Syzbot CI

Subject	6.18.63-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-11-07 13:44:43 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 6.18 001/869] KVM: VMX: Formally define KVMs "0xdead" exit reason used for failed VM-Enter	[Body]
[PATCH 6.18 002/869] x86/mm/pat: Use pr_warn() for early W^X warnings	[Body]
[PATCH 6.18 003/869] inet: reject unhashed sockets during established lookups	[Body]
[PATCH 6.18 004/869] drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages	[Body]
[PATCH 6.18 005/869] KVM: guest_memfd: Gracefully handle xarray errors when binding a memslot	[Body]
[PATCH 6.18 006/869] mm/truncate: look up the end-edge straddler by index	[Body]
[PATCH 6.18 007/869] staging: rtl8723bs: fix spacing around operators in rtw_recv.c	[Body]
[PATCH 6.18 008/869] staging: rtl8723bs: fix protected RX frame validation in decrypt path	[Body]
[PATCH 6.18 009/869] tcp: Remove timeout arg from reqsk_timeout().	[Body]
[PATCH 6.18 010/869] tcp: accecn: unset ECT if receive or send ACE=0 in AccECN negotiaion	[Body]
[PATCH 6.18 011/869] mptcp: hold MP_JOIN msk ref when cloning reqsk	[Body]
[PATCH 6.18 012/869] virtio_net: atomically disable rx mode work	[Body]
[PATCH 6.18 013/869] pps: generators: dont use the drivers info after unregister	[Body]
[PATCH 6.18 014/869] nvmet: replace use of system_wq with system_percpu_wq	[Body]
[PATCH 6.18 015/869] nvmet-auth: serialize access to DH-HMAC-CHAP state to fix UAF	[Body]
[PATCH 6.18 016/869] rust: irq: declare cfi_encoding for irqreturn	[Body]
[PATCH 6.18 017/869] rust: hrtimer: declare cfi_encoding for hrtimer_restart	[Body]
[PATCH 6.18 018/869] rust: dma: declare cfi_encoding for dma_data_direction	[Body]
[PATCH 6.18 019/869] mm: khugepaged: fix swap entry value to folio_pfn()	[Body]
[PATCH 6.18 020/869] rust: bitmap: fix intra-doc link	[Body]
[PATCH 6.18 021/869] drm/nouveau: reject zero-size notifier object allocation	[Body]
[PATCH 6.18 022/869] drm/nouveau/svm: drain fault handler before freeing svmm	[Body]
[PATCH 6.18 023/869] drm/nouveau/pci: use config-space MSI rearm on MCP79/MCP7A (NVAC)	[Body]
[PATCH 6.18 024/869] drm/nouveau: disable the fence uevent work instead of just cancelling it	[Body]
[PATCH 6.18 025/869] drm/nouveau: cancel the DP IRQ work before freeing the connector	[Body]
[PATCH 6.18 026/869] drm/nouveau: dont dereference outp before checking it in nouveau_dp_irq	[Body]
[PATCH 6.18 027/869] drm/amdgpu: recompute the dw estimate after allocating a new VM update job	[Body]
[PATCH 6.18 028/869] drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG	[Body]
[PATCH 6.18 029/869] iio: adc: ti-ads1100: Fix incorrect reading when datarate changed in single mode	[Body]
[PATCH 6.18 030/869] cpufreq: airoha: fix probe failure with correct error check	[Body]
[PATCH 6.18 031/869] media: streamzap: Add missing rc_unregister_device()	[Body]
[PATCH 6.18 032/869] media: redrat3: Ensure we dont read beyond the end of the packet	[Body]
[PATCH 6.18 033/869] media: redrat3: Ensure all urbs are suspended	[Body]
[PATCH 6.18 034/869] media: sunxi-cir: Ensure no more interrupts can occur before free	[Body]
[PATCH 6.18 035/869] media: meson-ir-tx: Ensure clock is disabled on unbind	[Body]
[PATCH 6.18 036/869] media: meson-ir-tx: Ensure rc_free_device() is called on unbind	[Body]
[PATCH 6.18 037/869] media: meson-ir-tx: Ensure probe error is propagated	[Body]
[PATCH 6.18 038/869] media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled	[Body]
[PATCH 6.18 039/869] media: imx-jpeg: finish the job on device_run() error paths	[Body]
[PATCH 6.18 040/869] microblaze: Fix MB_MANAGER build with older binutils	[Body]
[PATCH 6.18 041/869] udf: Make sure theres enough space for LVID implementation use field	[Body]
[PATCH 6.18 042/869] aio: prevent eventfd/epoll recursion on poll	[Body]
[PATCH 6.18 043/869] ipc/mqueue: release notification resources during inode eviction	[Body]
[PATCH 6.18 044/869] remoteproc: elf_loader: Bound the section header table	[Body]
[PATCH 6.18 045/869] soc: qcom: geni-se: Fix endian conversion for serial_protocol comparison	[Body]
[PATCH 6.18 046/869] soc: qcom: geni-se: Widen fw_size to u32 to prevent wrap-around	[Body]
[PATCH 6.18 047/869] soc: qcom: geni-se: Fix fw_end computed before round-up; propagate size to caller	[Body]
[PATCH 6.18 048/869] soc: qcom: geni-se: Fix write to read-only firmware buffer	[Body]
[PATCH 6.18 049/869] microblaze: reserve the ABI argument-home area in the signal frame	[Body]
[PATCH 6.18 050/869] microblaze: dont clobber r3/r4 restored by rt_sigreturn	[Body]
[PATCH 6.18 051/869] microblaze: restore the ABI argument home area below pt_regs (PTO)	[Body]
[PATCH 6.18 052/869] microblaze: preserve the MSR carry flags across signals	[Body]
[PATCH 6.18 053/869] memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset	[Body]
[PATCH 6.18 054/869] memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT	[Body]
[PATCH 6.18 055/869] memory: renesas-rpc-if: Mark XSPI_CDD1BUF0 as volatile	[Body]
[PATCH 6.18 056/869] wifi: rtw88: fix out-of-bounds CAM write when key table is full	[Body]
[PATCH 6.18 057/869] wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields	[Body]
[PATCH 6.18 058/869] wifi: rtw89: cap firmware section_num before parsing	[Body]
[PATCH 6.18 059/869] platform/x86: int3472: Fix uninitialised variable warning	[Body]
[PATCH 6.18 060/869] clk: mstar: msc313-mpll: fix off-by-one in clock array allocation	[Body]
[PATCH 6.18 061/869] ARM: imx: Fix suspend/resume crash with Clang CFI	[Body]
[PATCH 6.18 062/869] bpf: Fix queue/stack map u32 index overflow	[Body]
[PATCH 6.18 063/869] hte: tegra194: Initialize slice locks before registering chip	[Body]
[PATCH 6.18 064/869] wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup()	[Body]
[PATCH 6.18 065/869] media: i2c: ov8856 : remove ACPI node bypass mechanism	[Body]
[PATCH 6.18 066/869] media: i2c: ov8856: fix debug message to report actual CSI-2 lane count	[Body]
[PATCH 6.18 067/869] mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table	[Body]
[PATCH 6.18 068/869] mtd: spi-nor: sfdp: check the length of the SCCR map	[Body]
[PATCH 6.18 069/869] mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption	[Body]
[PATCH 6.18 070/869] fs_pin: publish pins with RCU list helpers	[Body]
[PATCH 6.18 071/869] fs: make sure to call fsnotify_inoderemove() only once when inode is dead	[Body]
[PATCH 6.18 072/869] arm64: dts: ti: k3-am62-verdin: Set MMC clock pins as OUTPUT	[Body]
[PATCH 6.18 073/869] thermal: intel: powerclamp: Reject invalid window_size values	[Body]
[PATCH 6.18 074/869] thermal: intel: int340x: Fix temperature selection around 0 C	[Body]
[PATCH 6.18 075/869] isofs: fix Rock Ridge CE extent validation on multisession media	[Body]
[PATCH 6.18 076/869] arm64: dts: mediatek: mt7986: correct timer frequency	[Body]
[PATCH 6.18 077/869] media: cx231xx-audio: drain wq_trigger before audio fini	[Body]
[PATCH 6.18 078/869] media: cx231xx: Fix cleanup path on failure	[Body]
[PATCH 6.18 079/869] firewire: core: fix source bus ID detection for AT context in big-endian systems	[Body]
[PATCH 6.18 080/869] media: au0828: Free URBs when starting DVB streaming fails	[Body]
[PATCH 6.18 081/869] media: i2c: tc358743: add missing color-space strings	[Body]
[PATCH 6.18 082/869] media: go7007: bound EZ-USB I2C transfers to the usb_buf size	[Body]
[PATCH 6.18 083/869] media: saa7146: Initialize interrupt lock before requesting IRQ	[Body]
[PATCH 6.18 084/869] media: vim2m: keep transaction buffer count stable while streaming	[Body]
[PATCH 6.18 085/869] media: vicodec: fix out-of-bounds write on under-rounded coded dimensions	[Body]
[PATCH 6.18 086/869] media: vicodec: make encoder CAPTURE dimensions read-only	[Body]
[PATCH 6.18 087/869] media: vidtv: fix frontend reference leak on unbind	[Body]
[PATCH 6.18 088/869] media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail	[Body]
[PATCH 6.18 089/869] media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA	[Body]
[PATCH 6.18 090/869] staging: media: av7110: fix corrupted BER reporting in sp8870	[Body]
[PATCH 6.18 091/869] staging: media: av7110: fix sp8870 initialization failure state	[Body]
[PATCH 6.18 092/869] media: m2m-deinterlace: fix default capture field	[Body]
[PATCH 6.18 093/869] ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+	[Body]
[PATCH 6.18 094/869] perf powerpc-vpadtl: Fix off-by-one in auxtrace_info minimum size check	[Body]
[PATCH 6.18 095/869] media: microchip-isc: fix awb_mutex and lock lifecycle	[Body]
[PATCH 6.18 096/869] media: microchip-isc: synchronize the IRQ before disabling clocks on stop	[Body]
[PATCH 6.18 097/869] media: microchip-isc: disable histogram and flush AWB work on teardown	[Body]
[PATCH 6.18 098/869] media: microchip-isc: do not touch WB registers when not streaming	[Body]
[PATCH 6.18 099/869] media: microchip-isc: fix PM runtime leak in AWB work handler	[Body]
[PATCH 6.18 100/869] media: microchip-isc: dont sleep in the clk .is_enabled callback	[Body]
[PATCH 6.18 101/869] media: stm32: csi: correct remote pad retrieval	[Body]
[PATCH 6.18 102/869] media: stm32: csi: unregister async notifier on cleanup	[Body]
[PATCH 6.18 103/869] mtd: rawnand: sunxi: reject ECC maximization on small pages	[Body]
[PATCH 6.18 104/869] media: adv7604: avoid negative array index in log_status when cp_read fails	[Body]
[PATCH 6.18 105/869] media: stv090x: bound DiSEqC reply length to msg[] size	[Body]
[PATCH 6.18 106/869] media: stv0900: bound DiSEqC reply length to msg[] size	[Body]
[PATCH 6.18 107/869] media: synopsys: hdmirx: use request_any_context_irq() for 5V detection IRQ	[Body]
[PATCH 6.18 108/869] media: nuvoton: npcm-video: quiesce VCD IRQ before teardown	[Body]
[PATCH 6.18 109/869] drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties	[Body]
[PATCH 6.18 110/869] dmaengine: altera-msgdma: initialize state before requesting IRQ	[Body]
[PATCH 6.18 111/869] ACPI: pfr_update: zero-initialize capability query result	[Body]
[PATCH 6.18 112/869] hte: tegra194-test: shut down timer before GPIO release	[Body]
[PATCH 6.18 113/869] power: supply: qcom_smbx: include base when petting watchdog	[Body]
[PATCH 6.18 114/869] power: supply: qcom_smbx: test battery health status bits	[Body]
[PATCH 6.18 115/869] power: supply: qcom_smbx: fix float voltage selector	[Body]
[PATCH 6.18 116/869] power: supply: qcom_smbx: validate battery float voltage	[Body]
[PATCH 6.18 117/869] power: supply: qcom_smbx: notify battery overvoltage recovery	[Body]
[PATCH 6.18 118/869] power: supply: bq27xxx: synchronize work cancellation on suspend	[Body]
[PATCH 6.18 119/869] power: supply: bq27xxx: Ensure poll work is cancelled on remove	[Body]
[PATCH 6.18 120/869] iio: imu: inv_icm42600: fix odr change not caught in certain cases	[Body]
[PATCH 6.18 121/869] sched/fair: Reset NUMA fault locality after scan period update	[Body]
[PATCH 6.18 122/869] media: vivid: round the height down to the vertical subsampling factor	[Body]
[PATCH 6.18 123/869] media: cx231xx: preserve I2C transfer length	[Body]
[PATCH 6.18 124/869] media: vivid: cancel svid ctrl work on release	[Body]
[PATCH 6.18 125/869] media: vicodec: zero-initialize stateful decoder heap buffers	[Body]
[PATCH 6.18 126/869] crypto: atmel-tdes - zero-initialize device state	[Body]
[PATCH 6.18 127/869] crypto: atmel-aes - fix AADLENR for standalone GHASH	[Body]
[PATCH 6.18 128/869] lib/842: reject output overflows from index and short data	[Body]
[PATCH 6.18 129/869] lib/842: require a complete history block for repeat templates	[Body]
[PATCH 6.18 130/869] crypto: ccp - Initialize DBC ioctl mutex before registering device	[Body]
[PATCH 6.18 131/869] PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier()	[Body]
[PATCH 6.18 132/869] affs: validate blocks before freeing them	[Body]
[PATCH 6.18 133/869] dm vdo indexer: prevent delta list overflow on load	[Body]
[PATCH 6.18 134/869] dm vdo indexer: validate record page numbers better	[Body]
[PATCH 6.18 135/869] f2fs: force out-place update for all writes on compressed file	[Body]
[PATCH 6.18 136/869] f2fs: compress: fix to handle race between truncate and writeback	[Body]
[PATCH 6.18 137/869] ata: ahci_st: Do not ignore errors when getting the reset controls	[Body]
[PATCH 6.18 138/869] ata: ahci_st: Assert the power down reset in the probe() error path	[Body]
[PATCH 6.18 139/869] ata: libahci: Free the IRQs when activating a multi-IRQ host fails	[Body]
[PATCH 6.18 140/869] ata: libata: Do not leave ata_host_stop() registered when activation fails	[Body]
[PATCH 6.18 141/869] media: i2c: alvium-csi2: balance runtime PM usage count on remove	[Body]
[PATCH 6.18 142/869] media: i2c: ov2735: fix power cleanup on remove	[Body]
[PATCH 6.18 143/869] platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str()	[Body]
[PATCH 6.18 144/869] ntfs3: bound index head insertions by buffer capacity	[Body]
[PATCH 6.18 145/869] crypto: atmel-tdes - sync output bounce buffer before DMA	[Body]
[PATCH 6.18 146/869] usb: fotg210: validate endpoint index in ep0 handlers	[Body]
[PATCH 6.18 147/869] ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe()	[Body]
[PATCH 6.18 148/869] ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id()	[Body]
[PATCH 6.18 149/869] iio: accel: kxcjk-1013: Disable autosuspend on remove	[Body]
[PATCH 6.18 150/869] iio: accel: mma9551: disable autosuspend on remove	[Body]
[PATCH 6.18 151/869] iio: accel: mma9553: disable autosuspend on remove	[Body]
[PATCH 6.18 152/869] iio: adc: at91-sama5d2: disable autosuspend on remove	[Body]
[PATCH 6.18 153/869] md/raid5: track disks array size to fix extra_page leak on error paths	[Body]
[PATCH 6.18 154/869] md/raid5: fix NULL pointer dereference in raid5_free_percpu	[Body]
[PATCH 6.18 155/869] md/raid5: validate payload size before calculating payload_len	[Body]
[PATCH 6.18 156/869] drm/panic: Do not use un-escaped URL as format string	[Body]
[PATCH 6.18 157/869] drm/panic: Test address from kmap op for NULL	[Body]
[PATCH 6.18 158/869] spi: spi-qpic-snand: publish the ECC context to snandc->qspi	[Body]
[PATCH 6.18 159/869] cpufreq: conservative: Restrict deferred downscaling to low load	[Body]
[PATCH 6.18 160/869] nilfs2: force clear dirty state when restoring from the shadow map	[Body]
[PATCH 6.18 161/869] regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling()	[Body]
[PATCH 6.18 162/869] regulator: core: Fix rdev reference leak in regulator_resolve_supply()	[Body]
[PATCH 6.18 163/869] PCI: Skip Target Speed quirk on clamped ports with no link	[Body]
[PATCH 6.18 164/869] crypto: zynqmp-sha - fix NULL pointer dereference in init_tfm	[Body]
[PATCH 6.18 165/869] crypto: omap-des - fix crypto engine cleanup	[Body]
[PATCH 6.18 166/869] ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect()	[Body]
[PATCH 6.18 167/869] fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs	[Body]
[PATCH 6.18 168/869] regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable()	[Body]
[PATCH 6.18 169/869] iio: accel: adis16201: fix channel order for buffer mode	[Body]
[PATCH 6.18 170/869] iio: imu: inv_icm42600: force accel odr change when switching power mode	[Body]
[PATCH 6.18 171/869] iio: light: apds9306: fix default sampling frequency definition	[Body]
[PATCH 6.18 172/869] ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0	[Body]
[PATCH 6.18 173/869] PCI: pciehp: Make pciehp_poll_mode parameter read-only	[Body]
[PATCH 6.18 174/869] i3c: master: Fix out-of-bounds read in DMA bounce buffer setup	[Body]
[PATCH 6.18 175/869] i3c: mipi-i3c-hci: Bounce short reads irrespective of the IOMMU	[Body]
[PATCH 6.18 176/869] signalfd: dont dequeue the forced fatal signals	[Body]
[PATCH 6.18 177/869] seccomp: restore knotif->state when SECCOMP_ADDFD_FLAG_SEND is interrupted	[Body]
[PATCH 6.18 178/869] staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error	[Body]
[PATCH 6.18 179/869] leds: ktd2692: Pass context to regulator cleanup	[Body]
[PATCH 6.18 180/869] media: ene_ir: Ensure teardown is done in the correct order	[Body]
[PATCH 6.18 181/869] media: serial_ir: Fix race condition where timer can be re-armed	[Body]
[PATCH 6.18 182/869] media: ir_toy: Validate the maximum tx carrier	[Body]
[PATCH 6.18 183/869] media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse()	[Body]
[PATCH 6.18 184/869] ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv()	[Body]
[PATCH 6.18 185/869] arm64: dts: ti: k3-am62a: Fix MMC0_CLK register address	[Body]
[PATCH 6.18 186/869] arm64: dts: ti: k3-am62a7-sk: Set eMMC clock pin as OUTPUT	[Body]
[PATCH 6.18 187/869] arm64: dts: ti: k3-am62a7-sk: Set SD clock pin as OUTPUT	[Body]
[PATCH 6.18 188/869] arm64: dts: ti: k3-am62a-phycore-som: Set eMMC clock pin as OUTPUT	[Body]
[PATCH 6.18 189/869] arm64: dts: ti: k3-am62-lp-sk: Set eMMC clock pins as OUTPUT	[Body]
[PATCH 6.18 190/869] arm64: dts: ti: k3-am62-pocketbeagle2: Set SD clock pin as OUTPUT	[Body]
[PATCH 6.18 191/869] arm64: dts: ti: k3-am625-beagleplay: Set MMC clock pins as OUTPUT	[Body]
[PATCH 6.18 192/869] arm64: dts: ti: k3-am62x-sk-common: Set SD clock pin as OUTPUT	[Body]
[PATCH 6.18 193/869] arm64: dts: ti: k3-am625-sk-common: Set eMMC clock pin as OUTPUT	[Body]
[PATCH 6.18 194/869] arm64: dts: ti: k3-am62-phycore-som: Set eMMC clock pin as OUTPUT	[Body]
[PATCH 6.18 195/869] arm64: dts: ti: k3-am62x-phyboard-lyra: Set SD clock pin as OUTPUT	[Body]
[PATCH 6.18 196/869] drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable()	[Body]
[PATCH 6.18 197/869] cpufreq/amd-pstate: Skip auto_sel write when it already matches the mode	[Body]
[PATCH 6.18 198/869] nilfs2: fix checkpoint root lifetime on sysfs errors	[Body]
[PATCH 6.18 199/869] EDAC/i10nm: Fix mdev reference leak in i10nm_get_ddr_munits()	[Body]
[PATCH 6.18 200/869] md: validate bblog_size when loading v1.x badblocks metadata	[Body]
[PATCH 6.18 201/869] crypto: qat - fix error source for QAT GEN6 transmit interface faults	[Body]
[PATCH 6.18 202/869] crypto: amlogic - Fix IRQ handler return value and fallthrough logic	[Body]
[PATCH 6.18 203/869] crypto: hisilicon/hpre - fix pointer dereference before length check	[Body]
[PATCH 6.18 204/869] crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer	[Body]
[PATCH 6.18 205/869] crypto: hisilicon/hpre - fix ECDH destination DMA mapping	[Body]
[PATCH 6.18 206/869] crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent	[Body]
[PATCH 6.18 207/869] crypto: qat - zero the VF migration state buffer on save	[Body]
[PATCH 6.18 208/869] media: cec: extron: clear response tail before dispatch	[Body]
[PATCH 6.18 209/869] media: v4l2-ctrls: do nothing if controls[0] == NULL in cluster functions	[Body]
[PATCH 6.18 210/869] media: marvell: manage the MMP camera clock provider	[Body]
[PATCH 6.18 211/869] media: go7007: unregister the I2C adapter on USB probe failure	[Body]
[PATCH 6.18 212/869] media: cx18: Disable PCI device on probe failure	[Body]
[PATCH 6.18 213/869] media: tw68: balance PCI enable on cleanup	[Body]
[PATCH 6.18 214/869] media: adv7180: Initialize mutex before ancillary clients	[Body]
[PATCH 6.18 215/869] media: au0828: Fix media device leak in au0828_usb_probe()	[Body]
[PATCH 6.18 216/869] media: vpif_capture: Fix i2c adapter reference leak in vpif_probe()	[Body]
[PATCH 6.18 217/869] media: vpif_display: Fix i2c adapter reference leak in vpif_probe()	[Body]
[PATCH 6.18 218/869] media: synopsys: hdmirx: fetch colordepth before calculating pixelclock	[Body]
[PATCH 6.18 219/869] media: atmel-isi: release unregistered video device on remove	[Body]
[PATCH 6.18 220/869] ASoC: fsl_xcvr: free IRQ before canceling reset work	[Body]
[PATCH 6.18 221/869] memory: stm32_omm: fix child clock leak on set_amcr() error path	[Body]
[PATCH 6.18 222/869] arm64: dts: freescale: imx8mm-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names	[Body]
[PATCH 6.18 223/869] arm64: dts: freescale: imx8mp-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names	[Body]
[PATCH 6.18 224/869] arm64: dts: freescale: imx8mp-toradex-smarc: fix SMARC_SLEEP# gpio-line-names typo	[Body]
[PATCH 6.18 225/869] arm64: dts: freescale: imx8mp-verdin-yavia: fix external GPIOs	[Body]
[PATCH 6.18 226/869] clk: qcom: gcc-ipq5018: mark gpll0_main clock as critical	[Body]
[PATCH 6.18 227/869] drm/panel: ebbg-ft8719: Set prepare_prev_first	[Body]
[PATCH 6.18 228/869] mfd: da903x: Cancel IRQ work during teardown	[Body]
[PATCH 6.18 229/869] mfd: Fix MAX77705 dependency on regmap	[Body]
[PATCH 6.18 230/869] mfd: wcd934x: set DMA mask on parent to silence "DMA mask not set"	[Body]
[PATCH 6.18 231/869] mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral	[Body]
[PATCH 6.18 232/869] hwmon: (k10temp) Stop matching Hygon devices	[Body]
[PATCH 6.18 233/869] perf loongarch: Fix discarded const qualifier in _get_field()	[Body]
[PATCH 6.18 234/869] nilfs2: fix deadlock between nilfs_evict_inode() and find_inode()	[Body]
[PATCH 6.18 235/869] kobject: fix out-of-bounds access in kobject_action_type()	[Body]
[PATCH 6.18 236/869] ASoC: Intel: atom: Fix platform device leak on probe failure	[Body]
[PATCH 6.18 237/869] ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls	[Body]
[PATCH 6.18 238/869] clk: mvebu: ap-cpu-clk: Assign .num before accessing .hws	[Body]
[PATCH 6.18 239/869] regulator: core: Fix coupled regulators reference leak on removal	[Body]
[PATCH 6.18 240/869] hwmon: (lm95245) Fix negative temperature conversion	[Body]
[PATCH 6.18 241/869] fuse: dont drop destination page cache on a zero byte copy reply	[Body]
[PATCH 6.18 242/869] platform/x86/intel/pmt: Block mmap when callback is present	[Body]
[PATCH 6.18 243/869] mtd: rawnand: nuvoton: fix clock cleanup on probe failure	[Body]
[PATCH 6.18 244/869] mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init()	[Body]
[PATCH 6.18 245/869] mtd: maps: pci: balance PCI enable on cleanup	[Body]
[PATCH 6.18 246/869] mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device	[Body]
[PATCH 6.18 247/869] mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one()	[Body]
[PATCH 6.18 248/869] mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx()	[Body]
[PATCH 6.18 249/869] mtd: maps: l440gx: Fix double put of the PM device in init_l440gx()	[Body]
[PATCH 6.18 250/869] mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb()	[Body]
[PATCH 6.18 251/869] mtd: Call get_wunit() on the master partition	[Body]
[PATCH 6.18 252/869] hwmon: (coretemp) Refresh the temperature on the first read	[Body]
[PATCH 6.18 253/869] dcache: report a Tasks-RCU quiescent state in dentry_kill()	[Body]
[PATCH 6.18 254/869] ASoC: sdw_utils: clear stale RT711 device reference on exit	[Body]
[PATCH 6.18 255/869] ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status()	[Body]
[PATCH 6.18 256/869] peci: aspeed: Initialize state before requesting IRQ	[Body]
[PATCH 6.18 257/869] peci: npcm: Initialize state before requesting IRQ	[Body]
[PATCH 6.18 258/869] MIPS: mm: align hugetlb mappings in arch_get_unmapped_area()	[Body]
[PATCH 6.18 259/869] MIPS: mm: do not write a huge TLB entry when the probe misses	[Body]
[PATCH 6.18 260/869] netfilter: ctnetlink: fix inverted IPv6 address match in dump filter	[Body]
[PATCH 6.18 261/869] arm64: dts: qcom: sdm845-xiaomi-beryllium: Extend the xbl_mem region	[Body]
[PATCH 6.18 262/869] arm64: dts: qcom: sdm845-xiaomi-polaris: Extend the xbl_mem region	[Body]
[PATCH 6.18 263/869] arm64: dts: qcom: ipq9574: Wire up USB3 PHY PIPE clock to GCC	[Body]
[PATCH 6.18 264/869] iommu/vt-d: Avoid out-of-range shift in qi_desc_dev_iotlb_pasid()	[Body]
[PATCH 6.18 265/869] ALSA: mpu401: shut down timer before freeing MPU	[Body]
[PATCH 6.18 266/869] ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status()	[Body]
[PATCH 6.18 267/869] iio: dac: ad5755: validate SPI match data	[Body]
[PATCH 6.18 268/869] iio: frequency: adf4377: reject devices without match data	[Body]
[PATCH 6.18 269/869] iio: imu: adis16400: validate SPI match data	[Body]
[PATCH 6.18 270/869] iio: potentiometer: x9250: reject devices without match data	[Body]
[PATCH 6.18 271/869] iio: pressure: bmp280: validate SPI match data	[Body]
[PATCH 6.18 272/869] iio: adc: ad7606: reject devices without match data	[Body]
[PATCH 6.18 273/869] iio: adc: max11205: reject devices without match data	[Body]
[PATCH 6.18 274/869] iio: adc: mcp3911: reject devices without match data	[Body]
[PATCH 6.18 275/869] iio: adc: ti-adc128s052: validate SPI match data	[Body]
[PATCH 6.18 276/869] iio: accel: adxl313: reject devices without match data	[Body]
[PATCH 6.18 277/869] iio: accel: adxl380: reject devices without match data	[Body]
[PATCH 6.18 278/869] iio: adc: stm32: fix minimum sampling time values	[Body]
[PATCH 6.18 279/869] spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup()	[Body]
[PATCH 6.18 280/869] fs/ntfs3: fix integer overflow in find_log_rec() causing OOB read	[Body]
[PATCH 6.18 281/869] cxl/acpi: Check ACPI companion before use	[Body]
[PATCH 6.18 282/869] media: qcom: camss: vfe-17x: Fix write master buffer done being dropped	[Body]
[PATCH 6.18 283/869] media: qcom: camss: vfe-17x: Fix write master selection for RDI lines	[Body]
[PATCH 6.18 284/869] media: qcom: camss: vfe: Fix VFE reset while another line is streaming	[Body]
[PATCH 6.18 285/869] media: qcom: camss: Add "gcc_axi_hf" to 8775p VFE lite clock lists	[Body]
[PATCH 6.18 286/869] media: venus: Fix iova allocation from restrict region	[Body]
[PATCH 6.18 287/869] media: iris: Fix bus_info prefix in VIDIOC_QUERYCAP	[Body]
[PATCH 6.18 288/869] media: iris: Fix frame interval enumeration for non-divisor framerates	[Body]
[PATCH 6.18 289/869] ALSA: sgio2audio: Only free successfully requested IRQs	[Body]
[PATCH 6.18 290/869] m68k: dmasound: Keep the Q40 IRQ handler registered	[Body]
[PATCH 6.18 291/869] ALSA: core: Check shutdown flag at D0 power-state, too	[Body]
[PATCH 6.18 292/869] clk: starfive: jh7110-isp: fix refcount leak in jh7110_ispcrg_probe()	[Body]
[PATCH 6.18 293/869] pseries/plpks: fix error handling in plpks_read_var()	[Body]
[PATCH 6.18 294/869] pseries/plpks: validate input to plpks_signed_update_var()	[Body]
[PATCH 6.18 295/869] pseries/plpks: clear sensitive PLPKS buffers	[Body]
[PATCH 6.18 296/869] pseries/plpks: clear signed update authentication buffer	[Body]
[PATCH 6.18 297/869] pseries/plpks: clear SED key data after use	[Body]
[PATCH 6.18 298/869] ASoC: pcm6240: do not free an unrequested IRQ	[Body]
[PATCH 6.18 299/869] nilfs2: clear dirty flag on bdev buffers on log write failure	[Body]
[PATCH 6.18 300/869] nilfs2: ignore non-fatal signals during synchronous log write wait	[Body]
[PATCH 6.18 301/869] pwm: tiehrpwm: Clear period on disable to allow reconfiguration	[Body]
[PATCH 6.18 302/869] IB/hfi1: Shutdown self-rearming timers before freeing	[Body]
[PATCH 6.18 303/869] i3c: master: adi: free the IRQ before unregistering the master	[Body]
[PATCH 6.18 304/869] drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure	[Body]
[PATCH 6.18 305/869] drm/msm/hdmi: Handle msm_hdmi_power_on() errors during .atomic_pre_enable()	[Body]
[PATCH 6.18 306/869] drm/msm/hdmi_bridge: Correct poweroff/audio cleanup order in post_disable	[Body]
[PATCH 6.18 307/869] drm/msm/dsi: Fix VM leak in dsi_tx_buf_alloc_6g()	[Body]
[PATCH 6.18 308/869] staging: greybus: uart: fix racy TIOCMIWAIT implementation	[Body]
[PATCH 6.18 309/869] staging: rtl8723bs: fix RX buffer OOB write from device-reported length	[Body]
[PATCH 6.18 310/869] media: tw686x: fix V4L2 device lifetime on probe failure	[Body]
[PATCH 6.18 311/869] media: pvrusb2: Fix USB parent device leak in class_dev_create()	[Body]
[PATCH 6.18 312/869] media: rtl28xxu: fix SDR platform device leak	[Body]
[PATCH 6.18 313/869] media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler	[Body]
[PATCH 6.18 314/869] media: em28xx: fix double free in em28xx_alloc_urbs	[Body]
[PATCH 6.18 315/869] dm: fix a bug in dm_accept_partial_bio	[Body]
[PATCH 6.18 316/869] dm-writecache: report I/O error if flush failed	[Body]
[PATCH 6.18 317/869] dm-writecache: fix a quirk in statistics	[Body]
[PATCH 6.18 318/869] dm-writecache: fix a crash if we attempt to use non-dax device	[Body]
[PATCH 6.18 319/869] dm-writecache: fix uncommitted_blocks underflow	[Body]
[PATCH 6.18 320/869] dm-writecache: fix REQ_FUA processing	[Body]
[PATCH 6.18 321/869] KVM: arm64: Fix MMFR0 TGRAN advertisement for pVMs	[Body]
[PATCH 6.18 322/869] pps: generators: stop the generator on unregister	[Body]
[PATCH 6.18 323/869] block: drop the cached plug time when blk_add_rq_to_plug() flushes	[Body]
[PATCH 6.18 324/869] block: amiflop: synchronize flush timer before track flush	[Body]
[PATCH 6.18 325/869] PCI: Disable MSI for ULi M1575 EHCI controller	[Body]
[PATCH 6.18 326/869] media: uvcvideo: Fix NULL deref on events for uninitialized controls	[Body]
[PATCH 6.18 327/869] crypto: caam - fix double-free in caam_rsa_set_priv_key_form()	[Body]
[PATCH 6.18 328/869] hwrng: amd - report partial reads in non-blocking mode	[Body]
[PATCH 6.18 329/869] hwrng: ba431 - fix reported byte count	[Body]
[PATCH 6.18 330/869] hwrng: core - reject unknown RNG names	[Body]
[PATCH 6.18 331/869] crypto: nx - validate ignore before subtracting in decompress	[Body]
[PATCH 6.18 332/869] crypto: ecc - Handle exceptional points in Shamir multiplication	[Body]
[PATCH 6.18 333/869] KVM: arm64: Validate the host vCPUs VM before reading it under pKVM	[Body]
[PATCH 6.18 334/869] x86/bugs: Fix CONFIG_MITIGATION_RETPOLINE=n mitigation reporting	[Body]
[PATCH 6.18 335/869] KVM: arm64: vgic-v3: Undo assignment on iodev registration failure	[Body]
[PATCH 6.18 336/869] soc: samsung: exynos-pmu: fix error paths in cpuhotplug/idle states setup	[Body]
[PATCH 6.18 337/869] KVM: arm64: vgic-v3: Roll back assignments from the new region	[Body]
[PATCH 6.18 338/869] media: imagination: Fix value clamping in calculate_qp_tables	[Body]
[PATCH 6.18 339/869] media: v4l2-common: Fix P010 format info	[Body]
[PATCH 6.18 340/869] media: sti: delta: use unaligned accessors for MJPEG SOF fields	[Body]
[PATCH 6.18 341/869] media: chips-media: wave5: Handle polling IRQ thread failure	[Body]
[PATCH 6.18 342/869] media: chips-media: wave5: Balance runtime PM on encoder close errors	[Body]
[PATCH 6.18 343/869] media: chips-media: wave5: Check decoder qbuf runtime resume	[Body]
[PATCH 6.18 344/869] media: meson: vdec: size capture planes from the aligned canvas	[Body]
[PATCH 6.18 345/869] media: amphion: drain message work before releasing core state	[Body]
[PATCH 6.18 346/869] media: amphion: prevent unbind while video instances are open	[Body]
[PATCH 6.18 347/869] media: mediatek: vpu: free IRQ before destroying watchdog workqueue	[Body]
[PATCH 6.18 348/869] media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init()	[Body]
[PATCH 6.18 349/869] media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker()	[Body]
[PATCH 6.18 350/869] media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker()	[Body]
[PATCH 6.18 351/869] media: mediatek: vcodec: destroy core workqueue on remove	[Body]
[PATCH 6.18 352/869] media: mediatek: vpu: release reserved memory on remove	[Body]
[PATCH 6.18 353/869] media: verisilicon: rockchip: Fix leaks in init	[Body]
[PATCH 6.18 354/869] media: mediatek: jpeg: retry HW selection after successful wait	[Body]
[PATCH 6.18 355/869] media: vicodec: fix NULL deref on oversized frame	[Body]
[PATCH 6.18 356/869] media: hantro: Harden MPEG-2 control access against NULL	[Body]
[PATCH 6.18 357/869] media: hantro: release runtime resources when device_run fails	[Body]
[PATCH 6.18 358/869] media: amphion: fix runtime PM imbalance on probe failure	[Body]
[PATCH 6.18 359/869] media: hantro: disable runtime PM before hardware teardown	[Body]
[PATCH 6.18 360/869] power: supply: core: Honor supplied-from with CONFIG_OF=y	[Body]
[PATCH 6.18 361/869] fsverity: hoist statx reporting of fs-verity flag	[Body]
[PATCH 6.18 362/869] ALSA: aloop: Dont constrain playback params in notify mode	[Body]
[PATCH 6.18 363/869] power: supply: ab8500_fg: Accept status from supplied power	[Body]
[PATCH 6.18 364/869] power: supply: ab8500_fg: Report sub-percent charge changes	[Body]
[PATCH 6.18 365/869] perf: xgene: initialize lock before requesting IRQ	[Body]
[PATCH 6.18 366/869] svcrdma: Grant credits from the clamped sc_max_requests	[Body]
[PATCH 6.18 367/869] ASoC: codecs: rt5682s: disable jack detection work on shutdown	[Body]
[PATCH 6.18 368/869] floppy: dont store a stack buffer in timeout_message	[Body]
[PATCH 6.18 369/869] floppy: return the drive state flags from the 32-bit FDGETDRVSTAT	[Body]
[PATCH 6.18 370/869] dlm: fix send buffer backpressure handling	[Body]
[PATCH 6.18 371/869] PCI/DOE: Fix double free of a duplicate features sysfs name	[Body]
[PATCH 6.18 372/869] PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow	[Body]
[PATCH 6.18 373/869] xfs: cross-reference the primary superblock	[Body]
[PATCH 6.18 374/869] wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz	[Body]
[PATCH 6.18 375/869] mm/ksm: mark migration stores with WRITE_ONCE()	[Body]
[PATCH 6.18 376/869] mm/page_isolation: fix UBSAN shift-out-of-bounds warning	[Body]
[PATCH 6.18 377/869] mm/page_isolation: guard compound_order() against racing	[Body]
[PATCH 6.18 378/869] mm/mempolicy: take a cpuset cookie for the interleave node count	[Body]
[PATCH 6.18 379/869] mm: memcontrol: raise MEMCG_MAX for charges that fail without reclaiming	[Body]
[PATCH 6.18 380/869] mm/page_table_check: skip zero pages	[Body]
[PATCH 6.18 381/869] mm/damon/paddr: respect folio end for DAMOS_STAT	[Body]
[PATCH 6.18 382/869] mm/damon/paddr: respect folio end for DAMOS actions except STAT	[Body]
[PATCH 6.18 383/869] mm/damon/vaddr: respect folio end for DAMOS_STAT	[Body]
[PATCH 6.18 384/869] mm/damon/core: handle extreme memory state in damon_get_node_mem_bp()	[Body]
[PATCH 6.18 385/869] mm/damon/sysfs: set next refresh jiffies per sysfs context	[Body]
[PATCH 6.18 386/869] resource: fix lost wakeup when waiting for a muxed region	[Body]
[PATCH 6.18 387/869] fat: fix fat_ent_write() for reverting the value	[Body]
[PATCH 6.18 388/869] fault-inject: fix dentry leak	[Body]
[PATCH 6.18 389/869] USB: gadgetfs: do not WARN about excessively large memory allocations	[Body]
[PATCH 6.18 390/869] init: fix early boot crash with bare hostname parameter	[Body]
[PATCH 6.18 391/869] ocfs2: exit recovery thread on mount error path	[Body]
[PATCH 6.18 392/869] ocfs2: free replay slots in ocfs2_recovery_exit()	[Body]
[PATCH 6.18 393/869] selftests/core: fix unshare_test with large fs.nr_open	[Body]
[PATCH 6.18 394/869] fork: honor task_structs declared alignment	[Body]
[PATCH 6.18 395/869] ocfs2: restrict OCFS2_INVALID_SLOT suballoc slot to system inodes	[Body]
[PATCH 6.18 396/869] ocfs2: skip uninitialized lockres in ocfs2_mark_lockres_freeing()	[Body]
[PATCH 6.18 397/869] wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff	[Body]
[PATCH 6.18 398/869] wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs	[Body]
[PATCH 6.18 399/869] wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory	[Body]
[PATCH 6.18 400/869] wifi: mt76: fix memory leak in USB TX path	[Body]
[PATCH 6.18 401/869] wifi: mt76: mt7615: restore DBDC state after ext PHY failure	[Body]
[PATCH 6.18 402/869] wifi: mt76: mt7925: cancel mlo_pm_work on the USB stop path	[Body]
[PATCH 6.18 403/869] wifi: mt76: mt7615: cancel reset work during unregister	[Body]
[PATCH 6.18 404/869] wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits()	[Body]
[PATCH 6.18 405/869] wifi: mt76: mt7996: fix PCI device reference leak in mt7996_pci_init_hif2()	[Body]
[PATCH 6.18 406/869] clocksource/drivers/fttmr010: Fix clk reference leak in error paths	[Body]
[PATCH 6.18 407/869] clocksource/drivers/digicolor: Fix clk reference leak on request_irq failure	[Body]
[PATCH 6.18 408/869] spi: stm32: fix double free of SRAM buffer on MDMA fallback	[Body]
[PATCH 6.18 409/869] aoe: pull in the headers each received packet type reads	[Body]
[PATCH 6.18 410/869] PCI/sysfs: Pass the device name length in UTF-16 code units	[Body]
[PATCH 6.18 411/869] wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM	[Body]
[PATCH 6.18 412/869] crypto: algif_skcipher - rewind rounded output bytes	[Body]
[PATCH 6.18 413/869] ALSA: hda/hdmi: clamp num_cvts against cvt_nids[] in hdmi_read_pin_conn	[Body]
[PATCH 6.18 414/869] ALSA: hda/hdmi: clamp sad_count in ELD proc write handler	[Body]
[PATCH 6.18 415/869] fanotify: report names longer than NAME_MAX	[Body]
[PATCH 6.18 416/869] ext4: only update tune mount options when requested	[Body]
[PATCH 6.18 417/869] ext4: fix fast commit replay failing on a read-only mount	[Body]
[PATCH 6.18 418/869] ext4: reject delalloc to nodelalloc before applying remount options	[Body]
[PATCH 6.18 419/869] jbd2: dont advance j_fc_off before the buffer is recorded	[Body]
[PATCH 6.18 420/869] ext4: skip extra isize expansion while unmounting	[Body]
[PATCH 6.18 421/869] ext4: dont report delalloc data as a hole on indirect-mapped inodes	[Body]
[PATCH 6.18 422/869] ext4: fix ABBA deadlock in ext4_rmdir()	[Body]
[PATCH 6.18 423/869] ext4: fix out-of-bounds read in ext4_get_group_info()	[Body]
[PATCH 6.18 424/869] nilfs2: validate directory position after llseek in readdir	[Body]
[PATCH 6.18 425/869] md: dont hand out the array before md_alloc() has added mddev->kobj	[Body]
[PATCH 6.18 426/869] mm/memory: constrain generic_access_phys() to page boundary	[Body]
[PATCH 6.18 427/869] mm/execmem: free ROX cache chunks only when they span an entire vm area	[Body]
[PATCH 6.18 428/869] mm/nommu: reject wrapping ranges in access_remote_vm()	[Body]
[PATCH 6.18 429/869] mm/hugetlb: fix subpool minimum reservation rollback	[Body]
[PATCH 6.18 430/869] mm/zswap: publish the initial pool with list_add_rcu()	[Body]
[PATCH 6.18 431/869] mm/zswap: enable zswap_ever_enabled in zswap_pool_create()	[Body]
[PATCH 6.18 432/869] clk: imx: Fix clock reference leak in imx_get_clk_hw_by_name()	[Body]
[PATCH 6.18 433/869] clk: imx: Fix clock reference leak in imx_obtain_fixed_clock_hw()	[Body]
[PATCH 6.18 434/869] xen/gntdev: prevent private mappings from becoming writable	[Body]
[PATCH 6.18 435/869] soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms()	[Body]
[PATCH 6.18 436/869] soc: fsl: dpio: Fix cleanup on IRQ registration failure	[Body]
[PATCH 6.18 437/869] soc: fsl: dpio: Free the IRQ before releasing the I/O object	[Body]
[PATCH 6.18 438/869] xen/privcmd: Only claim ioreqs matching an ioeventfd	[Body]
[PATCH 6.18 439/869] xen/pcifront: check that an AER callback exists before calling it	[Body]
[PATCH 6.18 440/869] xen-pciback: Fix pcistub_device ref leak in pcistub_get_gsi_from_sbdf()	[Body]
[PATCH 6.18 441/869] iommu/dma: Catch scatterlist length overflows	[Body]
[PATCH 6.18 442/869] drm/ttm: return an error when kmapping a BO without pages	[Body]
[PATCH 6.18 443/869] ALSA: usb-audio: Add mic resolution quirk for Logitech Webcam C200	[Body]
[PATCH 6.18 444/869] wifi: ath12k: validate MAC/PHY capability count before saving	[Body]
[PATCH 6.18 445/869] USB: cdc-acm: fix urb leak on disconnect	[Body]
[PATCH 6.18 446/869] USB: serial: option: add Rolling Wireless RN947R	[Body]
[PATCH 6.18 447/869] USB: serial: option: add support for ASR 1286:4e3c modem	[Body]
[PATCH 6.18 448/869] USB: serial: usb_wwan: fix urb leak on disconnect	[Body]
[PATCH 6.18 449/869] slimbus: messaging: fix leaked PM vote on tid allocation failure	[Body]
[PATCH 6.18 450/869] xen-blkfront: Fix IO race during unplug	[Body]
[PATCH 6.18 451/869] RISC-V: KVM: Fix IPI delivery for out-of-order vcpu_id	[Body]
[PATCH 6.18 452/869] vfio/mlx5: Fix boundary check in set_report_output()	[Body]
[PATCH 6.18 453/869] cxl/pci: Program the Port GPF timeouts before caching the DVSEC	[Body]
[PATCH 6.18 454/869] cxl/port: Convert PCIe link latency to nanoseconds	[Body]
[PATCH 6.18 455/869] cxl: Account for link width in latency calculation	[Body]
[PATCH 6.18 456/869] cxl/acpi: Convert QTG _DSM latencies to picoseconds	[Body]
[PATCH 6.18 457/869] lib/plist: fix plist_requeue() corrupting order in the last bucket	[Body]
[PATCH 6.18 458/869] USB: cdc-acm: add VeriFone VX820 device ID	[Body]
[PATCH 6.18 459/869] USB: quirks: add USB_QUIRK_WINDOWS_CONFIG_REQ_SIZE for GameSir G7 SE	[Body]
[PATCH 6.18 460/869] usb: typec: ucsi: ccg: Validate altmode index in GET_CURRENT_CAM response	[Body]
[PATCH 6.18 461/869] usb: xhci: Fix bounce buffer overflow	[Body]
[PATCH 6.18 462/869] xhci: Prevent invalid vdev dereference during sideband unregister	[Body]
[PATCH 6.18 463/869] usb: typec: ucsi_ccg: Add retry mechanism in ccg_read	[Body]
[PATCH 6.18 464/869] mailbox: altera: shut down RX polling timer on channel teardown	[Body]
[PATCH 6.18 465/869] mailbox: bcm74110: Cap rx_svc_init_list growth to prevent PMC-induced OOM	[Body]
[PATCH 6.18 466/869] mailbox: mtk-cmdq: Fix runtime PM leak in cmdq_mbox_flush()	[Body]
[PATCH 6.18 467/869] mailbox: qcom-ipcc: Guard against NULL con_priv in send_data()	[Body]
[PATCH 6.18 468/869] USB: serial: sierra: fix urb leak on write completion	[Body]
[PATCH 6.18 469/869] dm-snapshot: fix crash if dm_io_client_create fails	[Body]
[PATCH 6.18 470/869] arm64/efi: Clear PTE_WRITE when applying EFI_MEMORY_RO	[Body]
[PATCH 6.18 471/869] btrfs: zoned: fix block group reference leak in btrfs_repair_one_zone()	[Body]
[PATCH 6.18 472/869] btrfs: return -ENOTTY for unknown ioctls on the control device	[Body]
[PATCH 6.18 473/869] mtd: rawnand: qcom: fix read location register usage in config_nand_cw_read()	[Body]
[PATCH 6.18 474/869] mtd: parsers: qcom: fix offset/size overflow on large partitions	[Body]
[PATCH 6.18 475/869] xprtrdma: prevent disconnect feedback during endpoint teardown	[Body]
[PATCH 6.18 476/869] xprtrdma: trim head iovec when the payload arrives via a Write chunk	[Body]
[PATCH 6.18 477/869] PCI: Avoid D3 on PLX PEX 8532/8533/8548 downstream ports	[Body]
[PATCH 6.18 478/869] mm/damon/sysfs-schemes: read sysfs_filter->addr_range only once	[Body]
[PATCH 6.18 479/869] mm/madvise: reclaim isolated folios if PTE restart fails	[Body]
[PATCH 6.18 480/869] mm/madvise: use folio_trylock() in the cold/pageout PMD split	[Body]
[PATCH 6.18 481/869] mm/page_alloc: do not boost watermarks in kdump capture kernels	[Body]
[PATCH 6.18 482/869] mm/hugetlb_cgroup: move per-node usage on cross node migration	[Body]
[PATCH 6.18 483/869] mm/hugetlb_cgroup: move per-node usage on cgroup reparenting	[Body]
[PATCH 6.18 484/869] mm/shmem: report RCU-tasks quiescent states while undoing a range	[Body]
[PATCH 6.18 485/869] mm/alloc_tag: account for reserved tag ids in the kernel tag check	[Body]
[PATCH 6.18 486/869] mm/damon/core: charge only the part of a region the filter left	[Body]
[PATCH 6.18 487/869] mm/damon/tests/core-kunit: test the size charged for a filter-trimmed region	[Body]
[PATCH 6.18 488/869] platform/x86/amd/pmf: Validate the APTS state index	[Body]
[PATCH 6.18 489/869] platform/x86/amd: Stop counting intermediate cycles with metrics table	[Body]
[PATCH 6.18 490/869] platform/x86: asus-wmi: fix unclear usage of bd->props.power	[Body]
[PATCH 6.18 491/869] platform/x86: asus-wmi: fix screenpad power state detection	[Body]
[PATCH 6.18 492/869] platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token	[Body]
[PATCH 6.18 493/869] platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query()	[Body]
[PATCH 6.18 494/869] platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop()	[Body]
[PATCH 6.18 495/869] platform/x86: oxpec: Fix Apex charge limit control	[Body]
[PATCH 6.18 496/869] platform/x86: simatic-ipc: fix platform device leak on registration failure	[Body]
[PATCH 6.18 497/869] platform/x86/amd: hfi: Fix out-of-bounds reads when parsing ranking data	[Body]
[PATCH 6.18 498/869] platform/x86/intel-uncore-freq: Continue restoring limits on resume	[Body]
[PATCH 6.18 499/869] platform/x86/intel/vsec: Fix inverted walk_header() test in get_features()	[Body]
[PATCH 6.18 500/869] fbdev: ssd1307fb: check for fb_deferred_io_init() error	[Body]
[PATCH 6.18 501/869] fbdev: xen-fbfront: check for fb_deferred_io_init() error	[Body]
[PATCH 6.18 502/869] fbdev: udlfb: check for fb_deferred_io_init() error	[Body]
[PATCH 6.18 503/869] fbdev: smscufx: check for fb_deferred_io_init() error	[Body]
[PATCH 6.18 504/869] fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error	[Body]
[PATCH 6.18 505/869] fbdev: kyro: Release WC setup on registration failure	[Body]
[PATCH 6.18 506/869] serial: 8250_exar: store the GPIO platform device in struct exar8250	[Body]
[PATCH 6.18 507/869] dm-bufio: fix non-working memory limit	[Body]
[PATCH 6.18 508/869] dm-bufio: fix a race leading to an unsigned integer underflow	[Body]
[PATCH 6.18 509/869] mei: vsc: Fix packet CRC computed over pointer size	[Body]
[PATCH 6.18 510/869] speakup: Fix NULL pointer dereference on VT switch + selection	[Body]
[PATCH 6.18 511/869] clk: qcom: ipq-cmn-pll: Assign .num before accessing .hws	[Body]
[PATCH 6.18 512/869] clk: qcom: ipq5018: add 24MHz rate for USB UTMI clock	[Body]
[PATCH 6.18 513/869] clk: qcom: ipq5332: add 24MHz rate for USB UTMI clock	[Body]
[PATCH 6.18 514/869] iomap: dont lose a fiemap iteration error when emitting the last extent	[Body]
[PATCH 6.18 515/869] nvme-rdma: dont complete a request after a bogus remote invalidation	[Body]
[PATCH 6.18 516/869] nvmet: fix preempt of another registrant by the reservation holder	[Body]
[PATCH 6.18 517/869] nvme-auth: fail when the controller does not authenticate itself	[Body]
[PATCH 6.18 518/869] nvmet: free the bvec on file namespace range errors	[Body]
[PATCH 6.18 519/869] nvmet: require authentication before property set	[Body]
[PATCH 6.18 520/869] nvme: bound FDP config log reads to the received buffer	[Body]
[PATCH 6.18 521/869] nvmet: zns: dont leak stale memory in zone management receive	[Body]
[PATCH 6.18 522/869] f2fs: convert inline quota files when turning quota on	[Body]
[PATCH 6.18 523/869] PCI: rockchip-ep: Do not attempt 5.0 GT/s retraining	[Body]
[PATCH 6.18 524/869] PCI: rockchip-host: Do not attempt 5.0 GT/s retraining	[Body]
[PATCH 6.18 525/869] PCI: rockchip: Drive at 2.5 GT/s, error other speeds	[Body]
[PATCH 6.18 526/869] sh: intc: Sort the prio and sense lists after filling them	[Body]
[PATCH 6.18 527/869] f2fs: remove mappedtodisk flag usage in mmap write path	[Body]
[PATCH 6.18 528/869] f2fs: allow pinning empty compressed files	[Body]
[PATCH 6.18 529/869] f2fs: read i_size once in f2fs_vm_page_mkwrite	[Body]
[PATCH 6.18 530/869] f2fs: check every cur_*_segno[] entry on readonly images	[Body]
[PATCH 6.18 531/869] f2fs: fix defragment writeback range truncation on 32-bit	[Body]
[PATCH 6.18 532/869] f2fs: disallow mmap write and data-modifying fallocate on atomic files	[Body]
[PATCH 6.18 533/869] spi: ljca: validate the response length before copying the data	[Body]
[PATCH 6.18 534/869] pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank()	[Body]
[PATCH 6.18 535/869] lib/decompress_bunzip2: fix off-by-one in run-length bounds check	[Body]
[PATCH 6.18 536/869] panic: flatten nmi_panic control flow	[Body]
[PATCH 6.18 537/869] lib: decompress_bunzip2: fix integer overflow in run-length decoding	[Body]
[PATCH 6.18 538/869] tmpfs: fix unicode_map leaks in casefold option handling	[Body]
[PATCH 6.18 539/869] ALSA: hda/tas2781: Skip invalid TAS2563 UEFI calibration data	[Body]
[PATCH 6.18 540/869] platform/x86/tuxedo: Fix keyboard LED map ordering	[Body]
[PATCH 6.18 541/869] ALSA: cs46xx: fix unit mismatch in DSP code area bounds check	[Body]
[PATCH 6.18 542/869] platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer()	[Body]
[PATCH 6.18 543/869] platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer()	[Body]
[PATCH 6.18 544/869] platform/x86: hp-bioscfg: return -E2BIG from validate_password_input()	[Body]
[PATCH 6.18 545/869] platform/x86: hp-bioscfg: allow clearing current_password	[Body]
[PATCH 6.18 546/869] platform/x86: hp-bioscfg: NUL-terminate the SPM auth token	[Body]
[PATCH 6.18 547/869] serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit()	[Body]
[PATCH 6.18 548/869] serial: 8250_omap: set priv->line before enabling the IRQ	[Body]
[PATCH 6.18 549/869] serial: amba-pl011: honour delay_rts_before_send for every write	[Body]
[PATCH 6.18 550/869] serial: amba-pl011: keep transmitter enabled when disabling RS485	[Body]
[PATCH 6.18 551/869] serial: pmac_zilog: push received data to the port that received it	[Body]
[PATCH 6.18 552/869] iommu/amd: Program device table when kdump reuse fails	[Body]
[PATCH 6.18 553/869] iommu/amd: Dont allocate kdump device table from DMA32	[Body]
[PATCH 6.18 554/869] nvme: make the DH-HMAC-CHAP secret attributes readable by root only	[Body]
[PATCH 6.18 555/869] spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path	[Body]
[PATCH 6.18 556/869] ARM: 9488/1: smp: set current pointer in assembly before jumping into C	[Body]
[PATCH 6.18 557/869] ARM: 9491/1: alignment: restore uaccess state on emulation fault	[Body]
[PATCH 6.18 558/869] ARM: 9520/1: cacheinfo: avoid out-of-bounds write in populate_cache_leaves()	[Body]
[PATCH 6.18 559/869] ARM: 9521/1: cacheinfo: count external caches in early_cache_level()	[Body]
[PATCH 6.18 560/869] ARM: 9522/1: cacheinfo: guard the CLIDR read in populate_cache_leaves()	[Body]
[PATCH 6.18 561/869] ARM: 9523/1: topology: allocate the cacheinfo early on the boot CPU	[Body]
[PATCH 6.18 562/869] PCI: Set supported_speeds in set_pcie_port_type()	[Body]
[PATCH 6.18 563/869] Input: xpad - add GameSir Nova Lite support	[Body]
[PATCH 6.18 564/869] Bluetooth: btusb: Add device ID for Realtek RTL8761BUE (StarTech AV53C1)	[Body]
[PATCH 6.18 565/869] Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file	[Body]
[PATCH 6.18 566/869] Bluetooth: hci_debugfs: Pin module for debugfs file operations	[Body]
[PATCH 6.18 567/869] Bluetooth: L2CAP: Reject mode changes on connected channels	[Body]
[PATCH 6.18 568/869] Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests	[Body]
[PATCH 6.18 569/869] Bluetooth: L2CAP: Use default TxWindow for zero socket option	[Body]
[PATCH 6.18 570/869] cpufreq: schedutil: Serialize sugov_start() against rate limit updates	[Body]
[PATCH 6.18 571/869] PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain()	[Body]
[PATCH 6.18 572/869] kbuild: AutoFDO: Update split machine function argument for upstream rename	[Body]
[PATCH 6.18 573/869] iommufd: Reject a zero-length dirty bitmap request	[Body]
[PATCH 6.18 574/869] crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev()	[Body]
[PATCH 6.18 575/869] crypto: qat - fix use of destroyed vf2pf_lock on VF restart	[Body]
[PATCH 6.18 576/869] irqchip/gic-v3-its: Dont clamp nvecs to zero when id_bits is 32	[Body]
[PATCH 6.18 577/869] irqchip/imx-intmux: Fix runtime PM teardown on remove	[Body]
[PATCH 6.18 578/869] irqchip/mchp-eic: Fix clock reference leak in mchp_eic_probe()	[Body]
[PATCH 6.18 579/869] irqchip/atmel-aic[5]: Disable interrupts in the irq_pm_shutdown() callbacks	[Body]
[PATCH 6.18 580/869] ALSA: ump: Correct return size of fill_rpn()	[Body]
[PATCH 6.18 581/869] gfs2: fix the escaped block copy in gfs2_before_commit()	[Body]
[PATCH 6.18 582/869] spi: jcore: fix divide-by-zero when speed_hz is zero	[Body]
[PATCH 6.18 583/869] efi/libstub: arm64: Dont use the platform register x18	[Body]
[PATCH 6.18 584/869] efi/libstub: Dont replace an existing LINUX_EFI_MEMRESERVE table	[Body]
[PATCH 6.18 585/869] KVM: arm64: Move OUTSIDE_GUEST_MODE publication past context being saved	[Body]
[PATCH 6.18 586/869] KVM: arm64: Move IN_GUEST_MODE ahead of state being loaded	[Body]
[PATCH 6.18 587/869] KVM: arm64: Turn vcpu->arch.pause into a counter	[Body]
[PATCH 6.18 588/869] spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer	[Body]
[PATCH 6.18 589/869] mfd: tps65217: Fix NULL pointer dereference on IRQ init failure	[Body]
[PATCH 6.18 590/869] mfd: tps65217: Check return value when masking interrupt sources	[Body]
[PATCH 6.18 591/869] mfd: tps65217: Use devres for IRQ domain and wake teardown	[Body]
[PATCH 6.18 592/869] ASoC: qcom: q6apm: reset the hw pointer with the fragment queue	[Body]
[PATCH 6.18 593/869] spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op	[Body]
[PATCH 6.18 594/869] PCI/PM: Restore BARs after powering up during enumeration	[Body]
[PATCH 6.18 595/869] spi: amd: fix len==0 underflow and FIFO overflow	[Body]
[PATCH 6.18 596/869] erofs: use on-disk blkszbits for lz4 max pcluster bound	[Body]
[PATCH 6.18 597/869] ring-buffer: Take cpus_read_lock() when changing the subbuf order	[Body]
[PATCH 6.18 598/869] dax: Return errors from dax_core_init()	[Body]
[PATCH 6.18 599/869] dax: fix dax_range_compare_iter() to use correct size and address offset	[Body]
[PATCH 6.18 600/869] ublk: reset the FETCH round in release also without a disk	[Body]
[PATCH 6.18 601/869] ublk: reset the FETCH round under ub->mutex	[Body]
[PATCH 6.18 602/869] net: skbuff: dont BUG() on a bad csum_start in skb_copy_and_csum_dev()	[Body]
[PATCH 6.18 603/869] ipv6: defrag: orphan skb before queuing	[Body]
[PATCH 6.18 604/869] sctp: hold transport reference across connect wait	[Body]
[PATCH 6.18 605/869] RDS/IB: validate receive fragment completions	[Body]
[PATCH 6.18 606/869] cpufreq: loongson3: Make this driver depend on MACH_LOONGSON64	[Body]
[PATCH 6.18 607/869] cpufreq: loongson3: Adjust the width of id and val in smc_message	[Body]
[PATCH 6.18 608/869] cpufreq: loongson3: Replace per-package mutex with per-node	[Body]
[PATCH 6.18 609/869] cpufreq: loongson3: Use global physical CPU ID in get/target callbacks	[Body]
[PATCH 6.18 610/869] cpufreq: loongson3: Replace IOCSR read/write with MMIO ones	[Body]
[PATCH 6.18 611/869] fuse: dont launder folios of a bad inode	[Body]
[PATCH 6.18 612/869] virtio_fs: read the vring size under virtio_fs_mutex in ->get_tree	[Body]
[PATCH 6.18 613/869] fuse: fix copy_file_range reply handling race	[Body]
[PATCH 6.18 614/869] ublk: pin module while release work is pending	[Body]
[PATCH 6.18 615/869] ipc, msg: Account msg_msg allocations with GFP_KERNEL_ACCOUNT again	[Body]
[PATCH 6.18 616/869] mptcp: reset msk state on early connect failure	[Body]
[PATCH 6.18 617/869] mptcp: fix subflow bitfield misuse	[Body]
[PATCH 6.18 618/869] ALSA: seq: oss: Skip events until fully initialized	[Body]
[PATCH 6.18 619/869] ALSA: hda/realtek: Fix internal speakers on Acer Aspire AL16-31P	[Body]
[PATCH 6.18 620/869] power: supply: qcom_smbx: set the charge enable after software control	[Body]
[PATCH 6.18 621/869] power: supply: cros_charge-control: restore EC state on resume	[Body]
[PATCH 6.18 622/869] power: supply: generic-adc-battery: fix status with no supplier	[Body]
[PATCH 6.18 623/869] power: supply: qcom_battmgr: Notify charger supplies of online changes	[Body]
[PATCH 6.18 624/869] alpha: handle VM_FAULT_HWPOISON in do_page_fault()	[Body]
[PATCH 6.18 625/869] alpha: load the MMU context when switch_mm() switches the current task	[Body]
[PATCH 6.18 626/869] alpha: run check_mmu_context() from finish_arch_post_lock_switch()	[Body]
[PATCH 6.18 627/869] alpha: only use a targeted tbi() when the target mm is really current	[Body]
[PATCH 6.18 628/869] alpha: invalidate the local context in flush_tlb_page()	[Body]
[PATCH 6.18 629/869] alpha: fix the local TLB invalidate in flush_tlb_page()	[Body]
[PATCH 6.18 630/869] alpha: fix the local TLB invalidate in the UP flush_tlb_page()	[Body]
[PATCH 6.18 631/869] alpha: invalidate the local context in flush_tlb_mm()	[Body]
[PATCH 6.18 632/869] alpha: invalidate the local context in flush_icache_user_page()	[Body]
[PATCH 6.18 633/869] alpha: do not clear remote MMU contexts in migrate_flush_tlb_page()	[Body]
[PATCH 6.18 634/869] alpha: do not skip TLB shootdown IPIs for kthread-borrowed mms	[Body]
[PATCH 6.18 635/869] ALSA: hda/via: Apply runtime PM workaround for ASUS X55A	[Body]
[PATCH 6.18 636/869] spi: ch341: handle transfers without a TX or RX buffer	[Body]
[PATCH 6.18 637/869] hwmon: (sht4x) Fix jiffies wraparound in heater-ready check	[Body]
[PATCH 6.18 638/869] hwmon: (sht4x) Reject incomplete heater command transfers	[Body]
[PATCH 6.18 639/869] hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe	[Body]
[PATCH 6.18 640/869] lib/buildid: reject file offsets that do not fit in pgoff_t	[Body]
[PATCH 6.18 641/869] gpiolib: cdev: dont set GPIOD_FLAG_IS_OUT	[Body]
[PATCH 6.18 642/869] ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3402VA	[Body]
[PATCH 6.18 643/869] netfilter: nf_reject: initialize IPCB at inet ingress	[Body]
[PATCH 6.18 644/869] hwmon: (coretemp) Fix handling of isolated SMT siblings	[Body]
[PATCH 6.18 645/869] hwmon: (gigabyte_waterforce) reject short input reports	[Body]
[PATCH 6.18 646/869] f2fs: flush SIT journal during filesystem resize	[Body]
[PATCH 6.18 647/869] f2fs: fix submit accounting for IPU writeback	[Body]
[PATCH 6.18 648/869] dax: fix wrong error code returned from dax_dedupe_file_range_compare()	[Body]
[PATCH 6.18 649/869] rtc: cmos: Disable ACPI RTC event before handling it	[Body]
[PATCH 6.18 650/869] platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc()	[Body]
[PATCH 6.18 651/869] rtc: pcf8563: pass the driver data to the alarm interrupt handler	[Body]
[PATCH 6.18 652/869] hwmon: (sht3x) Return the consumed count for heater writes	[Body]
[PATCH 6.18 653/869] hwmon: (acpi_power_meter) Fix 18.45 TW bug	[Body]
[PATCH 6.18 654/869] Input: always accept EV_SYN in input_event()	[Body]
[PATCH 6.18 655/869] Revert "Input: matrix_keypad - force switch rows to input mode"	[Body]
[PATCH 6.18 656/869] cgroup: fix cgroup.kill for exited thread group leader	[Body]
[PATCH 6.18 657/869] netdevsim: reject cls_bpf programs bound to another device	[Body]
[PATCH 6.18 658/869] net: gro: dont chain linear parts larger than gso_size into frag_list	[Body]
[PATCH 6.18 659/869] ALSA: compress: fix buffer leak on failed SET_PARAMS	[Body]
[PATCH 6.18 660/869] ALSA: compress: reject buffer geometry change on gapless next_track	[Body]
[PATCH 6.18 661/869] ALSA: compress: add missing OPEN-state gate to SET_METADATA	[Body]
[PATCH 6.18 662/869] ALSA: compress: reject restarting an ACTIVE task via origin_seqno	[Body]
[PATCH 6.18 663/869] ALSA: mtpav: restore negation dropped in guard() conversion	[Body]
[PATCH 6.18 664/869] ALSA: emux: Stop voices before freeing zones in all cases	[Body]
[PATCH 6.18 665/869] gpiolib: Free chip resources when allocating the label fails	[Body]
[PATCH 6.18 666/869] ALSA: line6: Handle period elapsed calls outside the locks	[Body]
[PATCH 6.18 667/869] gpio: davinci: Clear interrupt status in every bank on suspend	[Body]
[PATCH 6.18 668/869] gpio: pca953x: Handle direction register read errors in IRQ paths	[Body]
[PATCH 6.18 669/869] blk-mq: clear stale inactive flag on hctx reuse	[Body]
[PATCH 6.18 670/869] drm/amdgpu: require _PR3 for BOCO	[Body]
[PATCH 6.18 671/869] drm/amdgpu: reset SI ASIC on MacBookPros with VRAM at 0	[Body]
[PATCH 6.18 672/869] drm/amdgpu: reset CIK ASIC on Apple boards with VRAM at 0	[Body]
[PATCH 6.18 673/869] drm/amdgpu: reset VI ASIC on Apple boards with VRAM at 0	[Body]
[PATCH 6.18 674/869] drm/amdkfd: fix doorbell allocation race creating duplicate allocations	[Body]
[PATCH 6.18 675/869] drm/amd/display: dont WARN when removing an unallocated MST payload	[Body]
[PATCH 6.18 676/869] drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs	[Body]
[PATCH 6.18 677/869] drm/amd/pm: reapply umd profile state after recovery	[Body]
[PATCH 6.18 678/869] drm/amdkfd: dont drop an SVM CWSR reference that was never taken	[Body]
[PATCH 6.18 679/869] drm/amdgpu/gmc9: add extra type-2 TLB flush for gfx942/gfx950	[Body]
[PATCH 6.18 680/869] drm/amd/display: Fix swap in median3() for DSC rate control	[Body]
[PATCH 6.18 681/869] drm/amdkfd: wait for a GPU reset before freeing a BO	[Body]
[PATCH 6.18 682/869] drm/amdgpu: wait for pending page table updates before switching a VM to CPU updates	[Body]
[PATCH 6.18 683/869] amdkfd: Fix memory availability double accounting of kfd pinned objects	[Body]
[PATCH 6.18 684/869] drm/amdkfd: correct vram_available calculation	[Body]
[PATCH 6.18 685/869] ipv6: remove ifaddr from hash during ifdown list cleanup	[Body]
[PATCH 6.18 686/869] ipv6: serialize address publication with device teardown	[Body]
[PATCH 6.18 687/869] ipv6: initialize temporary ifaddr before publication	[Body]
[PATCH 6.18 688/869] ipv6: do not restart DAD for a dead ifaddr	[Body]
[PATCH 6.18 689/869] fbdev: bitblit: Fix glyph clipping when fbcon pans	[Body]
[PATCH 6.18 690/869] PCI: qcom-ep: Deinitialize endpoint on remove	[Body]
[PATCH 6.18 691/869] net/rds: ib: dont enable IRQs in rds_ib_conn_free()	[Body]
[PATCH 6.18 692/869] net: unix: reject negative max_dgram_qlen values	[Body]
[PATCH 6.18 693/869] net/smc: queue the copied chunk when smc_tx_sendmsg() faults	[Body]
[PATCH 6.18 694/869] alpha: determine tininess after rounding in the FP emulation	[Body]
[PATCH 6.18 695/869] ocfs2: reserve metadata for a new xattr block and its value tree	[Body]
[PATCH 6.18 696/869] ocfs2: reserve value tree metadata when moving an xattr into the inode	[Body]
[PATCH 6.18 697/869] ocfs2: deal with legacy signed dir index name hash values	[Body]
[PATCH 6.18 698/869] ocfs2: use the stored hash when checking xattr bucket collision	[Body]
[PATCH 6.18 699/869] ocfs2: deal with legacy signed xattr name hash values	[Body]
[PATCH 6.18 700/869] ocfs2/cluster: initialize heartbeat regions before publishing them	[Body]
[PATCH 6.18 701/869] Documentation: hyperv: Update documentation for sending VMBus packets	[Body]
[PATCH 6.18 702/869] platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming	[Body]
[PATCH 6.18 703/869] writeback: reset dirtied_when when switching wbs	[Body]
[PATCH 6.18 704/869] writeback: clear old wb dirty state after inode switches	[Body]
[PATCH 6.18 705/869] ALSA: aloop: Update the PCM Slave controls for a matching playback	[Body]
[PATCH 6.18 706/869] sh: maple: Use the matching IRQ cookie when invoking free_irq()	[Body]
[PATCH 6.18 707/869] nvmet: take subsys->lock while force-reconnecting in nvmet_subsys_attr_qid_max_store()	[Body]
[PATCH 6.18 708/869] net: wwan: iosm: validate msg_head before indexing msg_ring	[Body]
[PATCH 6.18 709/869] tipc: fix broadcast sender hang on last acker departure	[Body]
[PATCH 6.18 710/869] exportfs: Release the get_name() directory file synchronously	[Body]
[PATCH 6.18 711/869] statmount: dont copy the reserved empty string past the buffer	[Body]
[PATCH 6.18 712/869] listmount: dont wrap around with a U64_MAX cursor	[Body]
[PATCH 6.18 713/869] ucount: take the rlimit reference before checking the limit	[Body]
[PATCH 6.18 714/869] cpufreq: intel_pstate: cancel HWP notify work in driver cleanup	[Body]
[PATCH 6.18 715/869] i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode()	[Body]
[PATCH 6.18 716/869] i2c: designware: queue only one read command for block reads	[Body]
[PATCH 6.18 717/869] tpm: tpm_nsc: fix NULL pointer dereference on init failure	[Body]
[PATCH 6.18 718/869] tpm: tpm_nsc: stop using the cleanup callback as dev.release	[Body]
[PATCH 6.18 719/869] tpm: fix zero-length read discarding the pending response	[Body]
[PATCH 6.18 720/869] gpiolib: dont report -ENOMEM for a requested line without a label	[Body]
[PATCH 6.18 721/869] parisc: eisa_enumerator: Fix out-of-bounds reads of the EEPROM buffer	[Body]
[PATCH 6.18 722/869] ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks	[Body]
[PATCH 6.18 723/869] i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len	[Body]
[PATCH 6.18 724/869] spi: zynq-qspi: fix address buffer corruption and support 4-byte address	[Body]
[PATCH 6.18 725/869] posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() signal path	[Body]
[PATCH 6.18 726/869] timekeeping: Update offsets on sequence counter retry in ktime_get_update_offsets_now()	[Body]
[PATCH 6.18 727/869] cgroup: dont kill migrated processes through their exiting threads	[Body]
[PATCH 6.18 728/869] gve: fix out-of-bounds read in gve_get_flow_rule_entry()	[Body]
[PATCH 6.18 729/869] genirq/kexec: Do not take the bus lock of an interrupt chip on the crash path	[Body]
[PATCH 6.18 730/869] veth: fix stale peer max_mtu on XDP program replacement	[Body]
[PATCH 6.18 731/869] scsi: ufs: bsg: Complete the job on error	[Body]
[PATCH 6.18 732/869] scsi: ufs: bsg: Clear the reply buffer before use	[Body]
[PATCH 6.18 733/869] scsi: ufs: core: Clear stale UIC result byte before peer DME retries	[Body]
[PATCH 6.18 734/869] scsi: libiscsi_tcp: Prevent R2T range check overflow	[Body]
[PATCH 6.18 735/869] scsi: ufs: core: Remove an always-false WARN_ONCE()	[Body]
[PATCH 6.18 736/869] scsi: ufs: core: Remove completed-without-interrupt path in ufshcd_abort()	[Body]
[PATCH 6.18 737/869] compat: avoid double rounding in times()	[Body]
[PATCH 6.18 738/869] stackdepot: stop preallocating after the final pool	[Body]
[PATCH 6.18 739/869] ocfs2: snapshot the dentry name while tracing file release	[Body]
[PATCH 6.18 740/869] ocfs2/cluster: remove zero-address nodes from IP tree on teardown	[Body]
[PATCH 6.18 741/869] mm/hugetlb: dont clear the resv_map of a VMA whose lock is held	[Body]
[PATCH 6.18 742/869] mm/mremap: fix calling fixup_hugetlb_reservations() on the wrong VMA	[Body]
[PATCH 6.18 743/869] mm/hugetlb: account migration target folio in per-node NR_HUGETLB vmstat	[Body]
[PATCH 6.18 744/869] mm: disallow ioremaping ordinary RAM in generic_access_phys()	[Body]
[PATCH 6.18 745/869] mm/madvise: add cond_resched() in THP branch of madvise_cold_or_pageout_pte_range()	[Body]
[PATCH 6.18 746/869] mm/mlock: use a long for the page count in mlock_fixup()	[Body]
[PATCH 6.18 747/869] userfaultfd: fix UFFDIO_MOVE livelock on large folio with extra references	[Body]
[PATCH 6.18 748/869] mm/percpu: account full object size for percpu memory allocations	[Body]
[PATCH 6.18 749/869] mm/madvise: atomically clear the young bit on THP MADV_COLD	[Body]
[PATCH 6.18 750/869] ipc/shm: fix RSS accounting for hugetlb shared memory	[Body]
[PATCH 6.18 751/869] mm: vmscan: dont count per-node proactive reclaim as memory pressure	[Body]
[PATCH 6.18 752/869] mm/swap: fix swap_cache_get_folio() returning a folio that left the swap cache	[Body]
[PATCH 6.18 753/869] mm/page_alloc: count guard pages as free again when their buddy merges	[Body]
[PATCH 6.18 754/869] mm/truncate: fix the zeroing end of pagecache_isize_extended()	[Body]
[PATCH 6.18 755/869] mm/mremap: populate calculated fields in vrm state correctly	[Body]
[PATCH 6.18 756/869] mm/mremap: correctly uncharge accountable VMAs in error path	[Body]
[PATCH 6.18 757/869] mm/vmscan: reclaim every zone in per-node proactive reclaim	[Body]
[PATCH 6.18 758/869] mm/mempolicy: apply bind policies against the scoped allocation zone	[Body]
[PATCH 6.18 759/869] riscv: mm: exclude invalid THP PMDs from page table check	[Body]
[PATCH 6.18 760/869] mm: multi-gen LRU: fix NULL lruvec->pgdat deref with memcg disabled on cmdline	[Body]
[PATCH 6.18 761/869] fscrypt: Fix missing barrier in fscrypt_find_mode_key()	[Body]
[PATCH 6.18 762/869] fbdev: atmel_lcdfb: fix list_first_entry() on possibly empty modelist in probe	[Body]
[PATCH 6.18 763/869] timers/itimer: Keep a nonzero value at CPU timer expiry	[Body]
[PATCH 6.18 764/869] time/namespace: Fix overflow when converting absolute deadlines	[Body]
[PATCH 6.18 765/869] KVM: arm64: Set HCR_EL2.BSU to Inner Shareable for guests	[Body]
[PATCH 6.18 766/869] ceph: avoid pending truncate during nonblocking cap acquire	[Body]
[PATCH 6.18 767/869] ceph: fix out-of-bounds read in ceph_netfs_issue_op_inline()	[Body]
[PATCH 6.18 768/869] ceph: reject mdsmaps that claim more than CEPH_MAX_MDS ranks	[Body]
[PATCH 6.18 769/869] ceph: require the dentry lease record to cover struct ceph_mds_reply_lease	[Body]
[PATCH 6.18 770/869] libceph: only set read_from_replica on read requests	[Body]
[PATCH 6.18 771/869] libceph: Fix unsafe decode in ceph_redirect_decode()	[Body]
[PATCH 6.18 772/869] libceph: Fix multiple unsafe decodes in ceph_oloc_decode()	[Body]
[PATCH 6.18 773/869] libceph: reject mismatched CRUSH weight-set sizes	[Body]
[PATCH 6.18 774/869] libceph: reject an initial monmap with no monitors	[Body]
[PATCH 6.18 775/869] ceph: fix integer overflow in the snap trace bounds check	[Body]
[PATCH 6.18 776/869] ceph: Fix xattr buffer leak in __send_cap()	[Body]
[PATCH 6.18 777/869] ceph: Fix mds session leak in __open_export_target_session()	[Body]
[PATCH 6.18 778/869] ceph: fix 32-bit overflow in readdir reply count check	[Body]
[PATCH 6.18 779/869] libceph: fix out-of-bounds reads from repeated CRUSH bucket entries	[Body]
[PATCH 6.18 780/869] ceph: clamp MDS reply result code to the errno range	[Body]
[PATCH 6.18 781/869] ceph: dont fail write_begin with -EAGAIN after flushing old snapc	[Body]
[PATCH 6.18 782/869] ceph: validate fscrypt auth blob length	[Body]
[PATCH 6.18 783/869] ceph: bound name skips in ceph_mdsmap_decode() by the message end	[Body]
[PATCH 6.18 784/869] ceph: validate MDS reply fragtree split array length	[Body]
[PATCH 6.18 785/869] ceph: validate encoded xattr name lengths	[Body]
[PATCH 6.18 786/869] ceph: fix uninitialized err in ceph_netfs_issue_read()	[Body]
[PATCH 6.18 787/869] f2fs: fix to update superblock crc in sanity_check_area_boundary()	[Body]
[PATCH 6.18 788/869] ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch	[Body]
[PATCH 6.18 789/869] ASoC: codecs: wsa884x: Accept temperatures across the full trim range	[Body]
[PATCH 6.18 790/869] ASoC: codecs: wsa883x: Accept temperatures across the full trim range	[Body]
[PATCH 6.18 791/869] net: usb: pegasus: check rx pkt_len against the received length	[Body]
[PATCH 6.18 792/869] bonding: fix out-of-bounds read of arp_ip_target	[Body]
[PATCH 6.18 793/869] ipmr: fully initialize the synthetic IP header in ipmr_get_route()	[Body]
[PATCH 6.18 794/869] dt-bindings: clock: ma35d1: Document the missing crystal inputs	[Body]
[PATCH 6.18 795/869] tcp: limit tcp_tso_rtt_log to a valid shift count	[Body]
[PATCH 6.18 796/869] xsk: restore UMEM flags after failed pool assignment	[Body]
[PATCH 6.18 797/869] loop: check for read-write open mode on LOOP_SET_STATUS in lo_compat_ioctl()	[Body]
[PATCH 6.18 798/869] ALSA: usb-audio: Bound packet copies by the PCM buffer size	[Body]
[PATCH 6.18 799/869] ALSA: hda: Reject codec reset on ASoC (ext_ops) buses	[Body]
[PATCH 6.18 800/869] ixgbe: reserve TX timestamp after skb preparation	[Body]
[PATCH 6.18 801/869] ASoC: hdac_hda: Balance the runtime PM disable in codec remove	[Body]
[PATCH 6.18 802/869] LoongArch: Call cpu_final_simd() with pure_initcall()	[Body]
[PATCH 6.18 803/869] LoongArch: Use pa_to_nid()/nid_to_addrbase() rather than hard-code	[Body]
[PATCH 6.18 804/869] LoongArch: Remove arch-specific __smp_mb__{before,after}_atomic()	[Body]
[PATCH 6.18 805/869] LoongArch: Remove redundant call in update_bp_registers()	[Body]
[PATCH 6.18 806/869] LoongArch: Fix bitmask corruption in update_bp_registers()	[Body]
[PATCH 6.18 807/869] LoongArch: Fix architectural naming typo for CSR_FWPS_SKIP	[Body]
[PATCH 6.18 808/869] LoongArch: Only send SIGTRAP signal if necessary in do_watch()	[Body]
[PATCH 6.18 809/869] LoongArch: Fix perf hardware breakpoint failure via installation	[Body]
[PATCH 6.18 810/869] cpufreq: stats: Fix potential out-of-bounds access in deferred reset	[Body]
[PATCH 6.18 811/869] arm64/mm: restrict transparent contpte mappings to valid PTEs	[Body]
[PATCH 6.18 812/869] perf machine: Fix NULL deref in thread__resolve_callchain_sample()	[Body]
[PATCH 6.18 813/869] drm/amdkfd: stop restore retries on device unplug	[Body]
[PATCH 6.18 814/869] drm/amd/display: take a runtime PM reference only when a CRTC turns on	[Body]
[PATCH 6.18 815/869] drm/amdgpu: reject CS chunks too large for kvmalloc()	[Body]
[PATCH 6.18 816/869] drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping	[Body]
[PATCH 6.18 817/869] drm/amd/display: Initialize missing TD-LUT programming inputs	[Body]
[PATCH 6.18 818/869] drm/amdkfd: validate SRAT subtables before parsing	[Body]
[PATCH 6.18 819/869] drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO	[Body]
[PATCH 6.18 820/869] net: limit priority VLAN untag depth	[Body]
[PATCH 6.18 821/869] macvlan: fix passthru promiscuity accounting while down	[Body]
[PATCH 6.18 822/869] net: hisilicon: hisi_femac: Stop the receiver before releasing the RX ring	[Body]
[PATCH 6.18 823/869] fs/ntfs3: bound CreateAttribute asize against record_size in do_action	[Body]
[PATCH 6.18 824/869] fs/ntfs3: bound DeleteAttribute asize against rec->used in do_action	[Body]
[PATCH 6.18 825/869] ntfs3: fix mapping pairs bounds check for alignment	[Body]
[PATCH 6.18 826/869] ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe	[Body]
[PATCH 6.18 827/869] ppp: fix stale pointer access after pskb_may_pull in ppp_ccp_peek	[Body]
[PATCH 6.18 828/869] nvmet-rdma: reject short connection requests	[Body]
[PATCH 6.18 829/869] nvmet-fc: only send read data for successful commands	[Body]
[PATCH 6.18 830/869] nvmet: pci-epf: report transport errors in command completions	[Body]
[PATCH 6.18 831/869] nvmet: pci-epf: require SGLs to match the command data length	[Body]
[PATCH 6.18 832/869] nvmet-auth: fix error handling on CHALLENGE failure	[Body]
[PATCH 6.18 833/869] nvmet-fc: Tear down the association when the admin queue allocation fails	[Body]
[PATCH 6.18 834/869] nvme-tcp: start error recovery when read_sock fails	[Body]
[PATCH 6.18 835/869] nvme-tcp: fix io_work priority inversion when send_mutex is held	[Body]
[PATCH 6.18 836/869] nvmet: Finish the blk plug when integrity allocation fails	[Body]
[PATCH 6.18 837/869] nvmet: Free the old negotiation state when restarting authentication	[Body]
[PATCH 6.18 838/869] kgdb: Fix buffer overflow in the m packet handler	[Body]
[PATCH 6.18 839/869] kgdb: Fix buffer overflow in the M and X packet handlers	[Body]
[PATCH 6.18 840/869] kgdb: Fix buffer overflow in the qRcmd packet handler	[Body]
[PATCH 6.18 841/869] fsverity: Be more careful with return value of ->get_verity_descriptor()	[Body]
[PATCH 6.18 842/869] irqchip/riscv-imsic: Report successful hardware retrigger	[Body]
[PATCH 6.18 843/869] irqchip/irq-msi-lib: Free wired MSI descriptors	[Body]
[PATCH 6.18 844/869] Revert "net: advertise TCP MSS from the configured MTU, not the learned PMTU"	[Body]
[PATCH 6.18 845/869] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates	[Body]
[PATCH 6.18 846/869] apparmor: dont revalidate inherited files under files->file_lock	[Body]
[PATCH 6.18 847/869] r8152: Use BMSR to detect the link state	[Body]
[PATCH 6.18 848/869] mount: refuse setns() with a shared fs_struct again	[Body]
[PATCH 6.18 849/869] userns: dont drop the exec securebits	[Body]
[PATCH 6.18 850/869] blk-iocost: abort weight transfer on invalid donation weights	[Body]
[PATCH 6.18 851/869] proc: dont let an entry below /proc/<pid>/net be a mountpoint	[Body]
[PATCH 6.18 852/869] tcp: check congestion control restriction first	[Body]
[PATCH 6.18 853/869] apparmor: fix refcount leak in aa_get_newest_profile()	[Body]
[PATCH 6.18 854/869] apparmor: avoid potential double free when remapping DFA tables	[Body]
[PATCH 6.18 855/869] apparmor: check accept index + 1 is in bounds	[Body]
[PATCH 6.18 856/869] net/packet: check TX_RING fragments before memory accounting	[Body]
[PATCH 6.18 857/869] tcp: fix reordering addition overflow in MTU probing	[Body]
[PATCH 6.18 858/869] apparmor: remove fs entries created by a failed policy load	[Body]
[PATCH 6.18 859/869] aio: fix NULL deref when a fault races ring truncation	[Body]
[PATCH 6.18 860/869] backing-file: enforce append-only and immutable backing inodes	[Body]
[PATCH 6.18 861/869] iov_iter: fix NULL deref in iov_iter_alignment()	[Body]
[PATCH 6.18 862/869] splice: avoid stale f_pos writeback on error	[Body]
[PATCH 6.18 863/869] fs: let backing files inherit FMODE_NONOTIFY from the user file	[Body]
[PATCH 6.18 864/869] fs: skip copy_file_range write limits when there is no data	[Body]
[PATCH 6.18 865/869] fs: dont fail __d_obtain_alias() for unlinked inodes	[Body]
[PATCH 6.18 866/869] init/bootconfig: pass init arguments in documented order	[Body]
[PATCH 6.18 867/869] ocfs2: read the xattr entry hash before defragmenting the bucket	[Body]
[PATCH 6.18 868/869] apparmor: fix uninitialized variable warning in aa_inherit_files	[Body]
[PATCH 6.18 869/869] apparmor: on failed load ensure profile files are removed before parent	[Body]

ID (for dev)	9a0d6f76-65d8-4fa7-a9a5-f1e95e43a27b
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	c3f63d70f236bb7685e6d11d1d9b5b351552e600 [Config]		passed [Log]
[KASAN] Boot test: Base	c3f63d70f236bb7685e6d11d1d9b5b351552e600 [Config]		passed [Log]
[KASAN] Build Patched		c3f63d70f236bb7685e6d11d1d9b5b351552e600 [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		c3f63d70f236bb7685e6d11d1d9b5b351552e600 [Config] [patched]	passed [Log]
[KASAN] Fuzz	c3f63d70f236bb7685e6d11d1d9b5b351552e600 [Config]	c3f63d70f236bb7685e6d11d1d9b5b351552e600 [Config] [patched]	passed [Log] [Artifacts]

Patches (869)

Series Summary

Sessions

Session 2026-11-09