hard_header()	[Body]
[PATCH 6.6 1082/1193] autofs: fix sbi->pipe file reference leak in autofs_kill_sb()	[Body]
[PATCH 6.6 1083/1193] perf/x86/intel: Ensure KVM guest PEBS path doesnt set unwanted PERF_GLOBAL_CTRL bits	[Body]
[PATCH 6.6 1084/1193] perf/x86/intel: Dont write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED	[Body]
[PATCH 6.6 1085/1193] perf/x86/intel: Dont pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused	[Body]
[PATCH 6.6 1086/1193] perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs()	[Body]
[PATCH 6.6 1087/1193] mptcp: return sk_wait_data() errors from recvmsg()	[Body]
[PATCH 6.6 1088/1193] rculist: add list_splice_rcu() for private lists	[Body]
[PATCH 6.6 1089/1193] netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase	[Body]
[PATCH 6.6 1090/1193] af_unix: Drop all SCM attributes for SOCKMAP.	[Body]
[PATCH 6.6 1091/1193] x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11	[Body]
[PATCH 6.6 1092/1193] tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow	[Body]
[PATCH 6.6 1093/1193] sctp: discard the rest of the packet on a stale-cookie error	[Body]
[PATCH 6.6 1094/1193] af_packet: fix integer overflow in prb_calc_retire_blk_tmo()	[Body]
[PATCH 6.6 1095/1193] ata: libata-scsi: bound the ATA passthru sense descriptor writes	[Body]
[PATCH 6.6 1096/1193] fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT	[Body]
[PATCH 6.6 1097/1193] writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes	[Body]
[PATCH 6.6 1098/1193] workqueue: Fix NULL current_pwq deref in flush dependency check	[Body]
[PATCH 6.6 1099/1193] writeback: report a Tasks-RCU quiescent state per cgwb drain pass	[Body]
[PATCH 6.6 1100/1193] fsl/fman: Fix clk reference leak in read_dts_node()	[Body]
[PATCH 6.6 1101/1193] ipv6: do not let ipv6_find_hdr() return an offset past the packet end	[Body]
[PATCH 6.6 1102/1193] ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST	[Body]
[PATCH 6.6 1103/1193] gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()	[Body]
[PATCH 6.6 1104/1193] gpio: zynq: fix runtime PM leak on request error path	[Body]
[PATCH 6.6 1105/1193] llc: reserve device headroom for allocated frames	[Body]
[PATCH 6.6 1106/1193] rds: ib: Clear the sg list when mapping an MR fails	[Body]
[PATCH 6.6 1107/1193] drm/i915: fix incorrect RCU teardown order	[Body]
[PATCH 6.6 1108/1193] drm/amd/display: Fix dc stream excess put in dm_update_crtc_state()	[Body]
[PATCH 6.6 1109/1193] drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init()	[Body]
[PATCH 6.6 1110/1193] drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()	[Body]
[PATCH 6.6 1111/1193] drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init()	[Body]
[PATCH 6.6 1112/1193] drm/nouveau: fix autosuspend cleanup during teardown	[Body]
[PATCH 6.6 1113/1193] drm/nouveau: Fix bridge reference leak in nv1a_ram_new()	[Body]
[PATCH 6.6 1114/1193] drm/nouveau: fix double-free in nvif_vmm_dtor	[Body]
[PATCH 6.6 1115/1193] drm/nouveau: Fix gem reference leak in validate_init()	[Body]
[PATCH 6.6 1116/1193] drm/nouveau: dont bump pin count on failed re-pin in nouveau_bo_pin_locked()	[Body]
[PATCH 6.6 1117/1193] drm/virtio: fix memory leak of fence event on execbuffer failure	[Body]
[PATCH 6.6 1118/1193] drm/virtio: fix NULL pointer dereference on fence allocation failure	[Body]
[PATCH 6.6 1119/1193] gpio: tps65219: Fix GPIO input value reads	[Body]
[PATCH 6.6 1120/1193] PCI: of_property: Omit bus properties without a subordinate bus	[Body]
[PATCH 6.6 1121/1193] HID: alps: fix use-after-free on input2 registration failure	[Body]
[PATCH 6.6 1122/1193] HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard	[Body]
[PATCH 6.6 1123/1193] HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()	[Body]
[PATCH 6.6 1124/1193] net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()	[Body]
[PATCH 6.6 1125/1193] net/mlx5e: advertise MACsec offload only when supported	[Body]
[PATCH 6.6 1126/1193] net/sched: reject IDR error pointers when deleting actions	[Body]
[PATCH 6.6 1127/1193] net: arp: terminate device name before lookup	[Body]
[PATCH 6.6 1128/1193] net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read	[Body]
[PATCH 6.6 1129/1193] net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()	[Body]
[PATCH 6.6 1130/1193] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry	[Body]
[PATCH 6.6 1131/1193] net: atl1c: fix soft lockup on out-of-range tpd_cons read	[Body]
[PATCH 6.6 1132/1193] net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read	[Body]
[PATCH 6.6 1133/1193] net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist	[Body]
[PATCH 6.6 1134/1193] net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()	[Body]
[PATCH 6.6 1135/1193] netfilter: ip6t_rpfilter: reject routes without inet6_dev	[Body]
[PATCH 6.6 1136/1193] netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read	[Body]
[PATCH 6.6 1137/1193] nfc: fix use-after-free in nfc_get_local_general_bytes	[Body]
[PATCH 6.6 1138/1193] nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()	[Body]
[PATCH 6.6 1139/1193] nfc: port100: reject frames whose declared length exceeds the received data	[Body]
[PATCH 6.6 1140/1193] scsi: libiscsi_tcp: Check the data direction of a Data-In PDU	[Body]
[PATCH 6.6 1141/1193] pinctrl: single: free the IRQ on domain creation failure	[Body]
[PATCH 6.6 1142/1193] s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()	[Body]
[PATCH 6.6 1143/1193] RISC-V: KVM: Synchronize hrtimer callback during teardown	[Body]
[PATCH 6.6 1144/1193] RISC-V: KVM: Fix HSM hart status error propagation	[Body]
[PATCH 6.6 1145/1193] Bluetooth: hci_conn: fix CIS hold ownership on reuse	[Body]
[PATCH 6.6 1146/1193] Bluetooth: hci_sock: validate event length before filtering	[Body]
[PATCH 6.6 1147/1193] Bluetooth: hci_sock: reject out-of-range OCF values	[Body]
[PATCH 6.6 1148/1193] Bluetooth: ISO: balance the parent hold in hci_bind_bis()	[Body]
[PATCH 6.6 1149/1193] Bluetooth: L2CAP: validate frame length before control and FCS access	[Body]
[PATCH 6.6 1150/1193] Bluetooth: mgmt: fix race in read_unconf_index_list()	[Body]
[PATCH 6.6 1151/1193] Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO	[Body]
[PATCH 6.6 1152/1193] smb: client: fix create context out-of-bounds reads	[Body]
[PATCH 6.6 1153/1193] smb: client: validate POSIX create context length	[Body]
[PATCH 6.6 1154/1193] xfs: fix blockgc group quota scanning when usrquota isnt enforced	[Body]
[PATCH 6.6 1155/1193] bpf: Fail verification for sign-extension of packet data/data_end/data_meta	[Body]
[PATCH 6.6 1156/1193] bpf: Defer work in bpf_timer_cancel_and_free	[Body]
[PATCH 6.6 1157/1193] cxl/mem: Fix no cxl_nvd during pmem region auto-assembling	[Body]
[PATCH 6.6 1158/1193] net: tls: fix silent data drop under pipe back-pressure	[Body]
[PATCH 6.6 1159/1193] wifi: ath12k: fix kernel crash during resume	[Body]
[PATCH 6.6 1160/1193] wifi: ath12k: check M3 buffer size as well whey trying to reuse it	[Body]
[PATCH 6.6 1161/1193] drm/amd/display: Add a dc_state NULL check in dc_state_release	[Body]
[PATCH 6.6 1162/1193] drm/amd/display: Ensure array index tg_inst wont be -1	[Body]
[PATCH 6.6 1163/1193] drm/amd/display: Check null pointers before using them	[Body]
[PATCH 6.6 1164/1193] drm/amd/display: Validate function returns	[Body]
[PATCH 6.6 1165/1193] drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()	[Body]
[PATCH 6.6 1166/1193] perf test: Change all remaining #!/bin/sh to #!/bin/bash	[Body]
[PATCH 6.6 1167/1193] nvme-fabrics: use reserved tag for reg read/write command	[Body]
[PATCH 6.6 1168/1193] tools/thermal/tmon: Fix compilation warning for wrong format	[Body]
[PATCH 6.6 1169/1193] lan78xx: Enable 125 MHz CLK configuration for LAN7801 if NO EEPROM is detected	[Body]
[PATCH 6.6 1170/1193] lan78xx: Enable Auto Speed and Auto Duplex configuration for LAN7801 if NO EEPROM is detected	[Body]
[PATCH 6.6 1171/1193] drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()	[Body]
[PATCH 6.6 1172/1193] ALSA: hda: Fix missing pointer check in hda_component_manager_init function	[Body]
[PATCH 6.6 1173/1193] usb: xhci: add tracing for PORTSC register writes	[Body]
[PATCH 6.6 1174/1193] usb: xhci: add helper to read PORTSC register	[Body]
[PATCH 6.6 1175/1193] usb: xhci: add USB Port Register Set struct	[Body]
[PATCH 6.6 1176/1193] usb: xhci: implement USB Port Register Set struct	[Body]
[PATCH 6.6 1177/1193] usb: xhci: use cached HCSPARAMS1 value	[Body]
[PATCH 6.6 1178/1193] usb: xhci: simplify handling of Structural Parameters 1 values	[Body]
[PATCH 6.6 1179/1193] usb: xhci: bail out of setup if the controller is inaccessible	[Body]
[PATCH 6.6 1180/1193] gtp: serialize PDP context updates	[Body]
[PATCH 6.6 1181/1193] net/packet: defer vmalloc TX_RING free until skbs finish	[Body]
[PATCH 6.6 1182/1193] vlan: defer real device state propagation to netdev_work	[Body]
[PATCH 6.6 1183/1193] vlan: fix skb_under_panic and races when toggling HW VLAN offload	[Body]
[PATCH 6.6 1184/1193] crypto: virtio - Less function calls in __virtio_crypto_akcipher_do_req() after error detection	[Body]
[PATCH 6.6 1185/1193] crypto: virtio - Drop sign/verify operations	[Body]
[PATCH 6.6 1186/1193] crypto: virtio - Drop superfluous [as]kcipher_ctx pointer	[Body]
[PATCH 6.6 1187/1193] crypto: virtio - Drop superfluous [as]kcipher_req pointer	[Body]
[PATCH 6.6 1188/1193] crypto: virtio - bound the akcipher result length	[Body]
[PATCH 6.6 1189/1193] netfilter: nft_set_rbtree: Remove unused variable nft_net	[Body]
[PATCH 6.6 1190/1193] netfilter: nf_tables: place base_seq in struct net	[Body]
[PATCH 6.6 1191/1193] netfilter: nf_tables: dont queue packet path object notifications	[Body]
[PATCH 6.6 1192/1193] crypto: atmel-ecc - avoid stale fallback key after set_secret failure	[Body]
[PATCH 6.6 1193/1193] net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling	[Body]

ID (for dev)	c16b6889-e052-4ea6-be06-f7bcbdc82103
Status	skipped
Triaged	Skipped: failed to find a base commit: series does not apply [Log]
Execution Log	[Link]

Patches (1193)

Series Summary

Sessions

Session 2026-10-05