Syzbot CI

Subject	5.10.271-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-09-30 15:18:14 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 5.10 001/595] batman-adv: dat: atomically update mac addresses	[Body]
[PATCH 5.10 002/595] ALSA: usb-audio: Propagate write errors in generic mixer put callbacks	[Body]
[PATCH 5.10 003/595] ima: return error early if file xattr cannot be changed	[Body]
[PATCH 5.10 004/595] tee: optee: Allow MT_NORMAL_TAGGED shared memory	[Body]
[PATCH 5.10 005/595] PCI: Stop setting cached power state to unknown on unbind	[Body]
[PATCH 5.10 006/595] hfsplus: fix issue of direct writes beyond end-of-file	[Body]
[PATCH 5.10 007/595] wifi: mac80211: always allow transmitting null-data on TXQs	[Body]
[PATCH 5.10 008/595] kcsan: Silence -Wmaybe-uninitialized when calling __kcsan_check_access()	[Body]
[PATCH 5.10 009/595] bridge: Do not suppress ARP probes and DAD NS unconditionally	[Body]
[PATCH 5.10 010/595] soundwire: validate DT compatible before parsing it	[Body]
[PATCH 5.10 011/595] media: rc: mceusb: Add support for 04eb:e033	[Body]
[PATCH 5.10 012/595] thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()	[Body]
[PATCH 5.10 013/595] thunderbolt: Keep the domain reference while processing hotplug	[Body]
[PATCH 5.10 014/595] thunderbolt: Set tb->root_switch to NULL when domain is stopped	[Body]
[PATCH 5.10 015/595] media: dm1105: fix missing error check for dma_alloc_coherent	[Body]
[PATCH 5.10 016/595] net: dsa: mv88e6xxx: fix number of g1 interrupts for 6320 family	[Body]
[PATCH 5.10 017/595] net: dsa: mv88e6xxx: enable .rmu_disable() for 6320 family	[Body]
[PATCH 5.10 018/595] media: em28xx-video: fix missing res_free() on init_usb_xfer failure	[Body]
[PATCH 5.10 019/595] clk: renesas: cpg-mssr: Add number of clock cells check	[Body]
[PATCH 5.10 020/595] ASoC: ti: omap3pandora: update board check to use DT compatible	[Body]
[PATCH 5.10 021/595] mmc: davinci: avoid NULL deref of host->data in IRQ handler	[Body]
[PATCH 5.10 022/595] drm/amd/display: Fix CRC open failure during active rendering	[Body]
[PATCH 5.10 023/595] hfsplus: rework hfsplus_readdir() logic	[Body]
[PATCH 5.10 024/595] scsi: pm8001: Reject firmware update in fatal error state	[Body]
[PATCH 5.10 025/595] scsi: pm8001: Reject non-fatal dump when controller is crashed	[Body]
[PATCH 5.10 026/595] crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y	[Body]
[PATCH 5.10 027/595] crypto: atmel-ecc - add support for atecc608b	[Body]
[PATCH 5.10 028/595] media: imon: Add iMON VFD HID OEM v1.2 key mappings	[Body]
[PATCH 5.10 029/595] RDMA/mlx5: Use QP port when decoding responder CQEs	[Body]
[PATCH 5.10 030/595] mailbox: Make mbox_send_message() return error code when tx fails	[Body]
[PATCH 5.10 031/595] ALSA: usx2y: Drain pending US-428 pipe-4 output commands	[Body]
[PATCH 5.10 032/595] 9p: invalidate readdir buffer on seek	[Body]
[PATCH 5.10 033/595] arm64/daifflags: Make local_daif_*() helpers __always_inline	[Body]
[PATCH 5.10 034/595] firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size	[Body]
[PATCH 5.10 035/595] wifi: mac80211: dont call ieee80211_handle_reconfig_failure when not needed	[Body]
[PATCH 5.10 036/595] bitfield: wire __bf_shf to __builtin_ctzll	[Body]
[PATCH 5.10 037/595] net: usb: qmi_wwan: add MeiG SRM813Q	[Body]
[PATCH 5.10 038/595] net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()	[Body]
[PATCH 5.10 039/595] net/sched: sch_drr: make cl->quantum lockless	[Body]
[PATCH 5.10 040/595] net/rds: Dont sleep inside rds_ib_conn_path_shutdown	[Body]
[PATCH 5.10 041/595] befs: handle set_blocksize failures	[Body]
[PATCH 5.10 042/595] affs: handle set_blocksize failures	[Body]
[PATCH 5.10 043/595] bfs: handle set_blocksize failures	[Body]
[PATCH 5.10 044/595] minix: handle set_blocksize failures	[Body]
[PATCH 5.10 045/595] qnx4: handle set_blocksize failures	[Body]
[PATCH 5.10 046/595] jfs: handle set_blocksize failures	[Body]
[PATCH 5.10 047/595] hpfs: handle set_blocksize failures	[Body]
[PATCH 5.10 048/595] omfs: handle set_blocksize failures	[Body]
[PATCH 5.10 049/595] isofs: handle set_blocksize failures	[Body]
[PATCH 5.10 050/595] usbip: vhci_hcd: fix NULL deref in status_show_vhci	[Body]
[PATCH 5.10 051/595] usb: core: hcd: fix possible deadlock in rh control transfers	[Body]
[PATCH 5.10 052/595] usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log	[Body]
[PATCH 5.10 053/595] serial: 8250: fix possible ISR soft lockup	[Body]
[PATCH 5.10 054/595] usb: host: add ARCH_AIROHA in XHCI MTK dependency	[Body]
[PATCH 5.10 055/595] char/nvram: Remove redundant nvram_mutex	[Body]
[PATCH 5.10 056/595] netlabel: fix IPv6 unlabeled address add error handling	[Body]
[PATCH 5.10 057/595] rds: filter RDS_INFO_* getsockopt by callers netns	[Body]
[PATCH 5.10 058/595] rds: annotate data-race around rs_seen_congestion	[Body]
[PATCH 5.10 059/595] s390/zcore: Removed unused variables	[Body]
[PATCH 5.10 060/595] clk: socfpga: agilex: implement l3_main_free_clk	[Body]
[PATCH 5.10 061/595] thermal/drivers/tegra/soctherma: Switch to devm cooling device registration	[Body]
[PATCH 5.10 062/595] drm/panel: simple: Add AM-1280800W8TZQW-T00H	[Body]
[PATCH 5.10 063/595] mips: cps: Assemble jr.hb with an R2 ISA level	[Body]
[PATCH 5.10 064/595] iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind	[Body]
[PATCH 5.10 065/595] irqchip/gic-v4: Dont advertise VLPIs if no ITS is probed	[Body]
[PATCH 5.10 066/595] ALSA: usb-audio: Add quirk for Novation Mininova	[Body]
[PATCH 5.10 067/595] ipv6: addrconf: fix temp address generation after prefix deprecation	[Body]
[PATCH 5.10 068/595] drm/amd/pm/si: Fix updating clock limits from power states	[Body]
[PATCH 5.10 069/595] ACPICA: Fix condition check in acpi_ps_parse_loop()	[Body]
[PATCH 5.10 070/595] ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()	[Body]
[PATCH 5.10 071/595] ACPICA: add boundary checks in acpi_ps_get_next_field()	[Body]
[PATCH 5.10 072/595] ACPICA: validate byte_count in acpi_ps_get_next_package_length()	[Body]
[PATCH 5.10 073/595] ACPICA: Prevent adding invalid references	[Body]
[PATCH 5.10 074/595] ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)	[Body]
[PATCH 5.10 075/595] ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg()	[Body]
[PATCH 5.10 076/595] ACPICA: validate handler object type in two places	[Body]
[PATCH 5.10 077/595] ACPICA: Add package limit checks in parser functions	[Body]
[PATCH 5.10 078/595] ACPICA: Add validation for node in acpi_ns_build_normalized_path()	[Body]
[PATCH 5.10 079/595] ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()	[Body]
[PATCH 5.10 080/595] ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()	[Body]
[PATCH 5.10 081/595] ACPICA: add boundary checks in two places	[Body]
[PATCH 5.10 082/595] hfs: rework hfsplus_readdir() logic	[Body]
[PATCH 5.10 083/595] scripts: modpost: detect and report truncated buf_printf() output	[Body]
[PATCH 5.10 084/595] ASoC: Intel: catpt: Complete coredump handling	[Body]
[PATCH 5.10 085/595] soundwire: only handle alert events when the peripheral is attached	[Body]
[PATCH 5.10 086/595] mmc: davinci: fix mmc_add_host order in probe	[Body]
[PATCH 5.10 087/595] perf/ftrace: Fix WARNING in __unregister_ftrace_function	[Body]
[PATCH 5.10 088/595] iio: accel: mma8452: switch to non-devm request_threaded_irq()	[Body]
[PATCH 5.10 089/595] net: ibm: emac: Reserve VLAN header in MJS limit	[Body]
[PATCH 5.10 090/595] ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive	[Body]
[PATCH 5.10 091/595] ata: ahci: fail probe if BAR too small for claimed ports	[Body]
[PATCH 5.10 092/595] net: qrtr: fix node refcount leak on ctrl packet alloc failure	[Body]
[PATCH 5.10 093/595] iommu/rockchip: disable fetch dte time limit	[Body]
[PATCH 5.10 094/595] ASoC: codecs: rk3328: Use managed GPIO and clock helpers	[Body]
[PATCH 5.10 095/595] ALSA: seq: oss: Reject reads that cannot fit the next event	[Body]
[PATCH 5.10 096/595] net: dsa: sja1105: flower: reject cross-chip redirect	[Body]
[PATCH 5.10 097/595] xhci: Prevent queuing new commands if xhci is inaccessible	[Body]
[PATCH 5.10 098/595] clk: keystone: dont cache clock rate	[Body]
[PATCH 5.10 099/595] ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP	[Body]
[PATCH 5.10 100/595] ipmi: si: Use platform_get_irq_optional() to retrieve interrupt	[Body]
[PATCH 5.10 101/595] wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications	[Body]
[PATCH 5.10 102/595] RDMA/mlx5: Fix state and counter desync on loopback enable failure	[Body]
[PATCH 5.10 103/595] bpf: NUL-terminate replaced sysctl value	[Body]
[PATCH 5.10 104/595] net: cpsw_new: unregister devlink on port registration failure	[Body]
[PATCH 5.10 105/595] hsr: broadcast netlink notifications in the devices net namespace	[Body]
[PATCH 5.10 106/595] ALSA: es18xx: check control allocation before private data setup	[Body]
[PATCH 5.10 107/595] netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()	[Body]
[PATCH 5.10 108/595] btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()	[Body]
[PATCH 5.10 109/595] xprtrdma: Add request-pool slack for delayed recycling	[Body]
[PATCH 5.10 110/595] configfs_depend_prep(): pass configfs_dirent instead of dentry	[Body]
[PATCH 5.10 111/595] net: ibm: emac: mal: fix potential system hang in mal_remove()	[Body]
[PATCH 5.10 112/595] platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table	[Body]
[PATCH 5.10 113/595] wifi: mt76: transform aspm_conf for pci_disable_link_state	[Body]
[PATCH 5.10 114/595] hwmon: (adt7462) Add of_match_table to support devicetree	[Body]
[PATCH 5.10 115/595] ata: libata-pmp: add JMicron JMS562 quirk	[Body]
[PATCH 5.10 116/595] platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table	[Body]
[PATCH 5.10 117/595] sctp: Unwind address notifier registration on failure	[Body]
[PATCH 5.10 118/595] PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems	[Body]
[PATCH 5.10 119/595] hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i	[Body]
[PATCH 5.10 120/595] Bluetooth: L2CAP: validate connectionless PSM length	[Body]
[PATCH 5.10 121/595] ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt	[Body]
[PATCH 5.10 122/595] ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence	[Body]
[PATCH 5.10 123/595] ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure	[Body]
[PATCH 5.10 124/595] sparc64: uprobes: add missing break	[Body]
[PATCH 5.10 125/595] net: stmmac: xgmac2: disable RBUE in default RX interrupt mask	[Body]
[PATCH 5.10 126/595] vsock: use sk_acceptq_is_full() helper in all transports	[Body]
[PATCH 5.10 127/595] e1000e: limit endianness conversion to boundary words	[Body]
[PATCH 5.10 128/595] net/sched: act_csum: dont mangle UDP tunnel GSO packets	[Body]
[PATCH 5.10 129/595] sparc: Disable compat support with LLD	[Body]
[PATCH 5.10 130/595] fuse: set ff->flock only on success	[Body]
[PATCH 5.10 131/595] scsi: bfa: Reduce kernel stack usage in bfa_fcs_lport_fdmi_build_portattr_block()	[Body]
[PATCH 5.10 132/595] gpio: pisosr: Read "ngpios" as u32	[Body]
[PATCH 5.10 133/595] ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10	[Body]
[PATCH 5.10 134/595] leds: uleds: Return -EFAULT on copy_to_user() failure	[Body]
[PATCH 5.10 135/595] leds: pca9532: Dont stop blinking for non-zero brightness	[Body]
[PATCH 5.10 136/595] ALSA: usb-audio: Add quirk for YAMAHA CDS3000	[Body]
[PATCH 5.10 137/595] PCI: iproc: Protect root bus removal with rescan lock	[Body]
[PATCH 5.10 138/595] PCI: altera: Protect root bus removal with rescan lock	[Body]
[PATCH 5.10 139/595] PCI: rockchip: Protect root bus removal with rescan lock	[Body]
[PATCH 5.10 140/595] PCI: mediatek: Protect root bus removal with rescan lock	[Body]
[PATCH 5.10 141/595] md/raid5: let stripe batch bm_seq comparison wrap-safe	[Body]
[PATCH 5.10 142/595] f2fs: validate inline dentry name lengths before conversion	[Body]
[PATCH 5.10 143/595] rtc: aspeed: add AST2700 compatible	[Body]
[PATCH 5.10 144/595] PCI/sysfs: Use kstrtobool() to parse the ROM attribute input	[Body]
[PATCH 5.10 145/595] net: au1000: move free_irq out of the close-time spinlocked section	[Body]
[PATCH 5.10 146/595] rtc: bq32000: add delay between RTC reads	[Body]
[PATCH 5.10 147/595] fbdev: pm2fb: unwind WC setup on probe failure	[Body]
[PATCH 5.10 148/595] drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend	[Body]
[PATCH 5.10 149/595] netfilter: nf_conntrack_expect: zero at allocation time	[Body]
[PATCH 5.10 150/595] drm/arm/komeda: fix error handling for clk_prepare_enable() and callers	[Body]
[PATCH 5.10 151/595] xen/front-pgdir-shbuf: free grant reference head on errors	[Body]
[PATCH 5.10 152/595] freevxfs: dont BUG() on unknown typed-extent type	[Body]
[PATCH 5.10 153/595] xen/gntalloc: validate grant count before allocation	[Body]
[PATCH 5.10 154/595] ALSA: usb-audio: caiaq: validate EP1 reply lengths	[Body]
[PATCH 5.10 155/595] wifi: ralink: RT2X00: init EEPROM properly	[Body]
[PATCH 5.10 156/595] wifi: mac80211: validate deauth frame length before reason access	[Body]
[PATCH 5.10 157/595] wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers	[Body]
[PATCH 5.10 158/595] wifi: libertas: reject short monitor TX frames	[Body]
[PATCH 5.10 159/595] gpio: dwapb: Mask interrupts at hardware initialization	[Body]
[PATCH 5.10 160/595] wifi: libipw: fix key index receive bound checks	[Body]
[PATCH 5.10 161/595] netfilter: ipset: mark the rcu locked areas properly	[Body]
[PATCH 5.10 162/595] wifi: rsi: validate beacon length before fixed buffer copy	[Body]
[PATCH 5.10 163/595] btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()	[Body]
[PATCH 5.10 164/595] btrfs: fix reloc root cleanup in merge_reloc_roots()	[Body]
[PATCH 5.10 165/595] wifi: iwlwifi: mvm: fix an off-by-1 boundary check	[Body]
[PATCH 5.10 166/595] blk-cgroup: fix leaks and online flag on radix_tree_insert failure	[Body]
[PATCH 5.10 167/595] arm64: fixmap: Allow 256K early_ioremap() at any offset	[Body]
[PATCH 5.10 168/595] arm64: kprobes: Allow reentering kprobes while single-stepping	[Body]
[PATCH 5.10 169/595] drm/amd/pm/si: Dont schedule thermal work when queue isnt initialized	[Body]
[PATCH 5.10 170/595] wifi: iwlwifi: bound aligned TLV advance in FW parser	[Body]
[PATCH 5.10 171/595] wifi: mwifiex: replace one-element arrays with flexible array members	[Body]
[PATCH 5.10 172/595] wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO	[Body]
[PATCH 5.10 173/595] drm/gma500: return errors from Oaktrail HDMI I2C reads	[Body]
[PATCH 5.10 174/595] phonet: check register_netdevice_notifier() error in phonet_device_init()	[Body]
[PATCH 5.10 175/595] ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx	[Body]
[PATCH 5.10 176/595] ice: pass the return value of skb_checksum_help()	[Body]
[PATCH 5.10 177/595] powerpc/pseries: Ensure vpa,slb_shadow & dtl are unregistered during crash	[Body]
[PATCH 5.10 178/595] cifs: validate idmap key payload length	[Body]
[PATCH 5.10 179/595] wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()	[Body]
[PATCH 5.10 180/595] Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame	[Body]
[PATCH 5.10 181/595] ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision)	[Body]
[PATCH 5.10 182/595] vhost-scsi: flush backend after device ioctls	[Body]
[PATCH 5.10 183/595] ASoC: rt5645: Perform the initial jack detect at probe	[Body]
[PATCH 5.10 184/595] clk: at91: pmc: #undef field_{get,prep}() before definition	[Body]
[PATCH 5.10 185/595] ppp_async: drop the errored frame instead of resetting its headroom	[Body]
[PATCH 5.10 186/595] libceph: Reject monmaps advertising zero monitors	[Body]
[PATCH 5.10 187/595] Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU"	[Body]
[PATCH 5.10 188/595] Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU"	[Body]
[PATCH 5.10 189/595] ARM: 9484/1: enable interrupts when unhandled user faults are triggered	[Body]
[PATCH 5.10 190/595] EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation	[Body]
[PATCH 5.10 191/595] drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()	[Body]
[PATCH 5.10 192/595] selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter	[Body]
[PATCH 5.10 193/595] net/sched: act_api: budget all shared attributes in notify skbs	[Body]
[PATCH 5.10 194/595] net/sched: act_api: size the RTM_GETACTION reply from the actions	[Body]
[PATCH 5.10 195/595] sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START	[Body]
[PATCH 5.10 196/595] sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration	[Body]
[PATCH 5.10 197/595] net: amd-xgbe: discard rx packets with bad FCS	[Body]
[PATCH 5.10 198/595] OPP: of: Fix potential multiplication overflow when calculating freq	[Body]
[PATCH 5.10 199/595] Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan	[Body]
[PATCH 5.10 200/595] Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM	[Body]
[PATCH 5.10 201/595] Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout()	[Body]
[PATCH 5.10 202/595] ASoC: ab8500: Reset the audio block before configuring it	[Body]
[PATCH 5.10 203/595] ASoC: ab8500: Repair the DAPM capture graph	[Body]
[PATCH 5.10 204/595] ASoC: ab8500: Update to modern clocking terminology	[Body]
[PATCH 5.10 205/595] ASoC: ab8500: Correct digital interface format setup	[Body]
[PATCH 5.10 206/595] ASoC: ab8500: Validate and program TDM slots correctly	[Body]
[PATCH 5.10 207/595] tty: make tty_ldisc_ops::hangup return void	[Body]
[PATCH 5.10 208/595] ppp: ppp_async: simplify tty disc_data access	[Body]
[PATCH 5.10 209/595] ipv6: sr: restore network header before routing and forwarding	[Body]
[PATCH 5.10 210/595] af_packet: Dont cast tpacket_hdr.tp_len to int in tpacket_parse_header().	[Body]
[PATCH 5.10 211/595] staging: fbtft: make dirty_lock IRQ-safe	[Body]
[PATCH 5.10 212/595] ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits	[Body]
[PATCH 5.10 213/595] btrfs: detach failed sprout device from transaction update list	[Body]
[PATCH 5.10 214/595] ASoC: ux500: Fix MSP stream lifecycle handling	[Body]
[PATCH 5.10 215/595] ASoC: ux500: remove platform_data support	[Body]
[PATCH 5.10 216/595] ASoC: ux500: Propagate MSP setup errors	[Body]
[PATCH 5.10 217/595] ASoC: ux500: Correct MSP frame and bit clock setup	[Body]
[PATCH 5.10 218/595] ASoC: ux500: Validate MSP DAI configuration	[Body]
[PATCH 5.10 219/595] ASoC: ux500: remove stedma40 references	[Body]
[PATCH 5.10 220/595] ASoC: ux500: Request the MSP MMIO resource	[Body]
[PATCH 5.10 221/595] ASoC: ux500: Program the MSP FIFO watermarks	[Body]
[PATCH 5.10 222/595] btrfs: return an error from btrfs_record_root_in_trans	[Body]
[PATCH 5.10 223/595] btrfs: do not force reloc root creation during qgroup_account_snapshot()	[Body]
[PATCH 5.10 224/595] ipvs: fix reversed sequence option serialization	[Body]
[PATCH 5.10 225/595] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()	[Body]
[PATCH 5.10 226/595] tracing/probes: Fix use-after-free on field name/type of events with multiple probes	[Body]
[PATCH 5.10 227/595] bonding: do not clear curr_active_slave prematurely when releasing all slaves	[Body]
[PATCH 5.10 228/595] net/rds: use wq_has_sleeper() in release_in_xmit()	[Body]
[PATCH 5.10 229/595] net/rds: use clear_bit_unlock() in release_refill()	[Body]
[PATCH 5.10 230/595] net/rds: clear cp_flags bits individually in rds_conn_path_reset()	[Body]
[PATCH 5.10 231/595] net/rds: tcp: dont force RDS_CONN_RESETTING over a concurrent shutdown	[Body]
[PATCH 5.10 232/595] net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()	[Body]
[PATCH 5.10 233/595] net/rds: acquire the fastpath locks in rds_conn_shutdown()	[Body]
[PATCH 5.10 234/595] net/rds: dont let rds_conn_shutdown() consume a concurrent drop	[Body]
[PATCH 5.10 235/595] net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset	[Body]
[PATCH 5.10 236/595] ALSA: caiaq: Fix potential double-free at error path	[Body]
[PATCH 5.10 237/595] bpf: Fix NULL-ptr-deref when showing a void BTF type	[Body]
[PATCH 5.10 238/595] bpf: Fix NULL-ptr-deref in btf_var_show()	[Body]
[PATCH 5.10 239/595] bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit()	[Body]
[PATCH 5.10 240/595] net: dsa: bcm_sf2: bound the CFP rule dump by the callers buffer size	[Body]
[PATCH 5.10 241/595] net: dsa: mv88e6xxx: bound the policy rule dump by the callers buffer size	[Body]
[PATCH 5.10 242/595] net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow	[Body]
[PATCH 5.10 243/595] vxlan: reject dynamic fdb entries that reference a nexthop id	[Body]
[PATCH 5.10 244/595] net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations	[Body]
[PATCH 5.10 245/595] powerpc/kexec_file: Use inclusive range checks in add_usable_mem()	[Body]
[PATCH 5.10 246/595] net/mlx5e: Fix setting RS FEC after remapping	[Body]
[PATCH 5.10 247/595] net/mlx5e: Fix ETS zero BW reporting when one TC holds 100%	[Body]
[PATCH 5.10 248/595] net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put	[Body]
[PATCH 5.10 249/595] net_sched: sch_fq_pie: implement lockless fq_pie_dump()	[Body]
[PATCH 5.10 250/595] net/sched: fq_pie: clamp quantum in change path	[Body]
[PATCH 5.10 251/595] net/sched: sfq: clamp quantum in change path	[Body]
[PATCH 5.10 252/595] net/sched: hhf: clamp quantum in change and init paths	[Body]
[PATCH 5.10 253/595] net/sched: pie: clamp psched_mtu in pie_drop_early	[Body]
[PATCH 5.10 254/595] net/sched: drr: clamp quantum in change class	[Body]
[PATCH 5.10 255/595] net/sched: ets: clamp quantum in parse and fallback paths	[Body]
[PATCH 5.10 256/595] ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev	[Body]
[PATCH 5.10 257/595] ASoC: bcm: bcm63xx: Publish the OF module aliases	[Body]
[PATCH 5.10 258/595] ASoC: Intel: SST: Publish the PCI module aliases	[Body]
[PATCH 5.10 259/595] netfilter: nfnetlink_log: cope with concurrent instance destruction	[Body]
[PATCH 5.10 260/595] netfilter: ip6_tables: set F_PROTO when proto value is nonzero	[Body]
[PATCH 5.10 261/595] ASoC: mt6351: Publish the OF module alias	[Body]
[PATCH 5.10 262/595] virtio-console: call scheduler when we free unused buffs	[Body]
[PATCH 5.10 263/595] virtio_console: do not free control-out buffers on remove	[Body]
[PATCH 5.10 264/595] vhost-vdpa: dont install the eventfd_ctx_fdget() error in config_ctx	[Body]
[PATCH 5.10 265/595] virtio-pci: return IRQ_HANDLED after non-zero ISR	[Body]
[PATCH 5.10 266/595] net: ethernet: cortina: Fix budget accounting	[Body]
[PATCH 5.10 267/595] net: ethernet: cortina: Finish RX updates before NAPI completion	[Body]
[PATCH 5.10 268/595] net: ethernet: cortina: Count dropped frames as NAPI work	[Body]
[PATCH 5.10 269/595] net: ethernet: cortina: No mapping is a dropped rx	[Body]
[PATCH 5.10 270/595] net: ethernet: cortina: Count RX drops once per frame	[Body]
[PATCH 5.10 271/595] net: ethernet: cortina: Count RX descriptors for freeq refill	[Body]
[PATCH 5.10 272/595] hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown()	[Body]
[PATCH 5.10 273/595] hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors	[Body]
[PATCH 5.10 274/595] selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value	[Body]
[PATCH 5.10 275/595] net/sched: cls_route: free emptied bucket on filter move	[Body]
[PATCH 5.10 276/595] net/sched: cls_api: Dont replay RTM_GETCHAIN in tc_ctl_chain().	[Body]
[PATCH 5.10 277/595] net: sun4i-emac: fix missing of_node_put() for phy_node	[Body]
[PATCH 5.10 278/595] net: hinic: fix mailbox segment buffer overflow	[Body]
[PATCH 5.10 279/595] net/rds: Pass a pointer to virt_to_page()	[Body]
[PATCH 5.10 280/595] net/rds: fix tcp stream corruption with large pages	[Body]
[PATCH 5.10 281/595] sunvdc: unmap LDC cookies when the descriptor send fails	[Body]
[PATCH 5.10 282/595] drm/amd/display: set new_stream to NULL after release	[Body]
[PATCH 5.10 283/595] Revert "bluetooth/l2cap: sync sock recv cb and release"	[Body]
[PATCH 5.10 284/595] scsi: target: iscsi: Handle abort for WRITE_PENDING cmds	[Body]
[PATCH 5.10 285/595] scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands	[Body]
[PATCH 5.10 286/595] macvlan: inherit needed_headroom and needed_tailroom from lowerdev	[Body]
[PATCH 5.10 287/595] powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver	[Body]
[PATCH 5.10 288/595] ipv6: fix fib6 walker UAF on seq stop	[Body]
[PATCH 5.10 289/595] ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough	[Body]
[PATCH 5.10 290/595] dm/amdgpu: fix malformed link_settings debugfs output	[Body]
[PATCH 5.10 291/595] watchdog: sunxi_wdt: preserve boot-enabled watchdog	[Body]
[PATCH 5.10 292/595] ufs: create the root dentry after loading cylinder metadata	[Body]
[PATCH 5.10 293/595] ufs: validate cylinder group metadata before caching it	[Body]
[PATCH 5.10 294/595] tunnels: Drop stale dst when building an ICMP error for PMTUD	[Body]
[PATCH 5.10 295/595] tracing: Free histogram the var ref when its initialization fails	[Body]
[PATCH 5.10 296/595] ASoC: sprd: validate compress buffer sizes against fixed allocations	[Body]
[PATCH 5.10 297/595] ASoC: sti: initialize IRQ lock before requesting IRQ	[Body]
[PATCH 5.10 298/595] cpufreq: zero-initialize policy cpumask before sysfs publication	[Body]
[PATCH 5.10 299/595] cpufreq: initialize policy rwsem before sysfs publication	[Body]
[PATCH 5.10 300/595] exec: do_close_on_exec() before taking exec_update_lock	[Body]
[PATCH 5.10 301/595] drm/i915: Fix memory leak in query_perf_config_list()	[Body]
[PATCH 5.10 302/595] net: hso: fix TIOCMIWAIT race	[Body]
[PATCH 5.10 303/595] net: mpls: clear inner_protocol when the last label is popped	[Body]
[PATCH 5.10 304/595] net: openvswitch: fix use-after-free of the flow table mask array	[Body]
[PATCH 5.10 305/595] netfilter: report NLM_F_DUMP_FILTERED when all is filtered out	[Body]
[PATCH 5.10 306/595] fbdev: vfb: defer cleanup until the last reference	[Body]
[PATCH 5.10 307/595] ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink	[Body]
[PATCH 5.10 308/595] ipv4: fib: bound automatic table ID allocation	[Body]
[PATCH 5.10 309/595] ipvs: reject invalid states in connection template sync records	[Body]
[PATCH 5.10 310/595] KVM: PPC: Book3S HV: Set irqfd->producer only on success	[Body]
[PATCH 5.10 311/595] s390/qeth: allow bridgeport queries despite OS_MISMATCH	[Body]
[PATCH 5.10 312/595] s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm	[Body]
[PATCH 5.10 313/595] hwmon: (applesmc) fix key backlight workqueue leak on register failure	[Body]
[PATCH 5.10 314/595] hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS	[Body]
[PATCH 5.10 315/595] media: hevc: add bounded tile-count helpers	[Body]
[PATCH 5.10 316/595] media: v4l2-h264: Fix memcmp() size in B1 reference list comparison	[Body]
[PATCH 5.10 317/595] bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()	[Body]
[PATCH 5.10 318/595] bnxt_en: Propagate RX ring init failures in bnxt_init_nic()	[Body]
[PATCH 5.10 319/595] mptcp: syncookies: remember the request backup flag	[Body]
[PATCH 5.10 320/595] ipv6: mcast: extend RCU protection in igmp6_send()	[Body]
[PATCH 5.10 321/595] ALSA: us122l: Prevent write upgrades for read mappings	[Body]
[PATCH 5.10 322/595] i2c: smbus: reject oversized block transfers in the common path	[Body]
[PATCH 5.10 323/595] net: appletalk: fix NULL pointer dereference in aarp_send_ddp()	[Body]
[PATCH 5.10 324/595] fou: Fix use-after-free in fou_create()	[Body]
[PATCH 5.10 325/595] crypto: sun8i-ss - Remove crypto_rng interface	[Body]
[PATCH 5.10 326/595] crypto: sun8i-ce - Remove crypto_rng interface	[Body]
[PATCH 5.10 327/595] netfilter: nft_set_pipapo_avx2: add missing vzeroupper	[Body]
[PATCH 5.10 328/595] mptcp: hold mptcp socket before calling tcp_done	[Body]
[PATCH 5.10 329/595] mptcp: avoid unneeded actions on subflow reset	[Body]
[PATCH 5.10 330/595] mptcp: close race between scheduler and state change	[Body]
[PATCH 5.10 331/595] iomap: iomap: fix memory corruption when recording errors during writeback	[Body]
[PATCH 5.10 332/595] Reapply "bluetooth/l2cap: sync sock recv cb and release"	[Body]
[PATCH 5.10 333/595] Bluetooth: L2CAP: Fix deadlock	[Body]
[PATCH 5.10 334/595] ARM: fix hash_name() fault	[Body]
[PATCH 5.10 335/595] ARM: fix branch predictor hardening	[Body]
[PATCH 5.10 336/595] ARM: ensure interrupts are enabled in __do_user_fault()	[Body]
[PATCH 5.10 337/595] sunvdc: fix -EIO issue due to lack of retries	[Body]
[PATCH 5.10 338/595] net/smc: check smcd_v2_ext_offset when receiving proposal msg	[Body]
[PATCH 5.10 339/595] net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg	[Body]
[PATCH 5.10 340/595] Revert "perf cs-etm: Avoid truncating AUX buffer sizes to int"	[Body]
[PATCH 5.10 341/595] Revert "perf cs-etm: Flush thread stacks after decoder reset"	[Body]
[PATCH 5.10 342/595] media: video-i2c: fix buffer queue ordering	[Body]
[PATCH 5.10 343/595] ipv6: Select best matching nexthop object in fib6_table_lookup()	[Body]
[PATCH 5.10 344/595] ipv6: Honor oif when choosing nexthop for locally generated traffic	[Body]
[PATCH 5.10 345/595] xfrm: propagate extack to all netlink doit handlers	[Body]
[PATCH 5.10 346/595] xfrm: add extack to verify_sec_ctx_len	[Body]
[PATCH 5.10 347/595] xfrm: add extack support to verify_newsa_info	[Body]
[PATCH 5.10 348/595] xfrm: add extack to verify_one_alg, verify_auth_trunc, verify_aead	[Body]
[PATCH 5.10 349/595] xfrm: avoid RCU warnings around the per-netns netlink socket	[Body]
[PATCH 5.10 350/595] xfrm: fix compat ALLOCSPI request use-after-free	[Body]
[PATCH 5.10 351/595] ARM: socfpga: select the PL310 erratum 753970 workaround	[Body]
[PATCH 5.10 352/595] RDMA/siw: Introduce siw_cep_set_free_and_put	[Body]
[PATCH 5.10 353/595] RDMA/siw: Cleanup siw_accept	[Body]
[PATCH 5.10 354/595] RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept	[Body]
[PATCH 5.10 355/595] firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS	[Body]
[PATCH 5.10 356/595] clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate	[Body]
[PATCH 5.10 357/595] IB/iser: Align coding style across driver	[Body]
[PATCH 5.10 358/595] IB/iser: Remove iser_reg_data_sg helper function	[Body]
[PATCH 5.10 359/595] IB/iser: Use iser_fr_desc as registration context	[Body]
[PATCH 5.10 360/595] IB/iser: reject a remote invalidation of an unregistered direction	[Body]
[PATCH 5.10 361/595] scsi: target: iscsi: Avoid in_interrupt() usage in iscsit_close_session()	[Body]
[PATCH 5.10 362/595] scsi: target: iscsi: Avoid in_interrupt() usage in iscsit_check_session_usage_count()	[Body]
[PATCH 5.10 363/595] scsi: target: iscsi: Redo iscsit_check_session_usage_count() return code	[Body]
[PATCH 5.10 364/595] scsi: target: iscsi: Rename iscsi_cmd to iscsit_cmd	[Body]
[PATCH 5.10 365/595] IB/isert: wait for deferred control PDU completions before releasing the connection	[Body]
[PATCH 5.10 366/595] RDMA/mad: Fix receive buffer leak when PKey enforcement fails	[Body]
[PATCH 5.10 367/595] dmaengine: sprd: Fix runtime PM reference leak in probe	[Body]
[PATCH 5.10 368/595] wifi: virt_wifi: free skb when disconnected	[Body]
[PATCH 5.10 369/595] wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path	[Body]
[PATCH 5.10 370/595] wifi: libipw: reject too-short beacon and probe responses	[Body]
[PATCH 5.10 371/595] wifi: libipw: reject too-short association responses	[Body]
[PATCH 5.10 372/595] IB/IPoIB: Avoid restoring OPER_UP after multicast flush	[Body]
[PATCH 5.10 373/595] wifi: cfg80211: check IP header size in cfg80211_classify8021d()	[Body]
[PATCH 5.10 374/595] soundwire: cadence_master: wait and cancel cdns->work before clock stop	[Body]
[PATCH 5.10 375/595] MIPS: Octeon: apply USB FDT fixups also when USB is modular	[Body]
[PATCH 5.10 376/595] dma-mapping: simplify dma_init_coherent_memory	[Body]
[PATCH 5.10 377/595] dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask	[Body]
[PATCH 5.10 378/595] dma-coherent: report a failed reserved memory assignment	[Body]
[PATCH 5.10 379/595] dmaengine: Fix device kref underflow in dma_chan_put()	[Body]
[PATCH 5.10 380/595] dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()	[Body]
[PATCH 5.10 381/595] dmaengine: wait for RCU readers before releasing dma_device	[Body]
[PATCH 5.10 382/595] wifi: cfg80211: only group hidden BSSes with beacon entries	[Body]
[PATCH 5.10 383/595] wifi: cfg80211: dont filter by BSS type when removing stale entries	[Body]
[PATCH 5.10 384/595] wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown	[Body]
[PATCH 5.10 385/595] wifi: mac80211: dont RCU-dereference the mesh CSA settings we just set	[Body]
[PATCH 5.10 386/595] wifi: mac80211: dont access the TSF of a down interface	[Body]
[PATCH 5.10 387/595] dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order	[Body]
[PATCH 5.10 388/595] dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA	[Body]
[PATCH 5.10 389/595] RDMA/siw: Bound fragmented header copies by the remaining length	[Body]
[PATCH 5.10 390/595] netfilter: nft_nat: fully initialise new_addr in netmap setup	[Body]
[PATCH 5.10 391/595] netfilter: flowtable: hold reference on ct until flow is released	[Body]
[PATCH 5.10 392/595] drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr	[Body]
[PATCH 5.10 393/595] keys: fix lost wakeup when reaping a dead key type	[Body]
[PATCH 5.10 394/595] ALSA: pcm: set timer->private_data before registering the PCM timer	[Body]
[PATCH 5.10 395/595] Input: trackpoint - fix the inertia attribute name in the ABI document	[Body]
[PATCH 5.10 396/595] wifi: virt_wifi: dont transfer operstate before register	[Body]
[PATCH 5.10 397/595] ALSA: hda: trace PCM open only after assigning a stream	[Body]
[PATCH 5.10 398/595] btrfs: tree-checker: print dev extent offset in error message	[Body]
[PATCH 5.10 399/595] seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation	[Body]
[PATCH 5.10 400/595] net: fddi: skfp: fix NULL deref when setting the MAC address while down	[Body]
[PATCH 5.10 401/595] wifi: brcmfmac: fix lost 802.1x TX completion wakeup	[Body]
[PATCH 5.10 402/595] tcp: Dont call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().	[Body]
[PATCH 5.10 403/595] tcp: do not let tcp_rmem be set below 4096	[Body]
[PATCH 5.10 404/595] dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()	[Body]
[PATCH 5.10 405/595] Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown	[Body]
[PATCH 5.10 406/595] drop_monitor: synchronize tracepoint unregistration on error path	[Body]
[PATCH 5.10 407/595] drop_monitor: fix out-of-bounds write in reset_per_cpu_data()	[Body]
[PATCH 5.10 408/595] KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure	[Body]
[PATCH 5.10 409/595] powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba	[Body]
[PATCH 5.10 410/595] ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments	[Body]
[PATCH 5.10 411/595] net: netsec: fix device_node reference leak on phy_np	[Body]
[PATCH 5.10 412/595] net: lock the socket in sock_gettstamp()	[Body]
[PATCH 5.10 413/595] net: ethernet: cortina: Ack RX overrun interrupt correctly	[Body]
[PATCH 5.10 414/595] net: mvpp2: prevent buffer overflow in page_pool allocation	[Body]
[PATCH 5.10 415/595] Input: eeti_ts - publish the OF module alias	[Body]
[PATCH 5.10 416/595] drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1	[Body]
[PATCH 5.10 417/595] Input: xpad - add support for Victrix Pro BFG Controller	[Body]
[PATCH 5.10 418/595] Input: xpad - fix PDP Marvel Xbox 360 controller	[Body]
[PATCH 5.10 419/595] ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY	[Body]
[PATCH 5.10 420/595] rds: ib: use rds_conn_drop() on protocol version mismatch	[Body]
[PATCH 5.10 421/595] tcp: exclude old ACKs from tcp fast path	[Body]
[PATCH 5.10 422/595] RDMA/ucma: Serialize join and leave on copy_to_user failure	[Body]
[PATCH 5.10 423/595] RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()	[Body]
[PATCH 5.10 424/595] openvswitch: avoid reallocating confirmed conntrack labels	[Body]
[PATCH 5.10 425/595] net: xfrm: reject unrepresentable espintcp transport headers	[Body]
[PATCH 5.10 426/595] arm64: percpu: Fix this_cpu_write() casting	[Body]
[PATCH 5.10 427/595] arm64: percpu: Fix this_cpu_and() mask generation	[Body]
[PATCH 5.10 428/595] Bluetooth: btusb: fix NXP IW610 composite device handling	[Body]
[PATCH 5.10 429/595] dmaengine: sun6i: fix non-atomic read of DMA position registers	[Body]
[PATCH 5.10 430/595] dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status	[Body]
[PATCH 5.10 431/595] dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()	[Body]
[PATCH 5.10 432/595] ipv6: xfrm: use full sockets in local error paths	[Body]
[PATCH 5.10 433/595] net/sched: hhf: cap hh_flows_limit at change time	[Body]
[PATCH 5.10 434/595] net/packet: clear RX owner on VNET header error	[Body]
[PATCH 5.10 435/595] net/packet: avoid truncating TPACKET_V3 private size	[Body]
[PATCH 5.10 436/595] keys: translate request_key_auth pid for the reading procfs instance	[Body]
[PATCH 5.10 437/595] i2c: at91: release DMA channels on remove and probe error	[Body]
[PATCH 5.10 438/595] i2c: imx: release DMA channels on probe error	[Body]
[PATCH 5.10 439/595] IB/mlx4: Fix use-after-free on pkey sysfs registration failure	[Body]
[PATCH 5.10 440/595] selinux: always fill AVC decision in avc_has_perm_noaudit()	[Body]
[PATCH 5.10 441/595] mmc: core: Fix OF node reference leak on card add failure	[Body]
[PATCH 5.10 442/595] mmc: mxcmmc: cancel data work and watchdog on remove	[Body]
[PATCH 5.10 443/595] mmc: sdhci-of-aspeed: Remove children before releasing SDC resources	[Body]
[PATCH 5.10 444/595] mmc: sdio_uart: fix xmit_fifo leak when the port table is full	[Body]
[PATCH 5.10 445/595] mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt	[Body]
[PATCH 5.10 446/595] mmc: spi: reset bytes_xfered before retrying CRC failures	[Body]
[PATCH 5.10 447/595] mmc: sdhci_am654: Reset command and data lines on failed tuning	[Body]
[PATCH 5.10 448/595] Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026	[Body]
[PATCH 5.10 449/595] Input: evdev - zero absinfo before partial copy in EVIOCSABS	[Body]
[PATCH 5.10 450/595] Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P	[Body]
[PATCH 5.10 451/595] Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()	[Body]
[PATCH 5.10 452/595] Input: soc_button_array - fix MS Surface Pro 11 probe failure	[Body]
[PATCH 5.10 453/595] Input: soc_button_array - check btns_desc->package.count	[Body]
[PATCH 5.10 454/595] Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722)	[Body]
[PATCH 5.10 455/595] Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound	[Body]
[PATCH 5.10 456/595] Input: zero ff_effect before compat copy in input_ff_effect_from_user	[Body]
[PATCH 5.10 457/595] hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove	[Body]
[PATCH 5.10 458/595] hwmon: (w83793) release probe data through kref	[Body]
[PATCH 5.10 459/595] watchdog: digicolor: Avoid division by zero	[Body]
[PATCH 5.10 460/595] watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init()	[Body]
[PATCH 5.10 461/595] wifi: brcmsmac: fix UAF in brcms_free_timer()	[Body]
[PATCH 5.10 462/595] wifi: iwlegacy: fix broadcast stations deallocation	[Body]
[PATCH 5.10 463/595] wifi: libertas_tf: fix UAF in lbtf_free_adapter()	[Body]
[PATCH 5.10 464/595] wifi: rsi: fix heap OOB write on key removal	[Body]
[PATCH 5.10 465/595] wifi: wlcore: release runtime PM ref on regdomain config failure	[Body]
[PATCH 5.10 466/595] wifi: wilc1000: fix out-of-bounds read in P2P public action frames	[Body]
[PATCH 5.10 467/595] wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()	[Body]
[PATCH 5.10 468/595] wifi: p54: validate curve data length in the calibration curve converters	[Body]
[PATCH 5.10 469/595] wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST	[Body]
[PATCH 5.10 470/595] wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length	[Body]
[PATCH 5.10 471/595] wifi: mwifiex: validate scan response extents	[Body]
[PATCH 5.10 472/595] wifi: mwifiex: validate action frame fixed fields	[Body]
[PATCH 5.10 473/595] wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver	[Body]
[PATCH 5.10 474/595] drm/msm/adreno: fix autosuspend cleanup during teardown	[Body]
[PATCH 5.10 475/595] drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure	[Body]
[PATCH 5.10 476/595] HID: logitech-hidpp: fix race condition when accessing stale stack pointer	[Body]
[PATCH 5.10 477/595] spi: zynqmp-gqspi: Use devm_spi_alloc_host()	[Body]
[PATCH 5.10 478/595] HID: hyperv: streamline driver probe to avoid devres issues	[Body]
[PATCH 5.10 479/595] SUNRPC: lock against ->sock changing during sysfs read	[Body]
[PATCH 5.10 480/595] KVM: s390: Fix IRQ injection with SIGP Stop and Store Status	[Body]
[PATCH 5.10 481/595] bpf: Fix bpf_skb_change_tail wrt csum partial skbs	[Body]
[PATCH 5.10 482/595] bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL	[Body]
[PATCH 5.10 483/595] selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc	[Body]
[PATCH 5.10 484/595] bpf: Fix out-of-bounds read of rtt_min in sock_ops	[Body]
[PATCH 5.10 485/595] squashfs: Add dictionary size range check to prevent shift-out-of-bounds	[Body]
[PATCH 5.10 486/595] Bluetooth: SMP: reject Security Request over BR/EDR	[Body]
[PATCH 5.10 487/595] s390/pci: expose UID uniqueness guarantee	[Body]
[PATCH 5.10 488/595] Documentation: s390: correct spelling	[Body]
[PATCH 5.10 489/595] docs: s390/pci: Improve and update PCI documentation	[Body]
[PATCH 5.10 490/595] s390/pci/docs: Fix sriov_numvfs attribute name	[Body]
[PATCH 5.10 491/595] fs: avoid repeated scans in evict_inodes()	[Body]
[PATCH 5.10 492/595] xsk: Use a 32-bit compare in xsk_map_gen_lookup	[Body]
[PATCH 5.10 493/595] netfilter: flowtable: allow unidirectional rules	[Body]
[PATCH 5.10 494/595] netfilter: flowtable: publish HW_DEAD after worker is done	[Body]
[PATCH 5.10 495/595] netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation	[Body]
[PATCH 5.10 496/595] netfilter: nfnetlink_queue: hold nfnl mutex in event notifier	[Body]
[PATCH 5.10 497/595] netfilter: nft_synproxy: use the family-aware checksum helper	[Body]
[PATCH 5.10 498/595] ipvs: revalidate ihl before icmp_send	[Body]
[PATCH 5.10 499/595] ocfs2: make ocfs2_calc_xattr_init() return void	[Body]
[PATCH 5.10 500/595] drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update	[Body]
[PATCH 5.10 501/595] drm/nouveau/clk: dont clobber reclock status when restoring volt/fan	[Body]
[PATCH 5.10 502/595] net/sched: act_ct: dont WARN on benign flow_offload_alloc() failure	[Body]
[PATCH 5.10 503/595] net: gue: reject invalid REMCSUM offsets	[Body]
[PATCH 5.10 504/595] ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().	[Body]
[PATCH 5.10 505/595] sctp: avoid livelock while updating retransmit path	[Body]
[PATCH 5.10 506/595] net: usb: catc: bound the RX packet length in catc_rx_done()	[Body]
[PATCH 5.10 507/595] net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget	[Body]
[PATCH 5.10 508/595] drm/virtio: fix object leak when drm_gem_handle_create() fails	[Body]
[PATCH 5.10 509/595] drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()	[Body]
[PATCH 5.10 510/595] Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough	[Body]
[PATCH 5.10 511/595] Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()	[Body]
[PATCH 5.10 512/595] net: usb: sr9700: include receive overhead in the length check	[Body]
[PATCH 5.10 513/595] tg3: clean up PHYLIB resources on probe failure	[Body]
[PATCH 5.10 514/595] net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error	[Body]
[PATCH 5.10 515/595] bpf: Fix bpf_sock context code generation	[Body]
[PATCH 5.10 516/595] net: stmmac: selftests: Support running selftests on DSA conduits	[Body]
[PATCH 5.10 517/595] net: stmmac: selftests: Check the dev->features for S-TAG offload testing	[Body]
[PATCH 5.10 518/595] net: stmmac: selftests: Capture all packets for vlan checks	[Body]
[PATCH 5.10 519/595] net: stmmac: Remove some unnecessary void pointers	[Body]
[PATCH 5.10 520/595] net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K	[Body]
[PATCH 5.10 521/595] nfc: nfcmrvl: validate helper command length before pull	[Body]
[PATCH 5.10 522/595] nfc: st21nfca: remove redundant assignment to variable i	[Body]
[PATCH 5.10 523/595] nfc: st21nfca: validate received frame size	[Body]
[PATCH 5.10 524/595] nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()	[Body]
[PATCH 5.10 525/595] nfc: llcp: Fix race condition in accept_queue lifecycle	[Body]
[PATCH 5.10 526/595] nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure	[Body]
[PATCH 5.10 527/595] nfc: st21nfca: validate ISO15693 inventory length	[Body]
[PATCH 5.10 528/595] nfc: llcp: fix -ENOMEM on connect with zero-length service name	[Body]
[PATCH 5.10 529/595] nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()	[Body]
[PATCH 5.10 530/595] nfc: llcp: fix slab-out-of-bounds reads when logging service names	[Body]
[PATCH 5.10 531/595] nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()	[Body]
[PATCH 5.10 532/595] flow_offload: rename offload functions with offload instead of flow	[Body]
[PATCH 5.10 533/595] hrtimers: Add missing hrtimer_init() trace points	[Body]
[PATCH 5.10 534/595] hrtimers: Introduce hrtimer_setup() to replace hrtimer_init()	[Body]
[PATCH 5.10 535/595] net/sched: act_gate: budget the per-entry list in get_fill_size	[Body]
[PATCH 5.10 536/595] net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()	[Body]
[PATCH 5.10 537/595] ip_gre: Reject enabling collect metadata through changelink	[Body]
[PATCH 5.10 538/595] vxlan: use one headroom snapshot for neighbour replies	[Body]
[PATCH 5.10 539/595] net: xps: reject an out of range traffic class	[Body]
[PATCH 5.10 540/595] tipc: Fix a data race on mon->peer_cnt in mon_timeout()	[Body]
[PATCH 5.10 541/595] llc: fix skb UAF and leaks on llc_mac_hdr_init() failure	[Body]
[PATCH 5.10 542/595] bridge: check llc_mac_hdr_init() return value in br_send_bpdu()	[Body]
[PATCH 5.10 543/595] net/sched: sch_teql: fix shadowed err in __teql_resolve()	[Body]
[PATCH 5.10 544/595] vlan: ensure sufficient headroom in vlan_dev_hard_header()	[Body]
[PATCH 5.10 545/595] autofs: fix sbi->pipe file reference leak in autofs_kill_sb()	[Body]
[PATCH 5.10 546/595] rculist: add list_splice_rcu() for private lists	[Body]
[PATCH 5.10 547/595] netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase	[Body]
[PATCH 5.10 548/595] net: add and use skb_unclone_keeptruesize() helper	[Body]
[PATCH 5.10 549/595] net: add skb_set_end_offset() helper	[Body]
[PATCH 5.10 550/595] net: preserve skb_end_offset() in skb_unclone_keeptruesize()	[Body]
[PATCH 5.10 551/595] x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11	[Body]
[PATCH 5.10 552/595] tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow	[Body]
[PATCH 5.10 553/595] sctp: discard the rest of the packet on a stale-cookie error	[Body]
[PATCH 5.10 554/595] af_packet: fix integer overflow in prb_calc_retire_blk_tmo()	[Body]
[PATCH 5.10 555/595] fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT	[Body]
[PATCH 5.10 556/595] workqueue: Fix NULL current_pwq deref in flush dependency check	[Body]
[PATCH 5.10 557/595] fsl/fman: Fix clk reference leak in read_dts_node()	[Body]
[PATCH 5.10 558/595] ipv6: do not let ipv6_find_hdr() return an offset past the packet end	[Body]
[PATCH 5.10 559/595] ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST	[Body]
[PATCH 5.10 560/595] gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()	[Body]
[PATCH 5.10 561/595] gpio: zynq: fix runtime PM leak on request error path	[Body]
[PATCH 5.10 562/595] llc: reserve device headroom for allocated frames	[Body]
[PATCH 5.10 563/595] rds: ib: Clear the sg list when mapping an MR fails	[Body]
[PATCH 5.10 564/595] drm/nouveau: fix autosuspend cleanup during teardown	[Body]
[PATCH 5.10 565/595] drm/nouveau: Fix bridge reference leak in nv1a_ram_new()	[Body]
[PATCH 5.10 566/595] drm/nouveau: fix double-free in nvif_vmm_dtor	[Body]
[PATCH 5.10 567/595] drm/nouveau: Fix gem reference leak in validate_init()	[Body]
[PATCH 5.10 568/595] HID: alps: fix use-after-free on input2 registration failure	[Body]
[PATCH 5.10 569/595] HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard	[Body]
[PATCH 5.10 570/595] HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()	[Body]
[PATCH 5.10 571/595] net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()	[Body]
[PATCH 5.10 572/595] net/sched: reject IDR error pointers when deleting actions	[Body]
[PATCH 5.10 573/595] net: arp: terminate device name before lookup	[Body]
[PATCH 5.10 574/595] net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read	[Body]
[PATCH 5.10 575/595] net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()	[Body]
[PATCH 5.10 576/595] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry	[Body]
[PATCH 5.10 577/595] net: atl1c: fix soft lockup on out-of-range tpd_cons read	[Body]
[PATCH 5.10 578/595] net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read	[Body]
[PATCH 5.10 579/595] net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist	[Body]
[PATCH 5.10 580/595] netfilter: ip6t_rpfilter: reject routes without inet6_dev	[Body]
[PATCH 5.10 581/595] netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read	[Body]
[PATCH 5.10 582/595] nfc: fix use-after-free in nfc_get_local_general_bytes	[Body]
[PATCH 5.10 583/595] nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()	[Body]
[PATCH 5.10 584/595] nfc: port100: reject frames whose declared length exceeds the received data	[Body]
[PATCH 5.10 585/595] scsi: libiscsi_tcp: Check the data direction of a Data-In PDU	[Body]
[PATCH 5.10 586/595] pinctrl: single: free the IRQ on domain creation failure	[Body]
[PATCH 5.10 587/595] s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()	[Body]
[PATCH 5.10 588/595] Bluetooth: hci_sock: validate event length before filtering	[Body]
[PATCH 5.10 589/595] Bluetooth: hci_sock: reject out-of-range OCF values	[Body]
[PATCH 5.10 590/595] Bluetooth: L2CAP: validate frame length before control and FCS access	[Body]
[PATCH 5.10 591/595] Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO	[Body]
[PATCH 5.10 592/595] lan78xx: Enable 125 MHz CLK configuration for LAN7801 if NO EEPROM is detected	[Body]
[PATCH 5.10 593/595] lan78xx: Enable Auto Speed and Auto Duplex configuration for LAN7801 if NO EEPROM is detected	[Body]
[PATCH 5.10 594/595] drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()	[Body]
[PATCH 5.10 595/595] can: ems_usb: validate CPC message lengths	[Body]

ID (for dev)	ea0962ad-ab7e-482a-a72e-6a477906fd4a
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	1797d8bf8d0c2e74defad605d14e3553d43a3caf [Config]		passed [Log]
[KASAN] Boot test: Base	1797d8bf8d0c2e74defad605d14e3553d43a3caf [Config]		passed [Log]
[KASAN] Build Patched		1797d8bf8d0c2e74defad605d14e3553d43a3caf [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		1797d8bf8d0c2e74defad605d14e3553d43a3caf [Config] [patched]	passed [Log]
[KASAN] Fuzz	1797d8bf8d0c2e74defad605d14e3553d43a3caf [Config]	1797d8bf8d0c2e74defad605d14e3553d43a3caf [Config] [patched]	passed [Log] [Artifacts]

Patches (595)

Series Summary

Sessions

Session 2026-09-30