[syzbot ci] Re: 6.18.61-rc1 review

[syzbot ci <syzbot+ci519750ac88bc3005@syzkaller.appspotmail.com>]

syzbot ci has tested the following series

[v1] 6.18.61-rc1 review
https://lore.kernel.org/all/20261104211043.516122098@linuxfoundation.org
* [PATCH 6.18 0001/1005] net: skbuff: propagate shared-frag marker in skb_zerocopy()
* [PATCH 6.18 0002/1005] ksmbd: wait for negotiation before receiving another PDU
* [PATCH 6.18 0003/1005] mm: vmscan: fix dirty folios throttling on cgroup v1 for MGLRU
* [PATCH 6.18 0004/1005] iio: hid-sensor: als: scale each channel individually
* [PATCH 6.18 0005/1005] platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0006/1005] kbuild: link-vmlinux.sh: improve detection of third pass requirement
* [PATCH 6.18 0007/1005] hwmon: (lm90) Rely on subsystem locking
* [PATCH 6.18 0008/1005] exec: cancel io_uring requests before de_thread()
* [PATCH 6.18 0009/1005] fork: move the coredump and exec checks into create_io_thread()
* [PATCH 6.18 0010/1005] fork: dont create io threads once PF_POSTCOREDUMP is set
* [PATCH 6.18 0011/1005] coredump: prevent TIF_NOTIFY_SIGNAL from interrupting coredumps
* [PATCH 6.18 0012/1005] net: bonding: use workqueue to make sure peer notify updated in lacp mode
* [PATCH 6.18 0013/1005] net: bonding: move bond_should_notify_peers, e.g. into rtnl lock block
* [PATCH 6.18 0014/1005] ALSA: line6: Clear prev_fbuf on capture buffer release
* [PATCH 6.18 0015/1005] drm/rockchip: dw_hdmi: Use resume_early pm ops for system suspend
* [PATCH 6.18 0016/1005] drm/virtio: abort virtqueue wait on device removal to avoid hung task
* [PATCH 6.18 0017/1005] drm/panel-edp: Add BOE NV116WH2-M30, BOE NT116WHM-N21, BOE NV116FH1-M31, BOE NV116FH1-M30
* [PATCH 6.18 0018/1005] drm/amdgpu/mes_v12_0: use mes schedule pipe for legacy queues on unified MES
* [PATCH 6.18 0019/1005] drm/amd/pm: Validate OD DPM triples before mutating tables
* [PATCH 6.18 0020/1005] drm/amdgpu: Gate debugfs MMIO access on kernel lockdown
* [PATCH 6.18 0021/1005] drm/amd/display: fix max dispclk_khz/dppclk_khz double 1000
* [PATCH 6.18 0022/1005] drm/radeon: avoid double free in r600 DPM cleanup
* [PATCH 6.18 0023/1005] drm/amdgpu: add buf length check
* [PATCH 6.18 0024/1005] drm/amdgpu: add bounds check to prevent array overflow
* [PATCH 6.18 0025/1005] gpio: pca9570: Use I2C match data
* [PATCH 6.18 0026/1005] selftests/filesystems/overlayfs: fix set_layers_via_fds link error
* [PATCH 6.18 0027/1005] HID: wacom: avoid copying Bluetooth input reports
* [PATCH 6.18 0028/1005] w1: ds2482: add OF device match table
* [PATCH 6.18 0029/1005] ALSA: hda: Add support for Hygon family 18h model 5h HD-Audio
* [PATCH 6.18 0030/1005] ALSA: hda: Force resume if acomp notified during system suspend
* [PATCH 6.18 0031/1005] media: cec: stm32: return an error when log-address wait times out
* [PATCH 6.18 0032/1005] ALSA: usb-audio: Release components on probe errors
* [PATCH 6.18 0033/1005] irqdomain: Plug leak in irq_domain_alloc_irqs_locked() error path
* [PATCH 6.18 0034/1005] ASoC: sma1303: remove fault-check sysfs group on remove
* [PATCH 6.18 0035/1005] spi: qpic-snand: free OOB buffer with ECC context
* [PATCH 6.18 0036/1005] clk: zynq: handle kasprintf() failure in periph_clk registration
* [PATCH 6.18 0037/1005] ASoC: tlv320aic26: remove keyclick sysfs file
* [PATCH 6.18 0038/1005] ASoC: hdac_hdmi: Fix resource cleanup on probe failure
* [PATCH 6.18 0039/1005] regmap: maple: Workaround for another false-positive compiler warning
* [PATCH 6.18 0040/1005] selftests/cgroup: Adjust cpu test duration based on HZ
* [PATCH 6.18 0041/1005] ARM: OMAP2+: Add CFI type for omap4_finish_suspend
* [PATCH 6.18 0042/1005] iio: accel: fxls8962af: clamp the device-reported FIFO sample count
* [PATCH 6.18 0043/1005] perf/x86/intel: Fallback to sw branch type decoding if no hw decoding
* [PATCH 6.18 0044/1005] drm/sysfb: simpledrm: Validate mmap size against framebuffer size
* [PATCH 6.18 0045/1005] perf/core: Fix kernel register info leak via hardware skid
* [PATCH 6.18 0046/1005] fat: reject name longer than NAME_MAX in msdos_format_name()
* [PATCH 6.18 0047/1005] perf/x86/intel/uncore: Fix PCI PMU cleanup on setup failure
* [PATCH 6.18 0048/1005] fs/namespace: notify pollers of legacy propagation changes
* [PATCH 6.18 0049/1005] spi: bcm-qspi: return error from failed controller suspend
* [PATCH 6.18 0050/1005] spi: bcm63xx: return error from failed controller suspend
* [PATCH 6.18 0051/1005] spi: bcm63xx-hsspi: return error from failed controller suspend
* [PATCH 6.18 0052/1005] drm/panel-edp: Add BOE NE160QDM-NY1 panel
* [PATCH 6.18 0053/1005] spi: fsl-dspi: clean up after failed suspend and resume
* [PATCH 6.18 0054/1005] spi: nxp-fspi: disable runtime PM on probe failures
* [PATCH 6.18 0055/1005] spi: bcmbca-hsspi: return error from failed controller suspend
* [PATCH 6.18 0056/1005] memory: stm32_omm: initialize ret in stm32_omm_set_amcr
* [PATCH 6.18 0057/1005] wifi: ath12k: avoid setting 320MHz support on non 6GHz band
* [PATCH 6.18 0058/1005] i2c: amd-asf: Validate firmware-reported length
* [PATCH 6.18 0059/1005] netpoll: do not warn when the best-effort pool refill fails
* [PATCH 6.18 0060/1005] i2c: acpi: Force ELAN1300 touchpads to 100 kHz
* [PATCH 6.18 0061/1005] drm/amdgpu: Add checks to vbios fetch through ATRM
* [PATCH 6.18 0062/1005] drm/amdgpu: Validate ATPX buffer length before use
* [PATCH 6.18 0063/1005] drm/amdgpu: Fix kobject cleanup in xcp sysfs
* [PATCH 6.18 0064/1005] drm/amdgpu: Validate ATIF buffer length before use
* [PATCH 6.18 0065/1005] drm/amdgpu: validate XCP topology counts before division
* [PATCH 6.18 0066/1005] drm/amd/pm: validate vega10 profile mode inputs
* [PATCH 6.18 0067/1005] drm/amdgpu: Support some Barco AMD based graphics adapters
* [PATCH 6.18 0068/1005] drm/amdgpu: Guard reads in pcie state readout
* [PATCH 6.18 0069/1005] drm/amdgpu: add check for xcp id
* [PATCH 6.18 0070/1005] drm/amd/pm: Validate Vega hwmgr PowerPlay table bounds
* [PATCH 6.18 0071/1005] drm/amd/pm: Validate pp_table header before reading size
* [PATCH 6.18 0072/1005] drm/amd/pm: Use uploaded size for legacy custom PPTable
* [PATCH 6.18 0073/1005] drm/amdkfd: use node XCC count for v9 CRIU control stack restore
* [PATCH 6.18 0074/1005] drm/amd/pm: Validate Tonga PowerPlay state array bounds
* [PATCH 6.18 0075/1005] drm/amd/pm: Guard VBIOS AC timing table walk
* [PATCH 6.18 0076/1005] drm/amd/pm: Validate Tonga PPTable subtable bounds
* [PATCH 6.18 0077/1005] drm/amd/pm: Validate Vega10 PPTable subtable bounds
* [PATCH 6.18 0078/1005] drm/amd/pm: Validate legacy hwmgr PP table offsets
* [PATCH 6.18 0079/1005] drm/amdkfd: add sanity check in svm_range_is_valid
* [PATCH 6.18 0080/1005] drm/panel-edp: Support MB116AS013 edp panel
* [PATCH 6.18 0081/1005] libbpf: Skip bpf_object__probe_loading() when BPF token is in use
* [PATCH 6.18 0082/1005] net: usb: rtl8150: handle link status read failures
* [PATCH 6.18 0083/1005] netfilter: ebtables: bound num_counters like nentries in do_replace()
* [PATCH 6.18 0084/1005] soundwire: dmi-quirks: Disable ghost Realtek on Asus Expertbook
* [PATCH 6.18 0085/1005] dmaengine: pl330: remove debugfs file on teardown
* [PATCH 6.18 0086/1005] net: mvneta_bm: add suspend/resume support to prevent crash after resume
* [PATCH 6.18 0087/1005] dmaengine: dw-axi-dmac: fix __le32 on set of CH_CTL_H_LLI_VALID
* [PATCH 6.18 0088/1005] wifi: rtlwifi: rtl8723be: Remove unnecessary irq save/restore in hw_init()
* [PATCH 6.18 0089/1005] wifi: rtw89: wow: only WiFi 6 chips initialize RF registers in WoWLAN mode
* [PATCH 6.18 0090/1005] wifi: rtlwifi: fix disabling of ASPM for RTL8723BE with AER flooding
* [PATCH 6.18 0091/1005] wifi: rtw89: wow: add QoS control field to WoWLAN ARP response for MLO
* [PATCH 6.18 0092/1005] soc: amlogic: meson-clk-measure: remove debugfs tree
* [PATCH 6.18 0093/1005] block: reject block device inodes with i_rdev == 0 in lookup_bdev()
* [PATCH 6.18 0094/1005] iio: adc: max1241: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0095/1005] RDMA/irdma: Suppress PF reset on HMC error
* [PATCH 6.18 0096/1005] soc: qcom: socinfo: Add SoC ID for SDM850
* [PATCH 6.18 0097/1005] RDMA/rxe: Check PDs for memory window binds
* [PATCH 6.18 0098/1005] dt-bindings: arm: qcom,ids: Add SoC ID for Snapdragon SDM 850
* [PATCH 6.18 0099/1005] gpio: sifive: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0100/1005] mmc: moxart: report DMA completion timeout
* [PATCH 6.18 0101/1005] mmc: cqhci: fix to missed endian conversions
* [PATCH 6.18 0102/1005] mmc: sdhci-of-ma35d1: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0103/1005] mmc: dw_mmc: stop and complete DMA also in STATE_DATA_BUSY state
* [PATCH 6.18 0104/1005] clk: sunxi-ng: fix ccu probe clock unregister on error
* [PATCH 6.18 0105/1005] remoteproc: core: Full attach detach during recovery
* [PATCH 6.18 0106/1005] nvme: handle positive error codes in nuse_show()
* [PATCH 6.18 0107/1005] nvme-auth: use crypto_memneq for DH-HMAC-CHAP response comparison
* [PATCH 6.18 0108/1005] nvme: zns: cap zone report nr_zones by DMA buffer size
* [PATCH 6.18 0109/1005] staging: rtl8723bs: fix missing unregister_netdev on sdio_alloc_irq failure
* [PATCH 6.18 0110/1005] usb: typec: mux: tusb1046: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0111/1005] udf: validate extent partition references in udf_current_aext()
* [PATCH 6.18 0112/1005] udf: avoid recursive s_alloc_mutex deadlock when freeing AED blocks
* [PATCH 6.18 0113/1005] ASoC: codecs: uda1342: Leave cache-only mode before syncing
* [PATCH 6.18 0114/1005] drm/amdgpu/atomfirmware: WARN() rather than BUG()
* [PATCH 6.18 0115/1005] drm/amdgpu/gfx11: WARN() rather than BUG() for invalid SDMA engine
* [PATCH 6.18 0116/1005] nvme: dont reference NS after unlocking in nvme_ns_head_ctrl_ioctl()
* [PATCH 6.18 0117/1005] bus: mhi: core: Fix sys error transition latency
* [PATCH 6.18 0118/1005] platform/x86/amd/hsmp: Validate ACPI UID before parsing socket index
* [PATCH 6.18 0119/1005] ASoC: codecs: max98396: Unwind supplies on resume failure
* [PATCH 6.18 0120/1005] platform/x86/amd/hsmp: Validate _DSD mailbox sub-package element count
* [PATCH 6.18 0121/1005] PCI/ATS: Ensure pci_ats_supported() is PF-aware for VFs
* [PATCH 6.18 0122/1005] rpmsg: char: Check for ongoing chrdev destroy
* [PATCH 6.18 0123/1005] media: cec: tegra: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0124/1005] media: v4l2-tpg: reduce stack usage for kasan builds
* [PATCH 6.18 0125/1005] mmc: block: reject invalid perdev_minors before division
* [PATCH 6.18 0126/1005] serial: 8250: force synchronous probe for the ISA and PNP drivers
* [PATCH 6.18 0127/1005] tty: serial: pch_uart: add check for pci_get_slot()
* [PATCH 6.18 0128/1005] serial: qcom_geni: Disable closing_wait for console to prevent shutdown timeout
* [PATCH 6.18 0129/1005] usb: fsl_qe_udc: check qe_alloc_request() failure in ch9getstatus()
* [PATCH 6.18 0130/1005] usb: gadget: u_audio: clean up capture endpoint on feedback failure
* [PATCH 6.18 0131/1005] usb_string_copy: Use kzalloc() to avoid leaking old data
* [PATCH 6.18 0132/1005] USB: gadget: inode: fix mm lifetime handling
* [PATCH 6.18 0133/1005] pinctrl: sx150x: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0134/1005] crypto: keembay - add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0135/1005] gpio: vf610: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0136/1005] pmdomain: qcom: rpmhpd: Skip retention by default
* [PATCH 6.18 0137/1005] mmc: rtsx_usb_sdmmc: suppress false CD after init timeout
* [PATCH 6.18 0138/1005] media: em28xx: dev_info->pr_info since dev has been freed
* [PATCH 6.18 0139/1005] media: em28xx: requeue buffers if start_streaming fails
* [PATCH 6.18 0140/1005] media: em28xx: use vb2_video_unregister_device
* [PATCH 6.18 0141/1005] drm/xe: only resume exec queues that were actually suspended
* [PATCH 6.18 0142/1005] soundwire: dmi-quirks: add a global ghost list
* [PATCH 6.18 0143/1005] soundwire: intel_auxdevice: Add cs42l44 to wake_capable_list
* [PATCH 6.18 0144/1005] hfs: validate catalog CNIDs before instantiating inodes
* [PATCH 6.18 0145/1005] nvme: bound ns descriptor header and body to identify buffer
* [PATCH 6.18 0146/1005] iwlwifi: dvm: add missing cleaup for on error path
* [PATCH 6.18 0147/1005] nvme: clamp FDP nruhsd to allocated RUH status descriptor count
* [PATCH 6.18 0148/1005] media: i2c: ov8865: Drop the runtime PM usage count on stream failure
* [PATCH 6.18 0149/1005] drm/etnaviv: check all modules for idle after reset
* [PATCH 6.18 0150/1005] drm/etnaviv: check MMUv2 status after reset
* [PATCH 6.18 0151/1005] media: i2c: ov8865: Program the sensor on stream start
* [PATCH 6.18 0152/1005] media: ivtv: stop VBI start-code scan before short tail
* [PATCH 6.18 0153/1005] media: cx18: stop VBI start-code scan before short tail
* [PATCH 6.18 0154/1005] media: go7007: avoid undefined shifts in MPEG-4 headers
* [PATCH 6.18 0155/1005] remoteproc: qcom: Check subdev start status in rproc_stop()
* [PATCH 6.18 0156/1005] wifi: iwlwifi: validate PNVM SKU TLV length
* [PATCH 6.18 0157/1005] wifi: iwlwifi: support TTL platform device ID
* [PATCH 6.18 0158/1005] wifi: iwlwifi: validate UEFI reduced-power SKU TLV length
* [PATCH 6.18 0159/1005] wifi: iwlwifi: mld: validate D3_END notif size
* [PATCH 6.18 0160/1005] remoteproc: core: cancel crash_handler work in rproc_add() error path
* [PATCH 6.18 0161/1005] wifi: iwlwifi: mld: reset the driver state upon firmware recovery
* [PATCH 6.18 0162/1005] ASoC: cs35l56: Add support for CS35L62 for SoundWire
* [PATCH 6.18 0163/1005] wifi: iwlwifi: mvm: reset the smart fifo state upon FW stop
* [PATCH 6.18 0164/1005] wifi: iwlwifi: mld: cancel wiphy work before freeing wiphy
* [PATCH 6.18 0165/1005] tools/lib/api: Fix potential double-free from fdarray__grow()
* [PATCH 6.18 0166/1005] gpu: host1x: Wait for timeout worker completion on channel free
* [PATCH 6.18 0167/1005] wifi: iwlwifi: mld: support aborting an ongoing ftm request
* [PATCH 6.18 0168/1005] wifi: iwlwifi: mld: Do not cleanup FW state when the device is dead
* [PATCH 6.18 0169/1005] scsi: qla2xxx: Handle INTx not connected while passing through
* [PATCH 6.18 0170/1005] media: cec: tegra_cec: dont break off msg on NACK
* [PATCH 6.18 0171/1005] media: cec/core: drop cec_post_state_event call
* [PATCH 6.18 0172/1005] usb: musb: host: clear stale RX interrupt on three-strikes error
* [PATCH 6.18 0173/1005] usb: misc: cypress_cy7c63: check result of IO
* [PATCH 6.18 0174/1005] USB: misc: uss720: Fix leak in get_1284_register
* [PATCH 6.18 0175/1005] uio: sercos3: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0176/1005] comedi: ni_atmio16d: Add sanity check to interrupt handler
* [PATCH 6.18 0177/1005] comedi: ni_at_a2150: Fix sanity check in interrupt handler
* [PATCH 6.18 0178/1005] comedi: pcm818: Fix sanity check in interrupt handler
* [PATCH 6.18 0179/1005] comedi: quatech_daqp_cs: Fix sanity check in interrupt handler
* [PATCH 6.18 0180/1005] comedi: das6402: Add sanity check to interrupt handler
* [PATCH 6.18 0181/1005] comedi: dt2811: Fix sanity check in interrupt handler
* [PATCH 6.18 0182/1005] comedi: pcm711: Fix sanity check in interrupt handler
* [PATCH 6.18 0183/1005] comedi: aio_iiro_16: Add sanity check to interrupt handler
* [PATCH 6.18 0184/1005] comedi: pcmmio: Add sanity check to interrupt handler
* [PATCH 6.18 0185/1005] comedi: pcm816: Fix sanity check in interrupt handler
* [PATCH 6.18 0186/1005] comedi: pcmuio: Add sanity check to interrupt handler
* [PATCH 6.18 0187/1005] misc: bcm-vk: validate write size before allocation
* [PATCH 6.18 0188/1005] misc: genwqe: handle a first DMA address of zero
* [PATCH 6.18 0189/1005] misc: hpilo: validate device queue entries before use
* [PATCH 6.18 0190/1005] misc: rp1: clear chained IRQ handlers on teardown
* [PATCH 6.18 0191/1005] greybus: manifest: validate string descriptor header
* [PATCH 6.18 0192/1005] misc: ibmvmc: release send buffer on write errors
* [PATCH 6.18 0193/1005] ipack: ipoctal: add rwsem to guard against TOCTOU in remove path
* [PATCH 6.18 0194/1005] misc: ibmvmc: reject oversized inbound messages
* [PATCH 6.18 0195/1005] PCI: switchtec: Add Microchip PCI1008 device ID
* [PATCH 6.18 0196/1005] PCI: switchtec: Add Microchip PCI1008 to NTB DMA alias quirk
* [PATCH 6.18 0197/1005] driver core: attribute_container: Unwind device_add() on attr failure
* [PATCH 6.18 0198/1005] drm/msm/adreno: Add support for A704 GPU
* [PATCH 6.18 0199/1005] wifi: iwlwifi: mld: validate wake packet crypto overhead
* [PATCH 6.18 0200/1005] wifi: iwlwifi: mld: drop connection on D3 resume failure
* [PATCH 6.18 0201/1005] wifi: iwlwifi: mvm: ignore sync frames when sync is disabled
* [PATCH 6.18 0202/1005] media: dvb-core: fix feed leak on failed DMX_ADD_PID
* [PATCH 6.18 0203/1005] media: go7007: s2250: propagate control I/O failures
* [PATCH 6.18 0204/1005] drm/panel: panel-edp: Adjust T8 timing for AUO B116XAK01.6 and B140XTK02.4
* [PATCH 6.18 0205/1005] platform/x86: asus-nb-wmi: map ProArt key (0x8b) to KEY_PROG3
* [PATCH 6.18 0206/1005] ALSA: hda: Check snd_hda_power_pm construct error before executing verb
* [PATCH 6.18 0207/1005] ACPI: FPDT: validate table and record lengths
* [PATCH 6.18 0208/1005] ACPI: battery: Sanitise model_number by dropping unprintable characters
* [PATCH 6.18 0209/1005] platform/x86/amd/pmc: Add T14 Gen2 AMD (20XL) to s2idle quirk list
* [PATCH 6.18 0210/1005] ext4: reduce max cluster size to match documented 256MB limit
* [PATCH 6.18 0211/1005] PCI: vmd: Handle BUS_RESTRICT_CFG value 3 for Arrow Lake-HX
* [PATCH 6.18 0212/1005] ext4: set EXT4_STATE_NO_EXPAND in ext4_evict_inode
* [PATCH 6.18 0213/1005] wifi: mac80211: ibss: read deauth reason_code after frame length check
* [PATCH 6.18 0214/1005] wifi: mac80211_hwsim: clear PMSR request state on abort
* [PATCH 6.18 0215/1005] ACPI: sysfs: Properly map BERT and CCEL data to their ACPI tables
* [PATCH 6.18 0216/1005] riscv, bpf: Add support for BPF_SDIV and BPF_SMOD in RV32 JIT
* [PATCH 6.18 0217/1005] power: supply: cros_pchg: unregister EC notifier
* [PATCH 6.18 0218/1005] net: sfp: add quirk for HORACO copper SFP+ module
* [PATCH 6.18 0219/1005] net: prestera: ignore duplicate RIF destruction events
* [PATCH 6.18 0220/1005] power: reset: piix4-poweroff: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0221/1005] riscv, bpf: Add support for BPF_MOVSX in RV32 JIT
* [PATCH 6.18 0222/1005] wifi: cfg80211: include cf1 offset when sending chandef
* [PATCH 6.18 0223/1005] ext4: reject mount if clusters/inodes per group are not 8-aligned
* [PATCH 6.18 0224/1005] iommu/arm-smmu-qcom: Add SM8450 MDSS compatible
* [PATCH 6.18 0225/1005] drm/panel: simple: Add Kyocera tcg070wvlq panel
* [PATCH 6.18 0226/1005] iommu/qcom: Check pm_runtime_resume_and_get() return in probe
* [PATCH 6.18 0227/1005] iommu/qcom: Enable clocks before hardware access in qcom_iommu_ctx_probe()
* [PATCH 6.18 0228/1005] thermal: intel: int340x: clean up RFIM groups on DVFS failure
* [PATCH 6.18 0229/1005] iommu/qcom: Publish pgtbl_ops before releasing init_mutex
* [PATCH 6.18 0230/1005] net: libwx: disable TX VLAN offload for packets with >2 VLAN tags
* [PATCH 6.18 0231/1005] wifi: ath11k: validate regulatory capability phy_id
* [PATCH 6.18 0232/1005] wifi: ath10k: trigger hardware recovery upon rx failures
* [PATCH 6.18 0233/1005] wifi: ath12k: fix scan command endianness on big endian
* [PATCH 6.18 0234/1005] ext4: check return value of ext4_get_block() in ext4_load_tail_bh()
* [PATCH 6.18 0235/1005] ext4: use FGP_WRITEBEGIN for tail block zeroing
* [PATCH 6.18 0236/1005] bitops: make the *_bit_le functions use unsigned long
* [PATCH 6.18 0237/1005] ata: pata_ep93xx: fix PIO fallback when DMA init fails
* [PATCH 6.18 0238/1005] drm/etnaviv: force flush on power register ops
* [PATCH 6.18 0239/1005] soc: ixp4xx: qmgr: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0240/1005] ntfs3: initialize err in attr_wof_frame_info
* [PATCH 6.18 0241/1005] PCI/portdrv: Allow probing even without child services
* [PATCH 6.18 0242/1005] fs/ntfs3: reserve NUL byte when converting UTF-16 names
* [PATCH 6.18 0243/1005] ntfs3: fix info-leak in ntfs_rename()
* [PATCH 6.18 0244/1005] fs/ntfs3: fix lseek EINVAL on sparse/compressed files with 64-bit clusters
* [PATCH 6.18 0245/1005] fs/ntfs3: load ATTR_BITMAP run extents from $MFT extension records
* [PATCH 6.18 0246/1005] platform/x86: int1092: Fix info leak in parse_package()
* [PATCH 6.18 0247/1005] firmware: imx: scu: manage mailbox channels and global handle
* [PATCH 6.18 0248/1005] pinctrl: npcm8xx: enable RMII outputs from RMII groups
* [PATCH 6.18 0249/1005] pinctrl: npcm8xx: clear pending GPIO events during init
* [PATCH 6.18 0250/1005] pinctrl: npcm8xx: fix debounce register selection
* [PATCH 6.18 0251/1005] pinctrl: npcm8xx: move GPIO IRQ setup into request_resources
* [PATCH 6.18 0252/1005] hsi: omap_ssi: remove debugfs on port creation failure
* [PATCH 6.18 0253/1005] iommu/rockchip: Clear stale page faults before enabling stall
* [PATCH 6.18 0254/1005] scsi: ibmvfc: check for NULL evt in implicit LOGO and target delete path
* [PATCH 6.18 0255/1005] scsi: ibmvfc: free ibmvfc_target allocations with mempool_free
* [PATCH 6.18 0256/1005] udf: Fix bh leak for unallocated space entries
* [PATCH 6.18 0257/1005] udf: bound lengthAllocDescs from unallocated space entry
* [PATCH 6.18 0258/1005] exfat: write moved entry before removing source
* [PATCH 6.18 0259/1005] remoteproc: Force shutdown during device removal
* [PATCH 6.18 0260/1005] iommu/tegra241-cmdqv: Rate-limit the error ISRs log message
* [PATCH 6.18 0261/1005] clk: imx: imx8qxp: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0262/1005] clk: imx: imx8qxp-lpcg: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0263/1005] media: cx88: fix memory leak in cx8802_register_driver() error path
* [PATCH 6.18 0264/1005] clk: mediatek: mt6735-vdecsys: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0265/1005] clk: mediatek: mt6735-vencsys: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0266/1005] clk: tegra: support 48MHz clock for pll_p_out1
* [PATCH 6.18 0267/1005] clk: clocking-wizard: fix clock difference detection
* [PATCH 6.18 0268/1005] ata: ata_generic: Dont store pci_device_id
* [PATCH 6.18 0269/1005] i2c: qup: Propagate clock enable failures
* [PATCH 6.18 0270/1005] scsi: smartpqi: Add new PCI device-ids
* [PATCH 6.18 0271/1005] drm/amdkfd: Fix signal reset event
* [PATCH 6.18 0272/1005] drm/amd/display: Fix rounding errors in CalculatePrefetchSchedule
* [PATCH 6.18 0273/1005] arm64/runtime-const: Use aarch64_insn_patch_text_nosync() for patching
* [PATCH 6.18 0274/1005] exfat: clean up new entry on add entry failure
* [PATCH 6.18 0275/1005] ALSA: hda/conexant: Add NULL check for dc_mode_path
* [PATCH 6.18 0276/1005] drm/msm: Move nr_cmds initialization
* [PATCH 6.18 0277/1005] drm/msm: Fix barriers accessing ctx vm
* [PATCH 6.18 0278/1005] platform/x86: dell-smbios-wmi: Fix chardev resource management
* [PATCH 6.18 0279/1005] s390/mm: Add missing mm check to do_secure_storage_access()
* [PATCH 6.18 0280/1005] s390/mm: Fix handling of vmalloc area in do_secure_storage_access()
* [PATCH 6.18 0281/1005] drm/panel-edp: Add BOE NE140QDM-NX2
* [PATCH 6.18 0282/1005] soc: mediatek: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0283/1005] exfat: free new directory cluster if zeroing fails
* [PATCH 6.18 0284/1005] ALSA: hda/realtek: add missing NULL check for codec->bus->pci
* [PATCH 6.18 0285/1005] fs/ntfs3: Fix memory leak in indx_find_sort()
* [PATCH 6.18 0286/1005] mfd: ipaq-micro: Fix out-of-bounds stack read in ipaq_micro_str
* [PATCH 6.18 0287/1005] ALSA: hda/realtek: add missing error checks for COEF index reads in alc269
* [PATCH 6.18 0288/1005] mfd: axp20x: Preserve other control bits when powering off
* [PATCH 6.18 0289/1005] regulator: rt6245: Restore state on enable failure
* [PATCH 6.18 0290/1005] md/raid5: complete discard bios while reshape is active
* [PATCH 6.18 0291/1005] romfs: detect hard link cycles
* [PATCH 6.18 0292/1005] nvmem: brcm_nvram: reject empty NVRAM partition
* [PATCH 6.18 0293/1005] nvmem: brcm_nvram: fix out-of-bounds access on malformed flash data
* [PATCH 6.18 0294/1005] virtio_console: take a kref in find_port_by_vq() to fix port UAF
* [PATCH 6.18 0295/1005] wifi: mt76: mt7603: free beacon SKB on error
* [PATCH 6.18 0296/1005] wifi: mt76: mt76x02: report rx FCS errors to mac80211
* [PATCH 6.18 0297/1005] wifi: mt76: mt7915: configure noise floor reporting on reset
* [PATCH 6.18 0298/1005] wifi: mt76: mt7921: fix memory leak when skb_linearize fails in mcu rx event
* [PATCH 6.18 0299/1005] wifi: mt76: mt7603: add 0x7592 EEPROM chip ID
* [PATCH 6.18 0300/1005] wifi: mt76: wed: fix kernel panic on non-DBDC MT7986
* [PATCH 6.18 0301/1005] netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
* [PATCH 6.18 0302/1005] netfilter: nf_tables: call skb_valid_dst() before skb_dst()
* [PATCH 6.18 0303/1005] perf: marvell: Cancel CN10K DDR PMU hrtimer on device remove
* [PATCH 6.18 0304/1005] wifi: ath11k: fix resource leak on error in ext IRQ setup
* [PATCH 6.18 0305/1005] ASoC: SOF: Intel: mtl: Power down DSP if it is left enabled in pre_fw_run()
* [PATCH 6.18 0306/1005] wifi: mt76: mt7615: fix NULL deref in mt7615_mac_set_rates
* [PATCH 6.18 0307/1005] wifi: mt76: set the EOSP bit in the QoS header of the last released frame
* [PATCH 6.18 0308/1005] wifi: mt76: mt7603: fix U-APSD service period termination
* [PATCH 6.18 0309/1005] wifi: mt76: mt7603: restore hardware PS buffering after a service period
* [PATCH 6.18 0310/1005] wifi: brcmfmac: Set DMA direction for msgbuf packet IDs
* [PATCH 6.18 0311/1005] wifi: brcmfmac: validate msgbuf flowring IDs before use
* [PATCH 6.18 0312/1005] wifi: wilc1000: validate monitor transmit frame headers
* [PATCH 6.18 0313/1005] ALSA: hda/realtek: Add quirk for ASUS VivoBook M515DA/X515DAP
* [PATCH 6.18 0314/1005] HID: logitech-hidpp: Add support for G502 X Plus USB mouse
* [PATCH 6.18 0315/1005] HID: quirks: Add ALWAYS_POLL quirk for Beitong BTP-KP20D dongle
* [PATCH 6.18 0316/1005] HID: quirks: add ALWAYS_POLL quirk for AULA Mini 60 HE Pro Dongle
* [PATCH 6.18 0317/1005] HID: intel-ish-hid: ignore post-init ENUM_DEVICES from firmware
* [PATCH 6.18 0318/1005] net/rds: dont use unpin_user_pages_dirty_lock() from atomic context
* [PATCH 6.18 0319/1005] net/rds: hold the socket while an rds_mr references it
* [PATCH 6.18 0320/1005] net/rds: fix rds_message leak in the rds_send_xmit() drop path
* [PATCH 6.18 0321/1005] net/rds: unpin MR pages with unpin_user_pages_dirty_lock()
* [PATCH 6.18 0322/1005] kconfig: abort rather than loop for ever on EOF
* [PATCH 6.18 0323/1005] s390/dasd: Snapshot intrc before freeing the request block
* [PATCH 6.18 0324/1005] ALSA: hda/realtek: Add mute LED support for HP Pavilion 15-eh2xxx
* [PATCH 6.18 0325/1005] ACPI: video: force native backlight on Acer Nitro AN515-46
* [PATCH 6.18 0326/1005] wifi: mt76: mt7603: file buffered frames under the TID reported to mac80211
* [PATCH 6.18 0327/1005] net: stmmac: raise TX completion interrupt at the end of an xmit burst
* [PATCH 6.18 0328/1005] net: usb: cdc_ether: add quirk for AMI BMC stale link events
* [PATCH 6.18 0329/1005] xsk: account ring allocations to memcg
* [PATCH 6.18 0330/1005] ALSA: hda/realtek: Enable mute LED on HP Laptop 15-dy0xxx
* [PATCH 6.18 0331/1005] ALSA: hda/realtek: Limit mic boost on Positivo N15RPE-S
* [PATCH 6.18 0332/1005] opp: Use clk_get_optional() to avoid leaving opp_table->clk as an error pointer
* [PATCH 6.18 0333/1005] soundwire: dmi-quirks: Disable ghost Realtek on Asus Zenbook Duo
* [PATCH 6.18 0334/1005] wifi: rsi: Fix types to appease CFI
* [PATCH 6.18 0335/1005] arm64: mm: fix accidental linear mapping of no-map reserved memory
* [PATCH 6.18 0336/1005] drm/amd/pm: derive stable PPT limits from PPTable
* [PATCH 6.18 0337/1005] HID: rmi: check report length before trimming sentinel bytes
* [PATCH 6.18 0338/1005] ext4: guard against NULL s_group_info in ext4_get_group_info
* [PATCH 6.18 0339/1005] ALSA: hda/realtek: Enable mute LEDs on HP Spectre x360 16-aa0xxx
* [PATCH 6.18 0340/1005] md/raid5: reject zero-sector reshape chunks
* [PATCH 6.18 0341/1005] md: skip bitmap accounting for empty write ranges
* [PATCH 6.18 0342/1005] md: add cond_resched() to md_do_sync()s skip path
* [PATCH 6.18 0343/1005] tools/lib/thermal: Fix misplaced extern "C" closing brace
* [PATCH 6.18 0344/1005] selftests/ftrace: Force C locale in ftracetest
* [PATCH 6.18 0345/1005] Bluetooth: btusb: Add USB ID 13d3:3625 for MediaTek MT7922
* [PATCH 6.18 0346/1005] Bluetooth: btusb: Add support for 1357:c123 Realtek 8852BE device
* [PATCH 6.18 0347/1005] Bluetooth: hci_nokia: validate firmware packet bounds
* [PATCH 6.18 0348/1005] Bluetooth: btnxpuart: Fix use-after-free in probe error path
* [PATCH 6.18 0349/1005] Bluetooth: bfusb: validate received block boundaries
* [PATCH 6.18 0350/1005] btrfs: fix memory barrier order in reloc_root_is_dead()
* [PATCH 6.18 0351/1005] drm/amd: Add DCN6 register headers
* [PATCH 6.18 0352/1005] ACPI: APEI: Handle repeated SEA error storms
* [PATCH 6.18 0353/1005] ALSA: hda/realtek: Fix headset mic on ASUS Vivobook S14 S5406SA
* [PATCH 6.18 0354/1005] ALSA: hda/realtek: Fix speakers on ASUS ROG Zephyrus G14 GA403UM
* [PATCH 6.18 0355/1005] ALSA: hda/conexant: Add pin config quirk for Huawei Matebook
* [PATCH 6.18 0356/1005] ALSA: hda/realtek: Add quirk for Acer Nitro ANV16-42 headset mic
* [PATCH 6.18 0357/1005] Bluetooth: btrsi: Move set_bt_context after successful HCI registration
* [PATCH 6.18 0358/1005] Bluetooth: hci_bcsp: validate received packet lengths
* [PATCH 6.18 0359/1005] Bluetooth: fix BT dependency for submodules
* [PATCH 6.18 0360/1005] Bluetooth: hci_sync: Disable legacy instances ext adv before setup snapshot
* [PATCH 6.18 0361/1005] net: dsa: mt7530: error out on failed PHY_IAC command writes
* [PATCH 6.18 0362/1005] Bluetooth: hci_event: fix out-of-bounds read in LE PA report reassembly
* [PATCH 6.18 0363/1005] net: dsa: mt7530: check bus->read() error in core_rmw()
* [PATCH 6.18 0364/1005] net: pcs: mtk-lynxi: check regmap reads in mtk_pcs_lynxi_get_state()
* [PATCH 6.18 0365/1005] net: dsa: mt7530: check CORE_PLL_GROUP4 access in mt7531_setup()
* [PATCH 6.18 0366/1005] riscv: kprobes: Prevent probes in breakpoint handlers
* [PATCH 6.18 0367/1005] RISC-V: perf: fix resource cleanup on driver probe failure
* [PATCH 6.18 0368/1005] fbdev: omap2: dsi: do not copy isr table
* [PATCH 6.18 0369/1005] fbdev: udlfb: validate vendor descriptor items
* [PATCH 6.18 0370/1005] iommu/vt-d: Fix CACHE_TAG_NESTING_DEVTLB polluting shared variables in flush loop
* [PATCH 6.18 0371/1005] ALSA: usx2y: Stop clearing urb->hcpriv before submission
* [PATCH 6.18 0372/1005] perf/x86: Unregister PMI handler on PMU init failure
* [PATCH 6.18 0373/1005] perf/x86: Free hybrid state on PMU init failure
* [PATCH 6.18 0374/1005] nvmet: passthru: fix OOB reads when parsing ns id descriptor list
* [PATCH 6.18 0375/1005] selftests/net: fin_ack_lat: fix latency threshold typo
* [PATCH 6.18 0376/1005] docs: cgroup-v2: fix stale "io" controller introduction
* [PATCH 6.18 0377/1005] nvme-tcp: look up host_iface in the current netns
* [PATCH 6.18 0378/1005] tap: fix incorrect variable used for USO check in set_offload()
* [PATCH 6.18 0379/1005] apparmor: fix auditing of mount binary data
* [PATCH 6.18 0380/1005] selftests: net: reuseport_bpf_numa: consider cpuless numa node
* [PATCH 6.18 0381/1005] iommu/amd: Fix missing CMD_COMPLETE_PPR response for invalid PPR requests
* [PATCH 6.18 0382/1005] nfc: mrvl: spi: Unregister dev on allocation fail
* [PATCH 6.18 0383/1005] nfc: nxp-nci: Add remove on IRQ error
* [PATCH 6.18 0384/1005] nvme: ratelimit the completion-path messages driven by device data
* [PATCH 6.18 0385/1005] alpha: run the remote RTC access in a worker, not an IPI callback
* [PATCH 6.18 0386/1005] ALSA: hda/conexant: Add mute LED quirk for HP ProBook 440 G5
* [PATCH 6.18 0387/1005] hfsplus: validate extent record length before writing it back
* [PATCH 6.18 0388/1005] regulator: fan53555: Add support for FAN53555BUC23X type
* [PATCH 6.18 0389/1005] soundwire: dmi-quirks: Disable ghost Realtek on Asus ROG Zephyrus Duo
* [PATCH 6.18 0390/1005] ipmi: Fix leak in __ipmi_bmc_register
* [PATCH 6.18 0391/1005] PCI: Avoid saving config space state if inaccessible
* [PATCH 6.18 0392/1005] ALSA: hda/intel: Add sanity check for BAR0 size
* [PATCH 6.18 0393/1005] xhci: include all root port children in recovery prevention on link error
* [PATCH 6.18 0394/1005] ALSA: usb-audio: Rename the Audient iD14 monitor mix volume control
* [PATCH 6.18 0395/1005] HID: amd_sfh: Serialize access to the shared emp2 pointer
* [PATCH 6.18 0396/1005] drm/virtio: reclaim pending vbufs before tearing down vqs
* [PATCH 6.18 0397/1005] exfat: keep FITRIM within the requested range
* [PATCH 6.18 0398/1005] gre: fix ERSPAN o_flags race/corruption in xmit and fill_info
* [PATCH 6.18 0399/1005] crypto: keembay - use crypto_memneq() to compare GCM AEAD tags
* [PATCH 6.18 0400/1005] crypto: sa2ul - use crypto_memneq() to compare AEAD tag
* [PATCH 6.18 0401/1005] libbpf: Fix ring buffer consumer loop on 32-bit position wrap
* [PATCH 6.18 0402/1005] crypto: keembay - use crypto_memneq() to compare CCM AEAD tags
* [PATCH 6.18 0403/1005] ksmbd: protect private extended attributes
* [PATCH 6.18 0404/1005] ksmbd: preserve access denied status for copychunk
* [PATCH 6.18 0405/1005] ksmbd: allow I/O on directory named streams
* [PATCH 6.18 0406/1005] ksmbd: fix durable handle v2 default timeout units (60 -> 60000)
* [PATCH 6.18 0407/1005] ksmbd: reject SMB3.1.1 binding with mismatched cipher
* [PATCH 6.18 0408/1005] ksmbd: fix off-by-one rejecting minimal COPYCHUNK query-limits request
* [PATCH 6.18 0409/1005] ksmbd: return buffer too small for short security queries
* [PATCH 6.18 0410/1005] ksmbd: handle empty QUERY_ALLOCATED_RANGES output
* [PATCH 6.18 0411/1005] ksmbd: honor byte-range locks for zero data
* [PATCH 6.18 0412/1005] ksmbd: allow FSCTL_SET_SPARSE without input buffer
* [PATCH 6.18 0413/1005] ksmbd: skip fallocate for SMB2_CREATE_ALLOCATION_SIZE on a stream handle
* [PATCH 6.18 0414/1005] ksmbd: report actual xattr value length in stream enumeration
* [PATCH 6.18 0415/1005] smb/server: cancel async requests when closing connection
* [PATCH 6.18 0416/1005] ALSA: hda/realtek: Fix mute LED for HP Victus 15-fa1xxx (MB 8C3F)
* [PATCH 6.18 0417/1005] ksmbd: fix SMB2 byte-range lock end offset
* [PATCH 6.18 0418/1005] ksmbd: fix AsyncId zeroed before use in smb2_lock() cancel response
* [PATCH 6.18 0419/1005] ksmbd: reject blocking compound lock requests
* [PATCH 6.18 0420/1005] ksmbd: honor client signing-required in all modes
* [PATCH 6.18 0421/1005] smb: server: Make sure that passkey is not leaked on the heap in user_config.c
* [PATCH 6.18 0422/1005] pNFS: honor clora_changed when recalling a layout
* [PATCH 6.18 0423/1005] ksmbd: notify parent directory leases on child create
* [PATCH 6.18 0424/1005] smb: server: Free session data in user_session.c with kfree_sensitive()
* [PATCH 6.18 0425/1005] NFS: Verify symlink inode before caching target
* [PATCH 6.18 0426/1005] ALSA: hda: Add Lisuan HDMI controller and codec support
* [PATCH 6.18 0427/1005] NFSv4: pin the superblock for active state owners
* [PATCH 6.18 0428/1005] net: stmmac: use dma_addr_t for DMA addresses
* [PATCH 6.18 0429/1005] NFSv4/flexfiles: report cancelled I/O as a layout error
* [PATCH 6.18 0430/1005] platform/x86: msi-ec: Add MSI Katana GF76 11UEK EC firmware
* [PATCH 6.18 0431/1005] platform/x86: thinkpad_acpi: Fix fan speed reporting on Edge E330
* [PATCH 6.18 0432/1005] ASoC: codec: max98926: fixup invert setup mask
* [PATCH 6.18 0433/1005] vdpa_sim: hold iommu_lock across dma_unmap passthrough transition
* [PATCH 6.18 0434/1005] drm/radeon: fix internal display on iMac11, 1 (RV770/DCE3.1)
* [PATCH 6.18 0435/1005] vdpa/mlx5: roll back MR update after VQ setup failure
* [PATCH 6.18 0436/1005] ALSA: usb-audio: Add MIN_MUTE quirk for Creative Sound Blaster Play! 3
* [PATCH 6.18 0437/1005] virtio_balloon: warn on failed buffer add in tell_host()
* [PATCH 6.18 0438/1005] rtc: ab-eoz9: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0439/1005] PCI: vmd: Add Nova Lake (NVL) and Dunlow (DNL) Device IDs
* [PATCH 6.18 0440/1005] virtio_ring: fix infinite loop in virtnet_poll_cleantx when device is broken
* [PATCH 6.18 0441/1005] ASoC: rt712-sdca: Pull high JD2 to prevent from entering TV mode
* [PATCH 6.18 0442/1005] rtc: ds1307: fix RX8130 wakeup alarm WADA bit for day-of-month mode
* [PATCH 6.18 0443/1005] rtc: brcmstb-waketimer: add missing MODULE_DEVICE_TABLE()
* [PATCH 6.18 0444/1005] spi: loongson: pm: add .freeze .poweroff .thaw .restore
* [PATCH 6.18 0445/1005] i2c: imx-lpi2c: properly unwind resources on probe failure
* [PATCH 6.18 0446/1005] fbdev: maxine: fix 64-bit build error
* [PATCH 6.18 0447/1005] fbdev: platinumfb: add error checking for ioremap calls
* [PATCH 6.18 0448/1005] ksmbd: enable TCP keepalive for accepted connections
* [PATCH 6.18 0449/1005] sched_ext/scx_flatcg: expire cached hweights on weight changes
* [PATCH 6.18 0450/1005] ACPI: button: Add DMI quirk for Razer Blade Pro 17 early 2020 lid switch
* [PATCH 6.18 0451/1005] f2fs: avoid setting SBI_NEED_FSCK on transient resize failure
* [PATCH 6.18 0452/1005] ALSA: hda/realtek: Fix ALC700 audio on Intel Hades Canyon
* [PATCH 6.18 0453/1005] ALSA: usb-audio: Add iD14 MkI to monitor-mix volume quirk
* [PATCH 6.18 0454/1005] scsi: snic: Fix SCSI host leak on workqueue allocation failure
* [PATCH 6.18 0455/1005] docs: block: fix dead http link in blk-mq.rst
* [PATCH 6.18 0456/1005] net: ethernet: mtk_wed: increase WED v2 WDMA RESV_BUFF to 0x80
* [PATCH 6.18 0457/1005] fbcon: Fix KASAN slab-out-of-bounds Read in fbcon_prepare_logo
* [PATCH 6.18 0458/1005] powercap: intel_rapl: Fix kernel panic during PMU unbind
* [PATCH 6.18 0459/1005] net: stmmac: fix device node reference leaks in stmmac_mtl_setup()
* [PATCH 6.18 0460/1005] ALSA: hda/realtek: Add quirk for Lenovo IdeaPad Slim 3 15ABR8
* [PATCH 6.18 0461/1005] fuse: zero the partial EOF page when extending a file
* [PATCH 6.18 0462/1005] ASoC: amd: yc: Add DMI entry for Alienware m18 R1 AMD
* [PATCH 6.18 0463/1005] HID: i2c-hid: Add a quirk for a Cirque I2C device.
* [PATCH 6.18 0464/1005] HID: multitouch: Fix stale MT slots when contact count drops to zero
* [PATCH 6.18 0465/1005] tpm: tpm_tis_spi: fix nodef CR50 tpm_tis_spi_resume is null
* [PATCH 6.18 0466/1005] tpm: atmel: depend on X86
* [PATCH 6.18 0467/1005] ALSA: usb-audio: Skip mixer creation on M-Audio Venom
* [PATCH 6.18 0468/1005] ASoC: amd: acp3x-es83xx: Add HVY-WXX9/M1060 DMI quirk
* [PATCH 6.18 0469/1005] ceph: do not cache negative dentries for snapped directories
* [PATCH 6.18 0470/1005] ALSA: hda/conexant: Always enable the headset-mic pin on plugin
* [PATCH 6.18 0471/1005] ASoC: amd: acp-config: Add HVY-WXX9/M1060 DMI quirk
* [PATCH 6.18 0472/1005] ceph: fix use-after-dereference of NULL ci in __ceph_remove_cap()
* [PATCH 6.18 0473/1005] netfilter: tproxy: use DEBUG_NET_WARN_ON_ONCE for protocol fallbacks
* [PATCH 6.18 0474/1005] ksmbd: handle allocated range queries on dense files
* [PATCH 6.18 0475/1005] regmap: irq: Free the irqdomain we create
* [PATCH 6.18 0476/1005] HID: i2c-hid: Add i2c-hid-quirk-bad-input-size quirk for 0911:5288 device
* [PATCH 6.18 0477/1005] HID: i2c-hid: add reset quirk for Lenovo Yoga Slim 7x Gen 11 keyboard
* [PATCH 6.18 0478/1005] HID: elecom: Add support for ELECOM M-XT4DRBK (018E)
* [PATCH 6.18 0479/1005] nvme-fc: do not warn on controller removal race
* [PATCH 6.18 0480/1005] HID: roccat: fix locking in roccat_connect() and roccat_disconnect()
* [PATCH 6.18 0481/1005] scsi: devinfo: Add BLIST_SKIP_IO_HINTS for EMC Symmetrix
* [PATCH 6.18 0482/1005] ASoC: amd: yc: Add Lenovo ThinkPad E16 Gen 2 (21JN) to quirks
* [PATCH 6.18 0483/1005] gpio: mvebu: keep resume masks within the irqchip cache
* [PATCH 6.18 0484/1005] sfc: add X4D PF support
* [PATCH 6.18 0485/1005] ASoC: amd: yc: Add DMI quirk for Lenovo V15 G6 ARP
* [PATCH 6.18 0486/1005] HID: universal-pidff: Add support for Turtle Beach VelocityOne Race
* [PATCH 6.18 0487/1005] HID: Intel-thc-hid: Intel-quickspi: Fix buffer overflow
* [PATCH 6.18 0488/1005] HID: Intel-thc-hid: Intel-quicki2c: Fix buffer overflow
* [PATCH 6.18 0489/1005] ASoC: Intel: bytcr_rt5651: Add quirk for Chuwi Hi8 with generic DMI strings
* [PATCH 6.18 0490/1005] nvme-tcp: delay nvme_tcp_reclassify_socket()
* [PATCH 6.18 0491/1005] docs: update the unmount propagation rule
* [PATCH 6.18 0492/1005] ALSA: hda/realtek: Limit internal mic boost on HP Pavilion 15 (103c:2164)
* [PATCH 6.18 0493/1005] ALSA: usb-audio: Add mixer mapping for MSI MAG B850M MORTAR WIFI
* [PATCH 6.18 0494/1005] ALSA: hda/realtek: Add quirk for Lenovo ThinkBook 16p Gen 3 ARH (21EK)
* [PATCH 6.18 0495/1005] ALSA: hda/realtek: Add quirk for Lenovo ThinkBook G8+
* [PATCH 6.18 0496/1005] ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-ec1xxx
* [PATCH 6.18 0497/1005] ALSA: hda/realtek: Add quirk for HP ENVY 13-aq1xxx
* [PATCH 6.18 0498/1005] ALSA: hda/realtek: Add mute LED quirk for HP Victus 15-fb2xxx
* [PATCH 6.18 0499/1005] ALSA: hda/realtek: Add quirk for Acer Nitro AN515-45
* [PATCH 6.18 0500/1005] ALSA: hda/realtek: Fix speakers on ASUS PM3406CHA
* [PATCH 6.18 0501/1005] ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 14-dv1001TU
* [PATCH 6.18 0502/1005] usb: mtu3: Fix double dereference in TP_printk
* [PATCH 6.18 0503/1005] net: usb: qmi_wwan: add Rolling Wireless RN947R
* [PATCH 6.18 0504/1005] ALSA: hda/realtek: Add quirk for ASRock NUC BOX-358H
* [PATCH 6.18 0505/1005] ALSA: hda/realtek: Add ALC235 support for headset mode
* [PATCH 6.18 0506/1005] spi: cadence-qspi: Fix status polling with octal DTR chips
* [PATCH 6.18 0507/1005] ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg3xxx (103c:8bfd)
* [PATCH 6.18 0508/1005] ALSA: usb-audio: Add native DSD support for Cambridge Audio streamers
* [PATCH 6.18 0509/1005] drm/amdgpu/gfx12: set KMD_QUEUE for kernel gfx queues
* [PATCH 6.18 0510/1005] drm/amdgpu/gfx11: set KMD_QUEUE for kernel gfx queues
* [PATCH 6.18 0511/1005] RISC-V: errata: Add SiFive MAL-9092 workaround
* [PATCH 6.18 0512/1005] regmap: Remove debugfs before cache teardown
* [PATCH 6.18 0513/1005] nbcon/reboot: Switch NBCON consoles into the emergency mode in emergency_restart()
* [PATCH 6.18 0514/1005] Revert "namei: dont reveal overmounted entries in refwalk"
* [PATCH 6.18 0515/1005] media: em28xx: use video_unregister_device for radio_dev
* [PATCH 6.18 0516/1005] ARM: 9524/1: mm: align hugetlb mappings to the huge page size
* [PATCH 6.18 0517/1005] blk-crypto: fix NULL deref and UAF in __blk_crypto_evict_key()
* [PATCH 6.18 0518/1005] ceph: fail readdir when the MDS reply carries no dirfrag
* [PATCH 6.18 0519/1005] fuse: dont BUG when the copy buffer is exhausted
* [PATCH 6.18 0520/1005] kcov: ignore an out-of-range comparison count in write_comp_data()
* [PATCH 6.18 0521/1005] kcsan: Avoid division by zero in kcsan_prandom_u32_max()
* [PATCH 6.18 0522/1005] libceph: bound mon_command ack decode to front len
* [PATCH 6.18 0523/1005] media: cx88: Disable PCI device on MPEG initialization failure
* [PATCH 6.18 0524/1005] media: em28xx: reject audio endpoint with zero packet size
* [PATCH 6.18 0525/1005] media: go7007: only set audio_enabled if go7007_snd_init() succeeded
* [PATCH 6.18 0526/1005] net: ipv4: add zero check for snd_cwnd_clamp
* [PATCH 6.18 0527/1005] net: usb: pegasus: do not advance rx_skb->data on dropped frames
* [PATCH 6.18 0528/1005] nfsd: fix race between client_info_show() and free_client()
* [PATCH 6.18 0529/1005] ocfs2/dlm: drain join handlers before releasing module text
* [PATCH 6.18 0530/1005] ocfs2: drain quorum work before removing the cluster
* [PATCH 6.18 0531/1005] ocfs2: pin owning modules for open debugfs files
* [PATCH 6.18 0532/1005] ocfs2: publish the filecheck owner before adding sysfs attributes
* [PATCH 6.18 0533/1005] thunderbolt: Do not RPM complete unrelated subtrees on unplug
* [PATCH 6.18 0534/1005] udf: fix return value for non-recorded-allocated extents in udf_map_block()
* [PATCH 6.18 0535/1005] wwan: wwan_hwsim: Pin module for debugfs file operations
* [PATCH 6.18 0536/1005] xfs: fix integer overflow problem when setting large free areas
* [PATCH 6.18 0537/1005] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
* [PATCH 6.18 0538/1005] netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()
* [PATCH 6.18 0539/1005] netfilter: ctnetlink: do not expose expectation DEAD flag
* [PATCH 6.18 0540/1005] sctp: auth: discard auth_chunk when skb_clone fails
* [PATCH 6.18 0541/1005] dt-bindings: interrupt-controller: gicv5: Relax IRS properties constraints
* [PATCH 6.18 0542/1005] irqchip/gic-v5: Fix standalone IRSes OF probe
* [PATCH 6.18 0543/1005] drm/xe/display: skip FORCE_WC and vm_bound check for external dma-bufs
* [PATCH 6.18 0544/1005] KVM: x86: Always initialize EFER reserved bits on vendor initialization
* [PATCH 6.18 0545/1005] mm/migrate: use huge_ptep_get() in remove_migration_pte()
* [PATCH 6.18 0546/1005] HID: input: read battery capacity from its actual report offset
* [PATCH 6.18 0547/1005] mm/page_alloc: dont spin_trylock() when disallowed in free_one_page()
* [PATCH 6.18 0548/1005] i3c: master: Fix potential UAF in i3c_device_uevent()
* [PATCH 6.18 0549/1005] LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests()
* [PATCH 6.18 0550/1005] LoongArch: KVM: Deliver interrupt after IN_GUEST_MODE is set
* [PATCH 6.18 0551/1005] LoongArch: KVM: Set vcpu->cpu before IN_GUEST_MODE is set
* [PATCH 6.18 0552/1005] rust: bug: fix warn_on macro build error on UML
* [PATCH 6.18 0553/1005] nfsd: dedup nfs4_client_to_reclaim inserts
* [PATCH 6.18 0554/1005] nfsd: use test_and_clear_bit for somebody_reclaimed to prevent lost update
* [PATCH 6.18 0555/1005] LoongArch: Expand module virtual address space to 2GB
* [PATCH 6.18 0556/1005] rust: cfi: disable function merging if CFI is enabled
* [PATCH 6.18 0557/1005] mm/kmemleak: stop the task stack scan early when interrupted
* [PATCH 6.18 0558/1005] mm/kmemleak: report RCU-tasks quiescent states during the scan
* [PATCH 6.18 0559/1005] mm/migrate_device: clear stale mapping after freeing swapcache
* [PATCH 6.18 0560/1005] smb: client: reject SetEA requests that do not fit the request buffer
* [PATCH 6.18 0561/1005] riscv: hwprobe: initialize pair->value in hwprobe_one_pair()
* [PATCH 6.18 0562/1005] ipv6: udp: Create exceptions before socket matching
* [PATCH 6.18 0563/1005] thunderbolt: Make the DP tunnel activation callback mandatory
* [PATCH 6.18 0564/1005] drm/amd/display: DML2.1 Reintegration
* [PATCH 6.18 0565/1005] drm/amd/display: Update P-state naming for clarity.
* [PATCH 6.18 0566/1005] drm/amd/display: add const qualifiers to watermark params struct
* [PATCH 6.18 0567/1005] drm/amd/display: Remove const Qualifier From Non-Pointer Fields
* [PATCH 6.18 0568/1005] LoongArch: KVM: Add unregister helpers for the KVM interrupt devices
* [PATCH 6.18 0569/1005] LoongArch: KVM: Fix resource leak in kvm_loongarch_env_init() error path
* [PATCH 6.18 0570/1005] s390/crypto: Replace cond_resched() with msleep(1)
* [PATCH 6.18 0571/1005] s390/crypto: Fix return code handling at skcipher_walk_done in PAES algorithms
* [PATCH 6.18 0572/1005] s390/crypto: Fix use of mutex in atomic context in PAES
* [PATCH 6.18 0573/1005] s390/crypto: Fix handling of EBUSY in PAES when req is pushed to crypto engine
* [PATCH 6.18 0574/1005] MIPS: Fix HOTPLUG_PARALLEL dependency
* [PATCH 6.18 0575/1005] mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ
* [PATCH 6.18 0576/1005] smb: client: fix uid/gid override in getattr with posix extensions
* [PATCH 6.18 0577/1005] smb: client: fix WSL reparse point uid/gid override
* [PATCH 6.18 0578/1005] hwmon: (asus_rog_ryujin) Rely on subsystem locking
* [PATCH 6.18 0579/1005] hwmon: (asus_rog_ryujin) Add per-device configuration
* [PATCH 6.18 0580/1005] hwmon: (asus_rog_ryujin) Validate HID report lengths
* [PATCH 6.18 0581/1005] hwmon: (asus_rog_ryujin) Synchronize HID command and report handling
* [PATCH 6.18 0582/1005] drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7
* [PATCH 6.18 0583/1005] selftests/ublk: fix Makefile to rebuild on header changes
* [PATCH 6.18 0584/1005] selftests: ublk: add utility to get block device metadata size
* [PATCH 6.18 0585/1005] selftests: ublk: increase timeout to 150 seconds
* [PATCH 6.18 0586/1005] selftests: ublk: install test_common.sh and trace/ scripts
* [PATCH 6.18 0587/1005] smb: client: fix fattr leaking on wsl_to_fattr() failure
* [PATCH 6.18 0588/1005] RISC-V: KVM: Release unused page after MMU invalidation
* [PATCH 6.18 0589/1005] RISC-V: KVM: Fix sdata leak and stale snapshot_addr in snapshot_set_shmem
* [PATCH 6.18 0590/1005] xfs: dont cross reference rmapbt with bitmaps if theyre incomplete
* [PATCH 6.18 0591/1005] drm/amdkfd: Guard m->cp_hqd_eop_control setting by q->eop_ring_buffer_size
* [PATCH 6.18 0592/1005] drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc
* [PATCH 6.18 0593/1005] drm/amdkfd: Avoid integer underflow in EOP ring size calculation.
* [PATCH 6.18 0594/1005] smb: client: delete compound mids on send failure before unlock
* [PATCH 6.18 0595/1005] KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths
* [PATCH 6.18 0596/1005] serial: serial_core: simplify uart_ioctl() returns
* [PATCH 6.18 0597/1005] serial: fix ioctl hangup race
* [PATCH 6.18 0598/1005] serial: abort TIOCMIWAIT on hangup
* [PATCH 6.18 0599/1005] net/sched: act_ct: remove add_helper dead code
* [PATCH 6.18 0600/1005] KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN
* [PATCH 6.18 0601/1005] KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded
* [PATCH 6.18 0602/1005] ALSA: hda/realtek: add quirk for Acer Nitro ANV15-51
* [PATCH 6.18 0603/1005] ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72
* [PATCH 6.18 0604/1005] smb: client: clear post-EOF pagecache when extending a file via truncate
* [PATCH 6.18 0605/1005] smb: client: discard post-EOF pagecache when extending a file via clone range
* [PATCH 6.18 0606/1005] smb: client: drain and invalidate before server-side copy/clone
* [PATCH 6.18 0607/1005] smb: client: only require read lease for size-extending zero range
* [PATCH 6.18 0608/1005] smb: client: require stable pages for signed connections
* [PATCH 6.18 0609/1005] tools/power turbostat: Read complete CPU lists
* [PATCH 6.18 0610/1005] drm/amd/display: Fix fast updates on DCE 6.x
* [PATCH 6.18 0611/1005] drm/amdgpu: remove gart_window_lock usage from gmc v12
* [PATCH 6.18 0612/1005] drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub()
* [PATCH 6.18 0613/1005] drm/amd/display: guard dc_sink dereferences in MST mode validation
* [PATCH 6.18 0614/1005] accel/rocket: search every core slot when looking up a scheduler
* [PATCH 6.18 0615/1005] ipc: create_ipc_ns: drop mqueue mount on sysctl setup failure
* [PATCH 6.18 0616/1005] ipc: drop the mqueue mount with kern_unmount() on setup failure
* [PATCH 6.18 0617/1005] ntfs3: free replaced mount options after a grace period
* [PATCH 6.18 0618/1005] tracing: Fix fully-qualified variable reference printing in histograms
* [PATCH 6.18 0619/1005] tracing: Use __free() for expr_str() buffer
* [PATCH 6.18 0620/1005] tracing: Return ERR_PTR() from expr_str()
* [PATCH 6.18 0621/1005] tracing: Bound histogram expression strings with seq_buf
* [PATCH 6.18 0622/1005] tracing: Fix NULL dereference when copying keys for a field variable
* [PATCH 6.18 0623/1005] drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set
* [PATCH 6.18 0624/1005] RISC-V: KVM: Fix double-free of sdata in kvm_pmu_clear_snapshot_area()
* [PATCH 6.18 0625/1005] serial: core: fix TIOCSSERIAL and TIOCSERCONFIG on uninitialised ports
* [PATCH 6.18 0626/1005] net/sched: cls_bpf: accept dev-bound programs on shared blocks
* [PATCH 6.18 0627/1005] net/sched: cls_flower: avoid stale mask references after delete
* [PATCH 6.18 0628/1005] net/sched: sch_teql: fix slaves_lock IRQ deadlock
* [PATCH 6.18 0629/1005] net/sched: sch_teql: fix use-after-free on lower qdisc drop
* [PATCH 6.18 0630/1005] net/sched: fix packet reordering on requeue
* [PATCH 6.18 0631/1005] net/sched: act_ife: do not consume the inner header on egress
* [PATCH 6.18 0632/1005] driver core: take parent lock on deferred probe
* [PATCH 6.18 0633/1005] driver core: Limit the messages on a refused uevent
* [PATCH 6.18 0634/1005] driver core: fix parent lock use-after-free on USB disconnect
* [PATCH 6.18 0635/1005] Drivers: hv: vmbus: Bounds check the shared ring buffer indices
* [PATCH 6.18 0636/1005] backlight: lm3630a: Cancel delayed work before destroying workqueue
* [PATCH 6.18 0637/1005] backlight: qcom-wled: Fix NULL pointer dereference in wled_remove()
* [PATCH 6.18 0638/1005] backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe
* [PATCH 6.18 0639/1005] backlight: qcom-wled: Fix WLED3 brightness register stride
* [PATCH 6.18 0640/1005] ksmbd: accept share config responses from ksmbd-tools before 3.5.3
* [PATCH 6.18 0641/1005] ksmbd: avoid restoring only in-memory EOF after allocation change
* [PATCH 6.18 0642/1005] ksmbd: fix extended session security negotiation for raw NTLMSSP
* [PATCH 6.18 0643/1005] ksmbd: fix OOB read and cross-share confusion in ksmbd_validate_name_reconnect()
* [PATCH 6.18 0644/1005] ksmbd: fix overflow in dacloffset bounds check in build_sec_desc()
* [PATCH 6.18 0645/1005] ksmbd: fix parent dentry lifetime in directory enumeration
* [PATCH 6.18 0646/1005] ksmbd: ignore network devices of other namespaces
* [PATCH 6.18 0647/1005] ksmbd: preserve unreadable named streams on open
* [PATCH 6.18 0648/1005] ksmbd: reserve space for the UTF-16 terminator in stream info
* [PATCH 6.18 0649/1005] ksmbd: return end of file for reads past a named streams data
* [PATCH 6.18 0650/1005] ksmbd: use u8 for SMB2 oplock level values
* [PATCH 6.18 0651/1005] ksmbd: validate security descriptor offsets before pointer arithmetic
* [PATCH 6.18 0652/1005] tcp: Fix potential UAF in reqsk_timer_handler().
* [PATCH 6.18 0653/1005] vlan: restore HW VLAN tag insertion with reorder_hdr off
* [PATCH 6.18 0654/1005] cgroup: serialize migrations of newly forked processes
* [PATCH 6.18 0655/1005] Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU"
* [PATCH 6.18 0656/1005] Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU"
* [PATCH 6.18 0657/1005] KVM: x86/mmu: pass PFERR_GUEST_PAGE/FINAL_MASK to kvm_translate_gpa
* [PATCH 6.18 0658/1005] KVM: x86: Tell ->inject_page_fault() whether or a fault came from hardware
* [PATCH 6.18 0659/1005] KVM: VMX: Synthesize nested EPT violation GVA_IS_VALID/GVA_TRANSLATED bits
* [PATCH 6.18 0660/1005] x86/ioperm: Prevent NULL dereference on theoretical missing IO bitmap
* [PATCH 6.18 0661/1005] wifi: b43: fix use-after-free in b43_bcma_remove()
* [PATCH 6.18 0662/1005] SUNRPC: fix netns use-after-free in write_gssp()
* [PATCH 6.18 0663/1005] spmi: Fix potential use-after-free by grabbing of_node reference
* [PATCH 6.18 0664/1005] smb: client: fix use-after-free infoleak via the readdir resume name
* [PATCH 6.18 0665/1005] smb: client: fix use-after-free in cifs_ses_add_channel()
* [PATCH 6.18 0666/1005] RDMA/irdma: avoid use-after-free in icrdma_remove
* [PATCH 6.18 0667/1005] rapidio: mport_cdev: fix use-after-free in mport_mm_close()
* [PATCH 6.18 0668/1005] platform/x86/amd: hfi: Fix a use-after-free when unloading the driver
* [PATCH 6.18 0669/1005] nvmet: fix use-after-free of the old registrant in nvmet_pr_preempt()
* [PATCH 6.18 0670/1005] nvmet-fc: fix use-after-free in nvmet_fc_ls_create_connection()
* [PATCH 6.18 0671/1005] iommufd: Fix event queue release use-after-free
* [PATCH 6.18 0672/1005] landlock: Fix superblock use-after-free in release_inode()
* [PATCH 6.18 0673/1005] lockd: Fix use-after-free in nlmsvc_retry_blocked
* [PATCH 6.18 0674/1005] media: au0828: fix use-after-free in bulk_timeout timer on disconnect
* [PATCH 6.18 0675/1005] media: cx23885: Fix use-after-free in cx23885_finidev due to race condition
* [PATCH 6.18 0676/1005] media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path
* [PATCH 6.18 0677/1005] media: imon: fix use-after-free in display_close via dev_dbg
* [PATCH 6.18 0678/1005] mm/hugetlb: fix use-after-free in hugetlb_mfill_atomic_pte()
* [PATCH 6.18 0679/1005] mm/hugetlb: fix use-after-free of a new anon folio
* [PATCH 6.18 0680/1005] apparmor: fix a use-after-free in aa_lookupn_ns()
* [PATCH 6.18 0681/1005] ASoC: audio-graph-card2: Fix use-after-free in audio_graph2_link_c2c()
* [PATCH 6.18 0682/1005] ata: sata_fsl: Fix use-after-free of host_priv on probe() failure
* [PATCH 6.18 0683/1005] drm/msm: Fix vm_bo use-after-free in with_vm_locks()
* [PATCH 6.18 0684/1005] s390/cpum_cf: Check session mask before cpu offline
* [PATCH 6.18 0685/1005] s390/extable: Fix mvcos instruction decoding
* [PATCH 6.18 0686/1005] s390/kprobes: Prevent kprobes on instructions with exception table entry
* [PATCH 6.18 0687/1005] s390/probes: Fix wrong opcode for cgrb fixup
* [PATCH 6.18 0688/1005] s390/signal: Fix incorrect return address in signal frame
* [PATCH 6.18 0689/1005] s390/zcrypt: Fix out-of-bounds ptr advance in cca_query_crypto_facility()
* [PATCH 6.18 0690/1005] HID: wacom: Use hdev->product in wacom_setup_touch_input_capabilities
* [PATCH 6.18 0691/1005] HID: wacom: Advertise SW_MUTE_DEVICE capability prior to registration
* [PATCH 6.18 0692/1005] HID: wacom: Fix Use-After-Free in wacom_intuos_pad
* [PATCH 6.18 0693/1005] HID: wacom: Fix Use-After-Free in wacom_bamboo_pad
* [PATCH 6.18 0694/1005] HID: wacom: Redesign shared sibling data lifecycle
* [PATCH 6.18 0695/1005] HID: wacom: Setup SW_MUTE_DEVICE according to the order of input registration
* [PATCH 6.18 0696/1005] HID: wacom: Write shared touch initial status only once
* [PATCH 6.18 0697/1005] klist: avoid accesses after waking klist_remove()
* [PATCH 6.18 0698/1005] objtool/rust: add one more `noreturn` Rust function for Rust 1.101.0
* [PATCH 6.18 0699/1005] rust: bitmap: restrict bitmap length to at most i32::MAX
* [PATCH 6.18 0700/1005] rust: block: fix `Send` bound for `GenDisk`
* [PATCH 6.18 0701/1005] rust: block: require `Sync` for `Operations::QueueData`
* [PATCH 6.18 0702/1005] rust: configfs: fix data offset calculation for subsystem callbacks
* [PATCH 6.18 0703/1005] rust: cpufreq: reject NULL from cpufreq_cpu_get()
* [PATCH 6.18 0704/1005] rust: rcpufreq_dt: add module alias
* [PATCH 6.18 0705/1005] ALSA: control: Fix UAF in snd_ctl_elem_add() on card disconnect
* [PATCH 6.18 0706/1005] ALSA: emux: Fix UAF of soundfont zones at note-on
* [PATCH 6.18 0707/1005] ALSA: pcmtest: handle multiple wraps in random capture fill
* [PATCH 6.18 0708/1005] ASoC: amd: ps: fix snd_acp63_remove() teardown ordering
* [PATCH 6.18 0709/1005] Bluetooth: hci_vhci: Pin module for debugfs file operations
* [PATCH 6.18 0710/1005] drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase
* [PATCH 6.18 0711/1005] fbdev: atmel_lcdfb: Prevent FIFO work after removal
* [PATCH 6.18 0712/1005] fbdev: udlfb: dont rebuild the mode list while the framebuffer is in use
* [PATCH 6.18 0713/1005] fs/proc/task_mmu: pin mm_users in do_pagemap_scan()
* [PATCH 6.18 0714/1005] genirq: Defer kfree(irqaction) until irq_thread_dtor() finishes
* [PATCH 6.18 0715/1005] genirq: Move interrupt thread exit_work object to irqaction
* [PATCH 6.18 0716/1005] HID: hiddev: keep state alive through disconnect unlock
* [PATCH 6.18 0717/1005] io_uring/io-wq: save worker type before dropping its reference
* [PATCH 6.18 0718/1005] iomap: dont resubmit an ioend after ->writeback_submit() failed
* [PATCH 6.18 0719/1005] iommu/arm-smmu-v3: Disable the impl before disabling the SMMU on shutdown
* [PATCH 6.18 0720/1005] KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls
* [PATCH 6.18 0721/1005] media: cx23885: unregister DVB bus when SP2 CI setup fails
* [PATCH 6.18 0722/1005] media: gspca: use vb2_video_unregister_device() on disconnect
* [PATCH 6.18 0723/1005] media: imx-jpeg: cancel timeout worker when streaming stops
* [PATCH 6.18 0724/1005] media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers
* [PATCH 6.18 0725/1005] media: microchip-csi2dc: fix async notifier leak on probe error path
* [PATCH 6.18 0726/1005] media: microchip-isc: take a reference on the parsed endpoints
* [PATCH 6.18 0727/1005] media: redrat3: fix UAF in probe error path leaving rc device registered
* [PATCH 6.18 0728/1005] media: s5p-mfc: use timer_shutdown_sync() for the self-rearming watchdog
* [PATCH 6.18 0729/1005] mm/slab: sample slab_state once in kmem_cache_destroy()
* [PATCH 6.18 0730/1005] mm: khugepaged: fix folio is used after folio_put/unlock()
* [PATCH 6.18 0731/1005] scsi: dc395x: sync the waiting_timer before freeing the host
* [PATCH 6.18 0732/1005] serial: core: shut down initialized port on removal
* [PATCH 6.18 0733/1005] xen-blkfront: unbind irq before tearing down ring and shadow requests
* [PATCH 6.18 0734/1005] wifi: ath9k: delete channel-context timers on deinit
* [PATCH 6.18 0735/1005] wifi: mt76: mt7996: unlink TWT flow if the MCU rejects the agreement
* [PATCH 6.18 0736/1005] usb: gadget: fix refcount underflow in gadgetfs_bind() error path
* [PATCH 6.18 0737/1005] ufs: use u64 for directory size in ufs_last_byte
* [PATCH 6.18 0738/1005] spi: spi-pci1xxxx: quiesce DMA engines on transfer timeout
* [PATCH 6.18 0739/1005] resource: report a devm_request_resource() conflict under the lock
* [PATCH 6.18 0740/1005] phy: core: Fix race-condition between _of_phy_get() and try_module_get()
* [PATCH 6.18 0741/1005] power: supply: sbs-battery: disable polling before supply teardown
* [PATCH 6.18 0742/1005] nvmem: core: Fix OOB read for bit offsets of more than one byte
* [PATCH 6.18 0743/1005] media: rc: Ensure that rc_unregister_device() does not free input device
* [PATCH 6.18 0744/1005] media: rc: Ensure registered is cleared in error path
* [PATCH 6.18 0745/1005] media: rc: fintek-cir: process a full RX buffer instead of overflowing it
* [PATCH 6.18 0746/1005] media: rc: Fix race between bpf(BPG_PROG_ATTACH) and device unregister
* [PATCH 6.18 0747/1005] media: rc: mce_kbd: Fix inconsistent locking of keylock
* [PATCH 6.18 0748/1005] media: rc: Use after free in ir_raw_event_handle()
* [PATCH 6.18 0749/1005] media: rc: After rc_unregister_device() timers can be re-armed
* [PATCH 6.18 0750/1005] media: rc: Fix use after free in bpf progs
* [PATCH 6.18 0751/1005] media: rc: Fix ABBA deadlock by making locks more fine grained
* [PATCH 6.18 0752/1005] ocfs2/heartbeat: unlink live slots when their node is missing
* [PATCH 6.18 0753/1005] ocfs2/dlm: hold a lock reference across grant AST enqueue
* [PATCH 6.18 0754/1005] ocfs2/dlm: hold the lookup reference across convert AST enqueue
* [PATCH 6.18 0755/1005] ocfs2: cancel quota sync work before freeing quota info
* [PATCH 6.18 0756/1005] ocfs2: fix chunk number of the first chunk in a local quota file
* [PATCH 6.18 0757/1005] ocfs2: pin refcount trees before dropping the lookup lock
* [PATCH 6.18 0758/1005] ocfs2: snapshot dentry names in file and setattr traces
* [PATCH 6.18 0759/1005] smb: client: fix OOB last_entry pointer from unbounded LastNameOffset
* [PATCH 6.18 0760/1005] smb: client: stop processing a read response after a receive error
* [PATCH 6.18 0761/1005] ovl: set OVL_WHITEOUTS before publishing the upper dir
* [PATCH 6.18 0762/1005] ovl: take a snapshot of the name for copy up
* [PATCH 6.18 0763/1005] ovl: use the pinned upper dir in ovl_fix_origin()
* [PATCH 6.18 0764/1005] ovl: always encode the origin fh when index is enabled
* [PATCH 6.18 0765/1005] ovl: check the casefold flag of directories only
* [PATCH 6.18 0766/1005] ovl: do not copy up an xattr value that was never read
* [PATCH 6.18 0767/1005] ovl: fix a torn path in ovl_get_redirect()
* [PATCH 6.18 0768/1005] ovl: fortify ovl_copy_xattr() against underlying layer modifications
* [PATCH 6.18 0769/1005] ovl: read the nlink xattr of every indexed non-dir
* [PATCH 6.18 0770/1005] ovl: reserve space for the casefolded name terminator
* [PATCH 6.18 0771/1005] ovl: set the revalidate flags after d_instantiate()
* [PATCH 6.18 0772/1005] ovl: skip copy up of empty security.capability
* [PATCH 6.18 0773/1005] xfs: clear the symlink zapped flag if inline symlink is ok
* [PATCH 6.18 0774/1005] xfs: mark cow extents bad if theres no rmap mapping for them
* [PATCH 6.18 0775/1005] xfs: compute the correct fdblocks/frextents for repair when theyre negative
* [PATCH 6.18 0776/1005] xfs: fix ondisk symlink target validation in xrep_dinode_check_dfork
* [PATCH 6.18 0777/1005] xfs: fix xfs_rename_space_res for non-pptr filesystems
* [PATCH 6.18 0778/1005] xfs: fix missing xfs_qm_adjust_dqlimits call in quotacheck repair
* [PATCH 6.18 0779/1005] xfs: fix buffer overruns in xfs_ioc_attr_list
* [PATCH 6.18 0780/1005] xfs: online quotacheck must dirty dquot if enforcement adjustments needed
* [PATCH 6.18 0781/1005] xfs: avoid cross-rtgroup reaping after a repair
* [PATCH 6.18 0782/1005] xfs: actually lock the metafile reservation when adjusting after repair
* [PATCH 6.18 0783/1005] xfs: fix unnecessary dapos truncation in xchk_dir_walk
* [PATCH 6.18 0784/1005] xfs: fix buffer overflow in corrupt inline attr structure
* [PATCH 6.18 0785/1005] xfs: actually report corrupt xattrs as XFAIL during cross-referencing
* [PATCH 6.18 0786/1005] xfs: fix inode btree repair when a cluster is larger than a chunk
* [PATCH 6.18 0787/1005] xfs: always reset incore attr fork buffer when resetting fork
* [PATCH 6.18 0788/1005] xfs: dont pass iget failures up when marking ondisk inodes
* [PATCH 6.18 0789/1005] xfs: zero out di_metatype when removing the metadir file iflag
* [PATCH 6.18 0790/1005] xfs: flag excessive delalloc rt extents as corruption
* [PATCH 6.18 0791/1005] xfs: dont fix the directory tree if live update fails
* [PATCH 6.18 0792/1005] xfs: validate rc_domain in xchk_rtrefcount_mergeable
* [PATCH 6.18 0793/1005] xfs: dont proceed with xattr repair if the live update fails
* [PATCH 6.18 0794/1005] xfs: fix skipped inode mask handling in iscan
* [PATCH 6.18 0795/1005] xfs: dont repair fs summary counters with garbage
* [PATCH 6.18 0796/1005] xfs: fix lost errno returned from xfarray_foliosort
* [PATCH 6.18 0797/1005] xfs: allow softlimit with no hardlimit in quota scrub
* [PATCH 6.18 0798/1005] xfs: assign an owner to scrub_stats_fops
* [PATCH 6.18 0799/1005] xfs: bail out of directory tree repairs on error
* [PATCH 6.18 0800/1005] xfs: fix revalidation of xchk_dquot_iter cached mappings
* [PATCH 6.18 0801/1005] xfs: abort dirtree repair if the live update hook dies
* [PATCH 6.18 0802/1005] xfs: check fork type against dabtree block magic number
* [PATCH 6.18 0803/1005] xfs: mark overfull dabtree node blocks as corrupt
* [PATCH 6.18 0804/1005] xfs: jump out of xchk_bmap_check_rmap if fatal signals
* [PATCH 6.18 0805/1005] xfs: cross-reference the primary superblock
* [PATCH 6.18 0806/1005] xfs: adjust checks for cross-AG reaping issues
* [PATCH 6.18 0807/1005] xfs: actually check XFS_DIFLAG2_METADATA for metadata btree data forks
* [PATCH 6.18 0808/1005] xfs: fix xchk_stats_estimate_bufsize to allow for the trailing null
* [PATCH 6.18 0809/1005] sched_ext: sync disable_irq_work in bpf_scx_unreg()
* [PATCH 6.18 0810/1005] sched_ext: Fix scx_flush_disable_work() UAF race
* [PATCH 6.18 0811/1005] netfilter: disable payload mangling in userns
* [PATCH 6.18 0812/1005] ipv6: Implement limits on extension header parsing
* [PATCH 6.18 0813/1005] netfilter: nfnetlink_queue: restrict writes to network header
* [PATCH 6.18 0814/1005] netfilter: nft_meta: add double-tagged vlan and pppoe support
* [PATCH 6.18 0815/1005] netfilter: nftables: restrict linklayer and network header writes
* [PATCH 6.18 0816/1005] netfilter: nftables: restrict checkum update offset
* [PATCH 6.18 0817/1005] netfilter: validate L4 headers after userspace packet writes
* [PATCH 6.18 0818/1005] netfilter: nft_payload: restrict checksum offsets to known values
* [PATCH 6.18 0819/1005] netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables
* [PATCH 6.18 0820/1005] ksmbd: serialize directory emptiness checks with readdir
* [PATCH 6.18 0821/1005] ksmbd: fix breaking_cnt leak on early return in oplock_break()
* [PATCH 6.18 0822/1005] rtnetlink: wait for RCU readers in rtnl_link_unregister()
* [PATCH 6.18 0823/1005] EDAC/mc: Really fix error path ordering in edac_mc_alloc()
* [PATCH 6.18 0824/1005] Revert "net: Convert proto_ops bind() callbacks to use sockaddr_unsized"
* [PATCH 6.18 0825/1005] media: usbtv: drop redundant device reference
* [PATCH 6.18 0826/1005] media: usbtv: fix null-pointer dereference on disconnect
* [PATCH 6.18 0827/1005] xfs: reduce new btree slack factor if free space is negative
* [PATCH 6.18 0828/1005] xfs: reject absurdly large xattr value lengths in xchk_xattr_actor
* [PATCH 6.18 0829/1005] xfs: reject out-of-range attribute value lengths in xfs_attr_copy_value
* [PATCH 6.18 0830/1005] xfs: reject remote xattr entries with an out-of-range value length
* [PATCH 6.18 0831/1005] xfs: release ip after unlinked list store failure
* [PATCH 6.18 0832/1005] xfs: rescan the AGs if incore delalloc counter is negative
* [PATCH 6.18 0833/1005] xfs: update quota flags on secondary supers when metadir enabled
* [PATCH 6.18 0834/1005] xfs: abort directory tree repair whenever dl->aborted is set
* [PATCH 6.18 0835/1005] xfs: always forget cached ACLs if the attr fork swap succeeds
* [PATCH 6.18 0836/1005] xfs: always report inode repair setup failures
* [PATCH 6.18 0837/1005] xfs: always report scrub errors in tracepoints
* [PATCH 6.18 0838/1005] xfs: always zero the whole shortform header when zeroing attr fork
* [PATCH 6.18 0839/1005] xfs: bound da-node entry count against the correct geometry
* [PATCH 6.18 0840/1005] xfs: bound inode fork length against the fork size during log recovery
* [PATCH 6.18 0841/1005] xfs: check for fragments when full-extent sharing matches
* [PATCH 6.18 0842/1005] xfs: check for termination during rmap btree walk
* [PATCH 6.18 0843/1005] xfs: clarify various parts of the bitmap API
* [PATCH 6.18 0844/1005] xfs: clear set[ug]id mode bits when zapping attr fork
* [PATCH 6.18 0845/1005] xfs: complain loudly when dirtree checker finds broken links
* [PATCH 6.18 0846/1005] xfs: dont allow sm_agno for non-group metadir path checking
* [PATCH 6.18 0847/1005] xfs: dont clear COWEXTSIZE on directories on reflink filesystems
* [PATCH 6.18 0848/1005] xfs: dont overrun incore inode when cleaning attr forks
* [PATCH 6.18 0849/1005] xfs: dont queue rmap update twice when reaping a fork
* [PATCH 6.18 0850/1005] xfs: dont rescan ifree and icount when frozen
* [PATCH 6.18 0851/1005] xfs: dont scan across metadata/regular directory trees for dirents
* [PATCH 6.18 0852/1005] xfs: dont set a metadata directorys parent to sb_rootino
* [PATCH 6.18 0853/1005] xfs: dont subtract excess usage twice when computing agf_btreeblks
* [PATCH 6.18 0854/1005] xfs: dont try to repair rtsummary if the summary file isnt computed
* [PATCH 6.18 0855/1005] xfs: dont try to scrub self-referential dirent in metapath checker
* [PATCH 6.18 0856/1005] xfs: fix correction of unwritten extents in quota file data fork
* [PATCH 6.18 0857/1005] xfs: fix data fork block count check in xrep_inode_blockcounts
* [PATCH 6.18 0858/1005] xfs: init inode number for tracepoint
* [PATCH 6.18 0859/1005] xfs: never reset the default quota timer
* [PATCH 6.18 0860/1005] xfs: only written file data blocks can be shared
* [PATCH 6.18 0861/1005] xfs: opportunistically skip btree block checks
* [PATCH 6.18 0862/1005] xfs: propagate errors while checking null siblings
* [PATCH 6.18 0863/1005] xfs: range-check bc_levels array access in scrub tracepoints
* [PATCH 6.18 0864/1005] xfs: reattach dquots after changing inode ids
* [PATCH 6.18 0865/1005] x86/bugs: Adapt SRSO mitigation to Zen6
* [PATCH 6.18 0866/1005] smb: server: size directory name conversion buffer correctly
* [PATCH 6.18 0867/1005] smb: client: dont resurrect an exiting tcon from cached dir workers
* [PATCH 6.18 0868/1005] smb: client: fix buffer overflow in SMB2_tcon()
* [PATCH 6.18 0869/1005] smb: client: fix fiemap wild read on empty truncated response
* [PATCH 6.18 0870/1005] smb: client: fix slab-out-of-bounds write in id_mode_to_cifs_acl()
* [PATCH 6.18 0871/1005] smb: client: validate NT transaction response layout and offsets
* [PATCH 6.18 0872/1005] pNFS: Fix CB_NOTIFY_DEVICEID CHANGE to consume ndc_immediate
* [PATCH 6.18 0873/1005] pnfs/blocklayout: Complete a device upcall only on its own reply
* [PATCH 6.18 0874/1005] pnfs/blocklayout: Complete a device upcall when the pipe is closed
* [PATCH 6.18 0875/1005] NFSv4/pnfs: Free the netid when draining a data-server address list
* [PATCH 6.18 0876/1005] NFSv4.1/pnfs: suspend pNFS on NFS4ERR_TOOSMALL from LAYOUTGET
* [PATCH 6.18 0877/1005] NFSv4/filelayout: Anchor page coalescing on pattern_offset
* [PATCH 6.18 0878/1005] NFSv4/flexfiles: fail I/O to the data server once a lock is lost
* [PATCH 6.18 0879/1005] NFSv4/flexfiles: Use the full 64-bit offset for read DS selection
* [PATCH 6.18 0880/1005] NFSv4/flexfiles: Use the full 64-bit stripe_unit
* [PATCH 6.18 0881/1005] NFSv4/flexfiles: Bound page coalescing on the absolute stripe offset
* [PATCH 6.18 0882/1005] NFS: Fix stale negative cache on failed nfs_mkdir()
* [PATCH 6.18 0883/1005] NFS/localio: fix nfs_local_dio_misaligned tracepoint
* [PATCH 6.18 0884/1005] NFS/localio: report the stability a DIO WRITE actually has
* [PATCH 6.18 0885/1005] NFSD: cap the number of listeners accepted in listener_set
* [PATCH 6.18 0886/1005] nfsd: clear XDR padding in GETXATTR replies
* [PATCH 6.18 0887/1005] NFSD: copy SETXATTR data from all XDR buffer segments
* [PATCH 6.18 0888/1005] NFSD: Do not send CB_RECALL_ANY to NFSv4.0 clients
* [PATCH 6.18 0889/1005] NFSD: Dont complete a cld upcall the daemon has not read
* [PATCH 6.18 0890/1005] nfsd: dont modify a session slot when replaying its cached reply
* [PATCH 6.18 0891/1005] NFSD: Fail a pool_threads read whose reply does not fit
* [PATCH 6.18 0892/1005] nfsd: fetch direct I/O alignment for files handed to the filecache
* [PATCH 6.18 0893/1005] nfsd: Fix id-to-name cache entry leak in idtoname_parse()
* [PATCH 6.18 0894/1005] NFSD: Fix out-of-bounds read in the rpc_status dump
* [PATCH 6.18 0895/1005] nfsd: hold cl_lock in client_has_openowners()
* [PATCH 6.18 0896/1005] nfsd: honour client-provided attributes for NFS4_CREATE_EXCLUSIVE4_1
* [PATCH 6.18 0897/1005] NFSD: map fh_verify() status codes for NFS_ACLv3 replies
* [PATCH 6.18 0898/1005] NFSD: Map flex file layout IDs through the requests user namespace
* [PATCH 6.18 0899/1005] nfsd: preflight SEQUENCE replies before accepting a slot
* [PATCH 6.18 0900/1005] nfsd: propagate SETXATTR value decode errors
* [PATCH 6.18 0901/1005] NFSD: Reject an oversized principal hash from nfsdcld
* [PATCH 6.18 0902/1005] NFSD: Resolve the recall-any mask names in the trace format
* [PATCH 6.18 0903/1005] NFSD: Return NFSERR_ISDIR for NFSv2 READ and WRITE on a non-regular file
* [PATCH 6.18 0904/1005] NFSD: Set nn->cld_net before registering the cld pipe
* [PATCH 6.18 0905/1005] NFSD: validate transport name in listener_set before serv creation
* [PATCH 6.18 0906/1005] nfsd: zero NFSv4 COMPOUND tag padding
* [PATCH 6.18 0907/1005] SUNRPC: Copy the deferred RPC Call from the head buffer
* [PATCH 6.18 0908/1005] SUNRPC: Do not credit control-record octets to the RPC stream
* [PATCH 6.18 0909/1005] SUNRPC: fix oversized GSS proxy token copy
* [PATCH 6.18 0910/1005] SUNRPC: keep the first error in svc_register()
* [PATCH 6.18 0911/1005] sunrpc: pin gss module across auth_domain RCU free
* [PATCH 6.18 0912/1005] SUNRPC: Reject a socket that already has an svc_sock attached
* [PATCH 6.18 0913/1005] SUNRPC: Reject a TLS alert record that is not two octets
* [PATCH 6.18 0914/1005] SUNRPC: Resume receiving after a TLS control record
* [PATCH 6.18 0915/1005] SUNRPC: trace an accepted transport before publishing it
* [PATCH 6.18 0916/1005] sunrpc: treat empty auth.unix.gid replies as negative entries
* [PATCH 6.18 0917/1005] SUNRPC: Treat every TLS error alert as fatal
* [PATCH 6.18 0918/1005] rxrpc: Fix update of call->tx_pending without holding lock
* [PATCH 6.18 0919/1005] rxrpc: Fix lack of short-send handling in rxrpc_kernel_send_data()
* [PATCH 6.18 0920/1005] afs: Fix afs to abort the rxrpc call on send error
* [PATCH 6.18 0921/1005] rxrpc: Fix double IRQ enablement
* [PATCH 6.18 0922/1005] rxrpc: Fix return in rxrpc_recvmsg_data() for service calls
* [PATCH 6.18 0923/1005] x86/cpuid: Mark CPUID function 0x23 as being indexed
* [PATCH 6.18 0924/1005] x86/mm/pat: Fix effective RW computation in lookup_address_in_pgd_attr()
* [PATCH 6.18 0925/1005] KVM: SVM: Trigger new ASID allocation in both VMCBs on pCPU switch
* [PATCH 6.18 0926/1005] KVM: nSVM: Ignore EFER.LMA if EFER.LME=0 when preparing L2 state
* [PATCH 6.18 0927/1005] KVM: Use goto to handle errors during memslot preparation
* [PATCH 6.18 0928/1005] KVM: VMX: Disallow using to_vmx() in common VT code
* [PATCH 6.18 0929/1005] KVM: VMX: Make handle_bus_lock_vmexit() a shared helper
* [PATCH 6.18 0930/1005] KVM: VMX: Preserve negative return value in vmx_handle_exit() with bus lock detected
* [PATCH 6.18 0931/1005] KVM: x86/mmu: Bug the VM if KVM attempts to walk more levels than the MMU has
* [PATCH 6.18 0932/1005] KVM: x86/mmu: Bug the VM if KVM calcs a CPU role with EFER.LMA=1 && CR4.PAE=0
* [PATCH 6.18 0933/1005] KVM: x86/xen: Enforce 4-byte alignment of vcpu_info registration
* [PATCH 6.18 0934/1005] KVM: x86/xen: Take kvm->srcu in __kvm_xen_has_interrupt()
* [PATCH 6.18 0935/1005] KVM: x86: Clear hardware HLT state when userspace makes a vCPU not-halted
* [PATCH 6.18 0936/1005] KVM: x86: Preserve DR6.BLD (Bus Lock Detect) when delivering #DB payload
* [PATCH 6.18 0937/1005] KVM: x86: Request event processing for exception VM-Exits
* [PATCH 6.18 0938/1005] KVM: x86: Take SRCU in kvm_zap_gfn_range()
* [PATCH 6.18 0939/1005] KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak
* [PATCH 6.18 0940/1005] KVM: TDX: Check if there is valid exit infos based on vp_enter_ret
* [PATCH 6.18 0941/1005] KVM: TDX: Enable Notify VM exit
* [PATCH 6.18 0942/1005] KVM: TDX: Enable Bus Lock VM exit
* [PATCH 6.18 0943/1005] KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users
* [PATCH 6.18 0944/1005] KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form
* [PATCH 6.18 0945/1005] HID: zydacron: validate key report length
* [PATCH 6.18 0946/1005] HID: amd_sfh: Remove unsupported motion-state field from accelerometer report
* [PATCH 6.18 0947/1005] HID: amd_sfh: Use report type from request node
* [PATCH 6.18 0948/1005] HID: core: Fix out-of-bounds left shift by 32 in s32ton()
* [PATCH 6.18 0949/1005] HID: cougar: reject short special-key reports
* [PATCH 6.18 0950/1005] HID: cp2112: validate response report lengths
* [PATCH 6.18 0951/1005] HID: elo: reject short touchscreen reports
* [PATCH 6.18 0952/1005] HID: logitech-dj: validate unnumbered keyboard reports
* [PATCH 6.18 0953/1005] HID: mcp2200: validate READ_ALL response length
* [PATCH 6.18 0954/1005] HID: mcp2221: validate response report length
* [PATCH 6.18 0955/1005] HID: picoLCD: check for fb_deferred_io_init() error
* [PATCH 6.18 0956/1005] HID: prodikeys: validate fixed-format MIDI reports
* [PATCH 6.18 0957/1005] HID: pxrc: reject short input reports
* [PATCH 6.18 0958/1005] HID: quirks: Always poll the Anne Pro 2 with product ID a292
* [PATCH 6.18 0959/1005] HID: roccat: isku: reject short button reports
* [PATCH 6.18 0960/1005] HID: roccat: koneplus: reject short button reports
* [PATCH 6.18 0961/1005] HID: roccat: konepure: reject short button reports
* [PATCH 6.18 0962/1005] HID: roccat: kovaplus: reject short button reports
* [PATCH 6.18 0963/1005] HID: roccat: pyra: reject short button reports
* [PATCH 6.18 0964/1005] HID: roccat: ryos: reject short special reports
* [PATCH 6.18 0965/1005] HID: roccat: savu: reject short special reports
* [PATCH 6.18 0966/1005] ovl: check that the parents of volatile/dirty are dirs
* [PATCH 6.18 0967/1005] ovl: hold a reference on the parent in readdir
* [PATCH 6.18 0968/1005] ovl: do not copy up a dentry that was removed
* [PATCH 6.18 0969/1005] ovl: fix mount setup failing when override_creds drops CAP_SYS_ADMIN
* [PATCH 6.18 0970/1005] smb: smbdirect: fix buffer length underflow in RDMA transfers
* [PATCH 6.18 0971/1005] io_uring/kbuf: advance head when a pickup empties the buffer ring
* [PATCH 6.18 0972/1005] io_uring/net: keep recvmsg buffer select length within MAX_RW_COUNT
* [PATCH 6.18 0973/1005] io_uring/net: dont retry a non-blocking connect() that fails with -EAGAIN
* [PATCH 6.18 0974/1005] io_uring/io-wq: no new workers once the exit has begun
* [PATCH 6.18 0975/1005] io_uring/rsrc: charge buffer arrays and nodes to memcg
* [PATCH 6.18 0976/1005] io_uring: charge tctx nodes and personalities
* [PATCH 6.18 0977/1005] io_uring: free XArray nodes left by a failed store
* [PATCH 6.18 0978/1005] io_uring/sqpoll: dont wait for the thread to exit
* [PATCH 6.18 0979/1005] io_uring: defer foreign io-wq enqueues to task_work
* [PATCH 6.18 0980/1005] io_uring/timeout: count cancelled timeouts in cq_timeouts
* [PATCH 6.18 0981/1005] io_uring/net: fix multishot recv length limit accounting
* [PATCH 6.18 0982/1005] smb: client: do not pass a NULL buf to is_oplock_break()
* [PATCH 6.18 0983/1005] smb: client: fix early procfs exposure race
* [PATCH 6.18 0984/1005] driver core: Check drivers_autoprobe for all added devices
* [PATCH 6.18 0985/1005] driver core: take parent lock in async device attach
* [PATCH 6.18 0986/1005] ksmbd: deny access for an empty DACL instead of granting the request
* [PATCH 6.18 0987/1005] ksmbd: fix session reference leak on compounded SESSION_SETUP
* [PATCH 6.18 0988/1005] ksmbd: prevent share root removal through empty paths
* [PATCH 6.18 0989/1005] ksmbd: prevent stale data from being written by SMB2 WRITE requests
* [PATCH 6.18 0990/1005] ksmbd: fix invalid pointer dereference when get_inode_acl() fails
* [PATCH 6.18 0991/1005] ksmbd: use the existing xattr name for a named stream
* [PATCH 6.18 0992/1005] ksmbd: fix out-of-bounds read when padding the final compound response
* [PATCH 6.18 0993/1005] ksmbd: fix named stream write and EOF handling
* [PATCH 6.18 0994/1005] ksmbd: verify transform SessionId matches the decrypted header
* [PATCH 6.18 0995/1005] ksmbd: fix use-after-free after a failed durable reconnect
* [PATCH 6.18 0996/1005] media: ipu-bridge: Fix use-after-free in IVSC error path
* [PATCH 6.18 0997/1005] pps: change pps_gen_class to a const struct
* [PATCH 6.18 0998/1005] pps: generators: fix use-after-free when closing a removed device
* [PATCH 6.18 0999/1005] mm/rmap: dont discard lazyfree THPs at PMD level
* [PATCH 6.18 1000/1005] media: rc: Fix build failure with CONFIG_LIRC disabled
* [PATCH 6.18 1001/1005] selftests: ublk: add missing gitignore for metadata_size binary
* [PATCH 6.18 1002/1005] drm/amdgpu/powerplay: Align get_tonga_state_array() header with prototype
* [PATCH 6.18 1003/1005] netfilter: conntrack: always lower timeout for non-closing RST packets
* [PATCH 6.18 1004/1005] opp: fix use after free in _update_opp_table_clk()
* [PATCH 6.18 1005/1005] ALSA: hda/realtek: Fix audio after Windows reboot on ASUS Q423SA

and found the following issue:
WARNING: lock held when returning to user space in uart_set_ldisc

Full report is available here:
https://ci.syzbot.org/series/530f70c1-b89b-4aea-9f60-b37ea51b8ceb

***

WARNING: lock held when returning to user space in uart_set_ldisc

tree:      stable
URL:       https://kernel.googlesource.com/pub/scm/linux/kernel/git/stable/linux-stable.git
base:      f45ed76d6791cf72ff1265ee93511175bbbc2f18
arch:      amd64
compiler:  Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8
config:    https://ci.syzbot.org/builds/29ef7d8d-54c9-4916-91c8-e2793ec684f2/config
syz repro: https://ci.syzbot.org/findings/a8ef2ca8-d3da-4fa6-b5c9-47061f7b2d3f/syz_repro

================================================
WARNING: lock held when returning to user space!
syzkaller #0 Not tainted
------------------------------------------------
syz.2.19/5834 is leaving the kernel with locks still held!
1 lock held by syz.2.19/5834:
 #0: ffff888109e20e90 (&port->mutex){+.+.}-{4:4}, at: uart_set_ldisc+0x51/0x1e0 drivers/tty/serial/serial_core.c:1658


***

If these findings have caused you to resend the series or submit a
separate fix, please add the following tag to your commit message:
  Tested-by: syzbot@syzkaller.appspotmail.com

---
This report is generated by a bot. It may contain errors.
syzbot ci engineers can be reached at syzkaller@googlegroups.com.

To test a fix for this bug, please reply with `#syz test`
(on a separate line) and attach the patch to the email.

Notes:
- The patch will be applied on top of the tested series (as an
  incremental fix).
- To test a new version of the whole series, please send it directly
  to syzbot@lists.linux.dev.
- Arguments like custom git repos and branches are not supported.