Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

drop 4 patches based on RC review feedback

Dropped patches:

- "firmware: arm_ffa: bound partition_info_get_regs copies"
  Queues: 6.12
  Reason: -Werror,-Wincompatible-pointer-types build break on
    stable-rc/linux-6.12.y (arm64 allmodconfig, clang-21); struct
    ffa_partition_info.uuid is still u32[4] in 6.12, the uuid_t
    conversion prerequisite b7c9f32614f17 was not backported.
  Report: https://lore.kernel.org/stable/178001274428.7152.372661732178917650@330cfa3079ca/

- "firmware: arm_ffa: fix big-endian support in __ffa_partition_info_get_regs"  [dependency]
  Queues: 6.12
  Reason: Stable-dep-of 3974ea193840; introduces the failing
    uuid_copy(&buf->uuid, ...) line, so it must be dropped together
    with the patch above.

- "net: shaper: reject handle IDs exceeding internal bit-width"
  Queues: 7.0, 6.18
  Reason: ynl tooling build break - adds 'scope: kernel' to
    net_shaper.yaml but genetlink.yaml schema (additionalProperties:
    False) has no 'scope' support; prerequisite fbf5df34a4dbcd
    ("tools: ynl: add scope qualifier for definitions") is not queued.
  Report: https://lore.kernel.org/stable/d66f5c95-ebc0-4c53-9852-f73c790363f7@leemhuis.info/

- "af_unix: Reject SIOCATMARK on non-stream sockets"
  Queues: 6.1, 5.15, 5.10
  Reason: defective backport of upstream d119775f2bad - the
    sk_type check was placed in unix_stream_read_generic() instead of
    unix_ioctl()'s SIOCATMARK case, regressing blocking SOCK_SEQPACKET
    recvmsg while not fixing the intended ioctl behavior (5.10 has no
    SIOCATMARK/OOB support at all). Mirrors the revert already queued
    for 6.6.
  Report: https://lore.kernel.org/stable/20260527094544.2344825-1-guanwentao@uniontech.com/

Signed-off-by: Sasha Levin <sashal@kernel.org>

Drop ipv6-route-unregister-netdevice-notifier-on-bpf-init.patch

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

drop drm patch

drop some patches

drop hwmon patches

drop some hwmon patches

drop queue-6.12/drm-v3d-release-indirect-csd-gem-reference-on-cpu-job-free.patch

drop some broken hwmon 5.10 patches

7.0-stable patches

added patches:
arm64-probes-handle-probes-on-hinted-conditional-branch-instructions.patch
asoc-codecs-pcm512x-fix-null-ptr-dereference-in-pcm512x_overclock_xxx_put.patch
batman-adv-bla-avoid-double-decrement-of-bla.num_requests.patch
batman-adv-bla-avoid-null-ptr-deref-for-claim-via-dropped-interface.patch
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-iv-recover-ogm-scheduling-after-forward-packet-error.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-role-confusion-in-tp_list.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tp_meter-directly-shut-down-timer-on-cleanup.patch
batman-adv-tp_meter-fix-race-condition-in-send-error-reporting.patch
batman-adv-tp_meter-fix-tp_vars-reference-leak-in-receiver-shutdown.patch
batman-adv-tt-avoid-empty-vlan-responses.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
batman-adv-tt-fix-toctou-race-for-reported-vlans.patch
batman-adv-tt-prevent-tvlv-entry-number-overflow.patch
batman-adv-tt-reject-oversized-local-tvlv-buffers.patch
batman-adv-tvlv-abort-ogm-send-on-tvlv-append-failure.patch
batman-adv-tvlv-reject-oversized-tvlv-packets.patch
batman-adv-v-stop-ogmv2-on-disabled-interface.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
cpufreq-intel_pstate-use-correct-scaling-factor-on-raptor-lake-e.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-amdgpu-vpe-force-collaborate-sync-after-trap.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-i915-display-copy-color-pipeline-from-plane-in-the-primary-joiner-pipe.patch
drm-i915-psr-apply-intel-dpcd-workaround-when-sdp-on-prior-line-used.patch
drm-msm-fix-shrinker-deadlock.patch
drm-v3d-fix-use-after-free-of-cpu-job-query-arrays-on-error-path.patch
drm-v3d-release-indirect-csd-gem-reference-on-cpu-job-free.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
drm-xe-multi_queue-fix-secondary-queue-error-case.patch
fwctl-pds-validate-rpc-input-size-before-parsing.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
i2c-tegra-fix-pm_runtime-leak-on-mutex_lock-failure.patch
kvm-arm64-vgic-free-private_irqs-when-init-fails-after-allocation.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
kvm-svm-disable-avic-ipi-virtualization-on-hygon-family-18h-erratum-1235.patch
loongarch-kprobes-use-larch_insn_text_copy-to-patch-instructions.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
mm-slub-hold-cpus_read_lock-around-flush_rcu_sheaves_on_cache.patch
phy-exynos5-usbdrd-fix-usb-2.0-hs-phy-tuning-values-for-exynos7870.patch
phy-qcom-edp-add-edp-dp-mode-switch-support.patch
phy-qcom-edp-fix-aux_cfg8-programming-for-dp-mode.patch
phy-qcom-edp-unify-generic-dp-edp-swing-and-pre-emphasis-tables.patch
phy-qcom-qmp-ufs-fix-kaanapali-phy-pll-lock-failure-after-sm8650-g4-fix.patch
phy-tegra-xusb-fix-per-pad-high-speed-termination-calibration.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
riscv-kvm-return-sbi_err_failure-for-pmu_event_info-when-oom.patch
riscv-kvm-return-sbi_err_failure-for-pmu_snapshot_set_shmem-when-oom.patch
s390-cio-restore-gfp_dma-for-chsc-allocation.patch
s390-pai-disable-duplicate-read-of-kernel-pai-counter-value.patch
s390-pai-fix-missing-pai-counter-increments-under-heavy-load.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-ep93xx-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-qup-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch
virt-sev-guest-explicitly-leak-pages-in-unknown-state.patch

6.18-stable patches

added patches:
arm64-probes-handle-probes-on-hinted-conditional-branch-instructions.patch
batman-adv-bla-avoid-double-decrement-of-bla.num_requests.patch
batman-adv-bla-avoid-null-ptr-deref-for-claim-via-dropped-interface.patch
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-iv-recover-ogm-scheduling-after-forward-packet-error.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-role-confusion-in-tp_list.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tp_meter-directly-shut-down-timer-on-cleanup.patch
batman-adv-tp_meter-fix-race-condition-in-send-error-reporting.patch
batman-adv-tp_meter-fix-tp_vars-reference-leak-in-receiver-shutdown.patch
batman-adv-tt-avoid-empty-vlan-responses.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
batman-adv-tt-fix-toctou-race-for-reported-vlans.patch
batman-adv-tt-prevent-tvlv-entry-number-overflow.patch
batman-adv-tt-reject-oversized-local-tvlv-buffers.patch
batman-adv-tvlv-abort-ogm-send-on-tvlv-append-failure.patch
batman-adv-tvlv-reject-oversized-tvlv-packets.patch
batman-adv-v-stop-ogmv2-on-disabled-interface.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-amdgpu-vpe-force-collaborate-sync-after-trap.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-i915-psr-apply-intel-dpcd-workaround-when-sdp-on-prior-line-used.patch
drm-msm-fix-shrinker-deadlock.patch
drm-v3d-fix-use-after-free-of-cpu-job-query-arrays-on-error-path.patch
drm-v3d-release-indirect-csd-gem-reference-on-cpu-job-free.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
fwctl-pds-validate-rpc-input-size-before-parsing.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
kvm-arm64-vgic-free-private_irqs-when-init-fails-after-allocation.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
kvm-svm-disable-avic-ipi-virtualization-on-hygon-family-18h-erratum-1235.patch
loongarch-kprobes-use-larch_insn_text_copy-to-patch-instructions.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
phy-exynos5-usbdrd-fix-usb-2.0-hs-phy-tuning-values-for-exynos7870.patch
phy-qcom-qmp-ufs-fix-kaanapali-phy-pll-lock-failure-after-sm8650-g4-fix.patch
phy-tegra-xusb-fix-per-pad-high-speed-termination-calibration.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
riscv-kvm-return-sbi_err_failure-for-pmu_event_info-when-oom.patch
riscv-kvm-return-sbi_err_failure-for-pmu_snapshot_set_shmem-when-oom.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-ep93xx-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-qup-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch
virt-sev-guest-explicitly-leak-pages-in-unknown-state.patch

6.12-stable patches

added patches:
arm64-probes-handle-probes-on-hinted-conditional-branch-instructions.patch
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tp_meter-fix-race-condition-in-send-error-reporting.patch
batman-adv-tp_meter-fix-tp_vars-reference-leak-in-receiver-shutdown.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-amdgpu-vpe-force-collaborate-sync-after-trap.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-i915-psr-apply-intel-dpcd-workaround-when-sdp-on-prior-line-used.patch
drm-v3d-release-indirect-csd-gem-reference-on-cpu-job-free.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
kvm-arm64-vgic-free-private_irqs-when-init-fails-after-allocation.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
loongarch-kprobes-use-larch_insn_text_copy-to-patch-instructions.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
phy-tegra-xusb-fix-per-pad-high-speed-termination-calibration.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
riscv-kvm-return-sbi_err_failure-for-pmu_snapshot_set_shmem-when-oom.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-ep93xx-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-qup-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch

6.6-stable patches

added patches:
arm64-probes-handle-probes-on-hinted-conditional-branch-instructions.patch
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tp_meter-fix-race-condition-in-send-error-reporting.patch
batman-adv-tp_meter-fix-tp_vars-reference-leak-in-receiver-shutdown.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
loongarch-kprobes-use-larch_insn_text_copy-to-patch-instructions.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
phy-tegra-xusb-fix-per-pad-high-speed-termination-calibration.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-qup-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch

6.1-stable patches

added patches:
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch

5.15-stable patches

added patches:
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch

5.10-stable patches

added patches:
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch

6.12-stable patches

added patches:
af_unix-fix-uaf-read-of-tail-len-in-unix_stream_data_wait.patch
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ice-restore-ptp-rx-timestamp-config-after-ethtool-set-channels.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ipv6-ioam-add-null-check-for-idev-in-ipv6_hop_ioam.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
l2tp-use-list_del_rcu-in-l2tp_session_unhash.patch
lsm-hold-cred_guard_mutex-for-lsm_set_self_attr.patch
octeontx2-af-cgx-add-bounds-check-to-cgx_speed_mbps-index.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
rbd-eliminate-a-race-in-lock_dwork-draining-on-unmap.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
wifi-mac80211-consume-only-present-negotiated-ttlm-maps.patch

6.6-stable patches

added patches:
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch

6.1-stable patches

added patches:
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch

5.15-stable patches

added patches:
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch

5.10-stable patches

added patches:
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch

6.18-stable patches

added patches:
af_unix-fix-uaf-read-of-tail-len-in-unix_stream_data_wait.patch
ice-fix-locking-around-wait_event_interruptible_locked_irq.patch
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ice-fix-vf-queue-configuration-with-low-mtu-values.patch
ice-restore-ptp-rx-timestamp-config-after-ethtool-set-channels.patch
igc-fix-potential-skb-leak-in-igc_fpe_xmit_smd_frame.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ipv6-ioam-add-null-check-for-idev-in-ipv6_hop_ioam.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
l2tp-use-list_del_rcu-in-l2tp_session_unhash.patch
lsm-hold-cred_guard_mutex-for-lsm_set_self_attr.patch
mptcp-pm-fix-add_addr-timer-infinite-retry-on-option-space-insufficient.patch
octeontx2-af-cgx-add-bounds-check-to-cgx_speed_mbps-index.patch
octeontx2-pf-fix-double-free-in-rvu_rep_rsrc_init.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
rbd-eliminate-a-race-in-lock_dwork-draining-on-unmap.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
ring-buffer-flush-and-stop-persistent-ring-buffer-on-panic.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
wifi-iwlwifi-mld-stop-tx-during-firmware-restart.patch
wifi-iwlwifi-mvm-fix-driver-set-tx-rates-on-old-devices.patch
wifi-mac80211-consume-only-present-negotiated-ttlm-maps.patch

7.0-stable patches

added patches:
af_unix-fix-uaf-read-of-tail-len-in-unix_stream_data_wait.patch
ice-fix-locking-around-wait_event_interruptible_locked_irq.patch
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ice-fix-vf-queue-configuration-with-low-mtu-values.patch
ice-restore-ptp-rx-timestamp-config-after-ethtool-set-channels.patch
igc-fix-potential-skb-leak-in-igc_fpe_xmit_smd_frame.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ipv6-ioam-add-null-check-for-idev-in-ipv6_hop_ioam.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
l2tp-use-list_del_rcu-in-l2tp_session_unhash.patch
lsm-hold-cred_guard_mutex-for-lsm_set_self_attr.patch
mptcp-do-not-drop-partial-packets.patch
mptcp-pm-fix-add_addr-timer-infinite-retry-on-option-space-insufficient.patch
mptcp-reset-rcv-wnd-on-disconnect.patch
octeontx2-af-cgx-add-bounds-check-to-cgx_speed_mbps-index.patch
octeontx2-pf-avoid-double-free-of-pool-stack-on-aq-init-failure.patch
octeontx2-pf-fix-double-free-in-rvu_rep_rsrc_init.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
rbd-eliminate-a-race-in-lock_dwork-draining-on-unmap.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
ring-buffer-flush-and-stop-persistent-ring-buffer-on-panic.patch
selftests-mptcp-drop-nanoseconds-width-specifier.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
wifi-iwlwifi-mld-stop-tx-during-firmware-restart.patch
wifi-iwlwifi-mvm-fix-driver-set-tx-rates-on-old-devices.patch
wifi-mac80211-capture-fast-rx-rate-before-mesh-reuses-skb-cb.patch
wifi-mac80211-consume-only-present-negotiated-ttlm-maps.patch

6.12-stable patches

added patches:
cgroup-cpuset-reset-dl-migration-state-on-can_attach-failure.patch
fs-ntfs3-handle-attr_set_size-errors-when-truncating-files.patch
sched_ext-avoid-uaf-in-scx_root_enable_workfn-init-failure-path.patch
sched_ext-fix-missing-warning-in-scx_set_task_state-default-case.patch

6.18-stable patches

added patches:
cgroup-cpuset-reset-dl-migration-state-on-can_attach-failure.patch
fs-ntfs3-handle-attr_set_size-errors-when-truncating-files.patch
net-ethtool-fix-null-pointer-dereference-in-phy_reply_size.patch
net-ethtool-phy-avoid-null-deref-when-phy-driver-is-unbound.patch
sched_ext-avoid-uaf-in-scx_root_enable_workfn-init-failure-path.patch
sched_ext-fix-missing-warning-in-scx_set_task_state-default-case.patch
tracing-fprobe-avoid-kcalloc-in-rcu_read_lock-section.patch
tracing-fprobe-check-the-same-type-fprobe-on-table-as-the-unregistered-one.patch
tracing-fprobe-remove-unused-local-variable.patch
tracing-fprobe-use-ftrace-if-config_dynamic_ftrace_with_args.patch

7.0-stable patches

added patches:
acpi-driver-check-acpi_companion-against-null-during-probe.patch
net-ethtool-fix-null-pointer-dereference-in-phy_reply_size.patch
net-ethtool-phy-avoid-null-deref-when-phy-driver-is-unbound.patch
sched_ext-avoid-uaf-in-scx_root_enable_workfn-init-failure-path.patch
sched_ext-fix-missing-warning-in-scx_set_task_state-default-case.patch

7.0-stable patches

added patches:
acpi-battery-fix-system-wakeup-on-critical-battery-status.patch
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-scarlett2-allow-flash-writes-ending-at-segment-boundary.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_qca-convert-timeout-from-jiffies-to-ms.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-l2cap-ecred_reconfigure-send-packed-pdu-not-stack-pointer.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
io_uring-waitid-clear-waitid-info-before-copying-it-to-userspace.patch
ipv6-ioam-refresh-hdr-pointer-before-ioam6_event.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-null-pointer-dereference-in-proc_show_files.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
ksmbd-validate-sid-in-parent-security-descriptor-during-acl-inheritance.patch
mm-damon-fix-damos_stat-tracepoint-format-for-sz_applied.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
mm-fix-__vm_normal_page-to-handle-missing-support-for-pmd_special-pud_special.patch
mm-memory-fix-spurious-warning-when-unmapping-device-private-exclusive-pages.patch
mm-memory_hotplug-fix-memory-block-reference-leak-on-remove.patch
mm-migrate_device-fix-spinlock-leak-in-migrate_vma_insert_huge_pmd_page.patch
mm-page_alloc-fix-initialization-of-tags-of-the-huge-zero-folio-with-init_on_free.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-devmem-reject-dma-buf-bind-with-non-page-aligned-size-or-sg-length.patch
net-hsr-defer-node-table-free-until-after-rcu-readers.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-mlx5e-fix-use-after-free-in-mlx5e_tx_reporter_timeout_recover.patch
net-phy-skip-eee-advertisement-write-when-autoneg-is-disabled.patch
net-pse-pd-fix-sign-on-enoent-check-in-of_load_pse_pis.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
regulator-tps65219-fix-irq_data.rdev-not-being-assigned.patch
scripts-gdb-mm-cast-untyped-symbols-in-x86_page_ops.patch
selftests-mm-run_vmtests.sh-fix-destructive-tests-invocation.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-client-require-net-admin-for-cifs-swn-netlink.patch
smb-client-use-data_len-for-smb2-read-encrypted-folioq-copy.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
spi-amd-set-correct-bus-number-in-acpi-probe-path.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch
x86-mm-disable-broadcast-tlb-flush-when-pcid-is-disabled.patch

6.18-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-scarlett2-allow-flash-writes-ending-at-segment-boundary.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-l2cap-ecred_reconfigure-send-packed-pdu-not-stack-pointer.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
io_uring-waitid-clear-waitid-info-before-copying-it-to-userspace.patch
ipv6-ioam-refresh-hdr-pointer-before-ioam6_event.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
ksmbd-validate-sid-in-parent-security-descriptor-during-acl-inheritance.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
mm-fix-__vm_normal_page-to-handle-missing-support-for-pmd_special-pud_special.patch
mm-memory-fix-spurious-warning-when-unmapping-device-private-exclusive-pages.patch
mm-memory_hotplug-fix-memory-block-reference-leak-on-remove.patch
mm-page_alloc-fix-initialization-of-tags-of-the-huge-zero-folio-with-init_on_free.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-mlx5e-fix-use-after-free-in-mlx5e_tx_reporter_timeout_recover.patch
net-phy-skip-eee-advertisement-write-when-autoneg-is-disabled.patch
net-pse-pd-fix-sign-on-enoent-check-in-of_load_pse_pis.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
regulator-tps65219-fix-irq_data.rdev-not-being-assigned.patch
selftests-mm-run_vmtests.sh-fix-destructive-tests-invocation.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-client-require-net-admin-for-cifs-swn-netlink.patch
smb-client-use-data_len-for-smb2-read-encrypted-folioq-copy.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
spi-amd-set-correct-bus-number-in-acpi-probe-path.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

6.6-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

6.1-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

5.15-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

5.10-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

6.12-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-l2cap-ecred_reconfigure-send-packed-pdu-not-stack-pointer.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
io_uring-waitid-clear-waitid-info-before-copying-it-to-userspace.patch
ipv6-ioam-refresh-hdr-pointer-before-ioam6_event.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
ksmbd-validate-sid-in-parent-security-descriptor-during-acl-inheritance.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
mm-memory_hotplug-fix-memory-block-reference-leak-on-remove.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-pse-pd-fix-sign-on-enoent-check-in-of_load_pse_pis.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
selftests-mm-run_vmtests.sh-fix-destructive-tests-invocation.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-client-require-net-admin-for-cifs-swn-netlink.patch
smb-client-use-data_len-for-smb2-read-encrypted-folioq-copy.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

5.15-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

5.10-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

7.0-stable patches

added patches:
ata-libata-scsi-do-not-needlessly-defer-commands-when-using-pmp-with-fbs.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-for-ata_defer_port.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-on-pmps-with-cbs.patch
ata-libata-scsi-improve-readability-of-ata_scsi_qc_issue.patch

6.18-stable patches

added patches:
ata-libata-scsi-do-not-needlessly-defer-commands-when-using-pmp-with-fbs.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-for-ata_defer_port.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-on-pmps-with-cbs.patch
ata-libata-scsi-improve-readability-of-ata_scsi_qc_issue.patch

6.12-stable patches

added patches:
ata-libata-scsi-do-not-needlessly-defer-commands-when-using-pmp-with-fbs.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-for-ata_defer_port.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-on-pmps-with-cbs.patch
ata-libata-scsi-improve-readability-of-ata_scsi_qc_issue.patch

7.0-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

6.18-stable patches

added patches:
arm64-dts-broadcom-bcm2712-add-watchdog-dt-node.patch
dt-bindings-soc-bcm-add-bcm2712-compatible.patch
mfd-bcm2835-pm-add-support-for-bcm2712.patch
smb-client-reject-userspace-cifs.spnego-descriptions.patch

6.12-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

6.6-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

6.1-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Revert "Fixes for all trees"

Revert this batch of AUTOSEL commits for now.

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

drop duplicate patches

move queues back

Linux 6.1.174

Linux 5.15.208

Linux 5.10.257

6.1-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch
series

5.15-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch
series

5.10-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch
series

move queues off to the side for a bit...

Linux 7.0.10

Linux 6.18.33

Linux 6.12.91

Linux 6.6.141

7.0-stable patches

added patches:
netfs-fix-potential-uninitialised-var-in-netfs_extract_user_iter.patch

6.18-stable patches

added patches:
netfs-fix-potential-uninitialised-var-in-netfs_extract_user_iter.patch

6.12-stable patches

added patches:
netfs-fix-potential-uninitialised-var-in-netfs_extract_user_iter.patch

6.6-stable patches

added patches:
netfs-fix-potential-uninitialised-var-in-netfs_extract_user_iter.patch

drop sched patch

7.0-stable patches

added patches:
selftests-bpf-remove-test_access_variable_array.patch

6.18-stable patches

added patches:
selftests-bpf-remove-test_access_variable_array.patch

6.6-stable patches

added patches:
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue

drop queue-6.6/net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

drop 4 patches based on RC review feedback

Dropped patches:

- "bpf, riscv: Remove redundant bpf_flush_icache() after pack allocator finalize"
  Queues: 6.12, 6.6
  Reason: build break on riscv — removes the inline bpf_flush_icache()
  definition but the prerequisite (6798668ab195, "riscv, bpf: Remove
  duplicated bpf_flush_icache()") is missing in 6.12/6.6, leaving an
  undefined caller in arch/riscv/net/bpf_jit_comp64.c.
  Report: https://lore.kernel.org/stable/b8ef921f-e2ab-4cfb-b75c-89e4277214cf@oracle.com/

- "fuse: new work queue to periodically invalidate expired dentries"
  Queues: 6.18
  Reason: FUSE maintainer Miklos Szeredi NAK — "This is not stable
  material, and I don't think the dependency is real."
  Report: https://lore.kernel.org/stable/CAOssrKcqmVW3kJ131tRF3LCJVQUtdRB31B5HENDfpgrq6r=jEA@mail.gmail.com/

- "dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused()"  [dependency]
  Queues: 6.18
  Reason: only present to support the dropped workqueue patch (Stable-dep-of: 5a6baf204610).

- "fuse: fix uninit-value in fuse_dentry_revalidate()"  [dependency]
  Queues: 6.18
  Reason: Stable-dep-of relationship to dropped workqueue patch; per
  maintainer the dependency isn't real and a trivial conflict resolution
  is the correct path — fix will be reposted directly to stable.

- "fuse: fix race when disposing stale dentries"  [dependency]
  Queues: 6.18
  Reason: Fixes: ab84ad597386 — cannot apply without the dropped
  workqueue patch (fuse_dentry_tree_work doesn't exist).

- "fuse: make sure dentry is evicted if stale"  [dependency]
  Queues: 6.18
  Reason: Fixes: ab84ad597386 — modifies fuse_dentry_tree_work()
  introduced by the dropped workqueue patch.

- "i3c: master: Fix error codes at send_ccc_cmd"
  Queues: 7.0, 6.18, 6.12, 6.6, 6.1, 5.15, 5.10
  Reason: prerequisite patches called out in the commit message
  ("Move rstdaa/entdaa/bus_init error suppression") are not all
  backported, so the semantics of the change differ from upstream.
  Report: https://lore.kernel.org/stable/a6d725bd-9ed4-4328-b2ba-078f658fd8b2@oracle.com/

- "fuse: fix premature writetrhough request for large folio"
  Queues: 7.0, 6.18
  Reason: Reviewed-by Joanne Koong (author of the parent commit that
  introduced large-folio writethrough support) reports the bug is not
  triggerable as fuse hasn't enabled large folios yet.
  Report: https://lore.kernel.org/stable/CAJnrk1bWJfT5hswsJ3X5HMZ=XLz5MO3pYXg6WkuYYvZ6ccS0Nw@mail.gmail.com/

Signed-off-by: Sasha Levin <sashal@kernel.org>

drop patch

7.0-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

6.18-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

6.12-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

6.6-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

6.1-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch

5.15-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch

5.10-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch

fuzz cleanup

drop broken virtio patch from 6.12

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue

6.12-stable patches

added patches:
virtio_net-fix-misalignment-bug-in-struct-virtnet_info.patch

drop dependent erofs follow-up after dropping 307210c262a2

In d3dd531213 we dropped "erofs: verify metadata accesses for file-backed
mounts" (upstream 307210c262a2) per Gao Xiang's request (Android SELinux
regression). The follow-up:

  "erofs: fix offset truncation when shifting pgoff on 32-bit platforms"
  (upstream c99493ce409c)

is queued in 7.0/6.18/6.12 and carries

Fixes: 307210c262a2 ("erofs: verify metadata accesses for file-backed mounts")
Its data.c hunk converts

  fpos = index << PAGE_SHIFT;
  err  = rw_verify_area(READ, buf->file, &fpos, PAGE_SIZE);

to use a (loff_t) cast on the shift. That entire rw_verify_area() block
was introduced by 307210c262a2, which is no longer in the queue or in
the corresponding stable bases (stable/linux-{7.0,6.18,6.12}.y do not
contain rw_verify_area in fs/erofs/data.c). The hunk cannot apply.

Drop the follow-up from queue-7.0, queue-6.18, and queue-6.12.

Signed-off-by: Sasha Levin <sashal@kernel.org>

drop 7 patches based on RC review feedback

Dropped patches:

- "rtla: Use str_has_prefix() for prefix checks"
  Queues: 7.0
  Reason: build break -- str_has_prefix() helper (upstream 0f4bc9d67a64)
    not backported to 7.0; reported by RTLA co-maintainer Tomas Glozar.
  Report: https://lore.kernel.org/stable/CAP4=nvTUdVQN8j_qJnfytGOJMa4LaX2h3Z9-cmDopBhKE87_nA@mail.gmail.com/

- "rtla/trace: Fix write loop in trace_event_save_hist()"  [dependency]
  Queues: 7.0
  Reason: queued atop the dropped str_has_prefix conversion; Tomas
    offered to send a rebased version.

- "rtla: Simplify code by caching string lengths"  [dependency]
  Queues: 7.0
  Reason: sibling Stable-dep-of 4bf4ef5292b9; dropped together with the
    other two rtla patches per Sasha's expanded DROP_WITH_DEPS.

- "libbpf: Stringify errno in log messages in libbpf.c"
  Queues: 6.12
  Reason: build break -- errstr() helper not declared in 6.12 (would
    require c68b6fdc3600 plus a chain of refactors that don't apply
    cleanly). Reported by Salvatore Bonaccorso and Florian Fainelli.
  Reports:
    https://lore.kernel.org/stable/ag4vSWzIUCsRlpKv@eldamar.lan/
    https://lore.kernel.org/stable/54f12da1-32e2-48dc-bf84-3bdaf8ef0f6a@gmail.com/

- "libbpf: Prevent double close and leak of btf objects"  [dependency]
  Queues: 6.12
  Reason: adds additional errstr() call sites; cannot stay without
    the stringify patch.

- "libbpf: Change log level of btf loading error message"  [dependency]
  Queues: 6.12
  Reason: only queued as Stable-dep-of 380044c40b16; loses purpose once
    that target is dropped.

- "erofs: verify metadata accesses for file-backed mounts"
  Queues: 7.0, 6.18, 6.12
  Reason: EROFS maintainer / patch author Gao Xiang requested drop
    across all three trees -- introduces an Android SELinux/permission
    regression and the upstream follow-up fix is still under discussion.
  Reports:
    https://lore.kernel.org/stable/75e6d1c8-e989-4eb7-aca3-37a40318e888@linux.alibaba.com/
    https://lore.kernel.org/stable/5a4afec4-fe39-419e-8b2b-4e9901eb93be@linux.alibaba.com/
    https://lore.kernel.org/stable/ag3qlMOcTYM2FBUQ@debian/
    https://lore.kernel.org/stable/ag3txj1lJNTGZQjp@debian/
    https://lore.kernel.org/stable/ag37lbajmtyv9xBd@debian/

- "sched: Make class_schedulers avoid pushing current, and get rid of
  proxy_tag_curr()"
  Queues: 6.18
  Reason: patch author John Stultz asked to drop from 6.18-stable -- it
    only matters for the EXPERT-gated, still-in-development proxy-exec
    feature, and the downside of not taking it is non-ideal balancing.
    Keeping it queued in 7.0 per Stultz's literal request scope.
  Report: https://lore.kernel.org/stable/CANDhNCpZWMk6GWubK8+E0rxKUqtuhOtrjqxunS=Kmho-UbR0UA@mail.gmail.com/

- "riscv: misaligned: Make enabling delegation depend on NONPORTABLE"
  Queues: 7.0, 6.18
  Reason: patch author Vivian Wang retracts her Cc: stable request --
    boot-time crashes seen on 7.1-rc / linux-next on some hardware /
    firmware combinations; asks for time to investigate before
    re-submitting.
  Report: https://lore.kernel.org/stable/99c8c715-b37f-4f2a-8100-5ea4970ff34d@iscas.ac.cn/

- "perf tools: Fix module symbol resolution for non-zero .text sh_addr"
  Queues: 6.6, 6.1, 5.15, 5.10
  Reason: build break -- patch calls dso__rel() inline which doesn't
    exist on these versions (the underlying dso refcount refactor was
    never backported). 7.0/6.18/6.12 have the inline and remain queued.
    Reported by Florian Fainelli.
  Report: https://lore.kernel.org/stable/fbe52f15-5b34-4e03-88e0-005ae6200a60@gmail.com/

Signed-off-by: Sasha Levin <sashal@kernel.org>

7.0-stable patches

added patches:
tracefs-removed-unused-ret-variable-in-eventfs_iterate.patch
workqueue-annotate-alloc_workqueue_va-with-__printf-1-0.patch

7.0-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

6.18-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

6.12-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

6.6-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

6.1-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

5.15-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

5.10-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch