Hello:

This series was applied to netdev/net.git (main)
by Florian Westphal [off-list ref]:

On Tue, 30 Jun 2026 06:52:35 +0200 you wrote:

There are occasional LLM hints wrt. leaking uninitialized data to
userspace via ctnetlink.  Just zero at allocation time,
expectations are not frequently used these days.

Intentionally keeps _init as-is because we could theoretically
support re-init, so add the missing exp->dir there.

[...]

Here is the summary with links:
  - [net,1/9] netfilter: nf_conntrack_expect: zero at allocation time
    https://git.kernel.org/netdev/net/c/241ccd2fed90
  - [net,2/9] netfilter: nft_set_pipapo: don't leak bad clone into future transaction
    https://git.kernel.org/netdev/net/c/47e65eff5069
  - [net,3/9] netfilter: ipset: fix race between dump and ip_set_list resize
    https://git.kernel.org/netdev/net/c/7cd9103283b2
  - [net,4/9] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
    https://git.kernel.org/netdev/net/c/e5e24a365a5e
  - [net,5/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master
    https://git.kernel.org/netdev/net/c/bf5355cfdede
  - [net,6/9] netfilter: nft_fib: reject fib expression on the netdev egress hook
    https://git.kernel.org/netdev/net/c/d07955dd34ec
  - [net,7/9] netfilter: nfnetlink_queue: restrict writes to network header
    https://git.kernel.org/netdev/net/c/54f34607d184
  - [net,8/9] netfilter: nftables: restrict linklayer and network header writes
    https://git.kernel.org/netdev/net/c/df07998dfd40
  - [net,9/9] netfilter: nftables: restrict checkum update offset
    https://git.kernel.org/netdev/net/c/c3716a3c4346

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html