Syzbot CI

Subject	6.18.59-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-10-23 16:34:38 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 6.18 001/193] drm/ttm: fix swapped-out resources never leaving their bulk_move range	[Body]
[PATCH 6.18 002/193] ALSA: ctxfi: Dont enumerate SPDIF1 at DAIO initialization	[Body]
[PATCH 6.18 003/193] ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY	[Body]
[PATCH 6.18 004/193] ALSA: ctxfi: Use correct DAIO type for da_desc	[Body]
[PATCH 6.18 005/193] ax25: bound REJ-driven fast retransmits with the existing N2 counter	[Body]
[PATCH 6.18 006/193] rose: purge rose_neigh->queue on final teardown	[Body]
[PATCH 6.18 007/193] i2c: qcom-geni: Restore the source-clock selection policy	[Body]
[PATCH 6.18 008/193] kho: free phys_bits bitmaps using free_page() in __kho_abort()	[Body]
[PATCH 6.18 009/193] soc/tegra: fuse: Add missing newline to APBMISC error message	[Body]
[PATCH 6.18 010/193] ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition	[Body]
[PATCH 6.18 011/193] power: supply: Fix maintenance charge table kernel-doc	[Body]
[PATCH 6.18 012/193] power: supply: ds2780: Fix ds2780_get_capacity() returning raw value	[Body]
[PATCH 6.18 013/193] Drivers: hv: Avoid infinite retry loop in init_vp_index()	[Body]
[PATCH 6.18 014/193] x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()	[Body]
[PATCH 6.18 015/193] Drivers: hv: Dont reset VMBus connection state on error/exit paths	[Body]
[PATCH 6.18 016/193] pinctrl: qcom: qcs8300: Fix intr_target_width	[Body]
[PATCH 6.18 017/193] pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13	[Body]
[PATCH 6.18 018/193] tools/power turbostat: Fix fd_perf leak on reset	[Body]
[PATCH 6.18 019/193] tools/power turbostat: Fix CWF PMT off-by-one	[Body]
[PATCH 6.18 020/193] tools/power turbostat: Fix PMT error path fd handling	[Body]
[PATCH 6.18 021/193] tools/power turbostat: Fix add_counter issue if > 24 counters.	[Body]
[PATCH 6.18 022/193] power: supply: generic-adc-battery: Fix temperature IIO channel conversion	[Body]
[PATCH 6.18 023/193] power: supply: core: prevent unregistering a power supply while a callback runs	[Body]
[PATCH 6.18 024/193] pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12	[Body]
[PATCH 6.18 025/193] pinctrl: sunxi: dt: do not accumulate npins across probe attempts	[Body]
[PATCH 6.18 026/193] drm/vc4: hdmi: Move packet RAM enable to PM runtime	[Body]
[PATCH 6.18 027/193] gpio: nct6694: Mark the GPIO controller as sleeping	[Body]
[PATCH 6.18 028/193] vsock: treat TCP_CLOSING as once-established	[Body]
[PATCH 6.18 029/193] net/rds: dont let the rdma_cm destroy an id RDS still owns on route failure	[Body]
[PATCH 6.18 030/193] ASoC: Intel: avs: Reset the stream unless it is already prepared	[Body]
[PATCH 6.18 031/193] ASoC: stm32: spdifrx: fix synchronization state check	[Body]
[PATCH 6.18 032/193] ASoC: cs42l56: Put the Limiter Cushion control on the limiter register	[Body]
[PATCH 6.18 033/193] ASoC: cs42l52: Fix the NG Type Switch bit	[Body]
[PATCH 6.18 034/193] ASoC: pcm3168a: Fix the DAC zero flag polarity bit	[Body]
[PATCH 6.18 035/193] ASoC: max98371: Fix the Speaker DHT Min Volume bits	[Body]
[PATCH 6.18 036/193] ASoC: wm8978: Fix the 128x oversampling switch bits	[Body]
[PATCH 6.18 037/193] ASoC: nau8822: Fix the 128x oversampling switch bits	[Body]
[PATCH 6.18 038/193] regcache: Add ->populate() callback to separate from ->init()	[Body]
[PATCH 6.18 039/193] regcache: Do not overwrite error code when finalizing cache after error	[Body]
[PATCH 6.18 040/193] regmap: Drop map lock during cache init and exit	[Body]
[PATCH 6.18 041/193] netlink: reset skb headers before unicast and multicast filtering	[Body]
[PATCH 6.18 042/193] accel/rocket: clear rdev on device init failure	[Body]
[PATCH 6.18 043/193] net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool	[Body]
[PATCH 6.18 044/193] net/mlx5: HWS, fix flow meter offset within its bulk	[Body]
[PATCH 6.18 045/193] ASoC: amd: yc: disable MSI on resume	[Body]
[PATCH 6.18 046/193] drm/xe: skip eviction of a BO with no resource	[Body]
[PATCH 6.18 047/193] drm/xe/oa: Zero OA buffer at allocation	[Body]
[PATCH 6.18 048/193] spi: tegra114: assert CS GPIO for every transfer in a message	[Body]
[PATCH 6.18 049/193] nios2: fix __wsum type degradation in csum_fold()	[Body]
[PATCH 6.18 050/193] scsi: st: Save the visited block for the partition the drive is in	[Body]
[PATCH 6.18 051/193] scsi: target: iscsi: Fix race in discovery auth updates	[Body]
[PATCH 6.18 052/193] drm/panthor: fix immortalis condition	[Body]
[PATCH 6.18 053/193] ocfs2/dlm: Protect the recovery list during debugfs reads	[Body]
[PATCH 6.18 054/193] samples: pidfd: fix userprogs typo	[Body]
[PATCH 6.18 055/193] pipe: preserve existing fasync readers on writer setup failure	[Body]
[PATCH 6.18 056/193] tracing: probes: error if BTF is required but unavailable	[Body]
[PATCH 6.18 057/193] scsi: libsas: Fix SMP IO deadlock during HA resume	[Body]
[PATCH 6.18 058/193] netlink: avoid hashing the network namespace pointer	[Body]
[PATCH 6.18 059/193] net: bcmgenet: unshare the skb before writing the control block	[Body]
[PATCH 6.18 060/193] net/ipv6: Introduce payload_len helpers	[Body]
[PATCH 6.18 061/193] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()	[Body]
[PATCH 6.18 062/193] gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths	[Body]
[PATCH 6.18 063/193] gpio: mxc: fix race between chained IRQ handler install and probe completion	[Body]
[PATCH 6.18 064/193] gpio: mxc: fix both_edges bit operations	[Body]
[PATCH 6.18 065/193] gpio: mxc: use BIT() macro	[Body]
[PATCH 6.18 066/193] gpio: mxc: fix wakeup_pads bit operations	[Body]
[PATCH 6.18 067/193] gpio: mxc: fix race between gpiochip registration and IRQ domain setup	[Body]
[PATCH 6.18 068/193] perf: Fix perf_pmu_migrate_context() leaving events behind	[Body]
[PATCH 6.18 069/193] printk: Postpone kthread startup	[Body]
[PATCH 6.18 070/193] PCI: Dont treat ~0 as ready in pci_dev_wait() with RRS SV	[Body]
[PATCH 6.18 071/193] accel/rocket: search every core slot when a core is removed	[Body]
[PATCH 6.18 072/193] afs: free the super info after a grace period	[Body]
[PATCH 6.18 073/193] autofs: ignore notification errors from a replaced pipe	[Body]
[PATCH 6.18 074/193] bootconfig: give the footer size static_assert a message	[Body]
[PATCH 6.18 075/193] unicode: free the map after a grace period	[Body]
[PATCH 6.18 076/193] watch_queue: Fix note pool publication race in watch_queue_set_size()	[Body]
[PATCH 6.18 077/193] x86/kvm: Dont consume async #PF flags on a kernel #PF in NMI context	[Body]
[PATCH 6.18 078/193] KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry	[Body]
[PATCH 6.18 079/193] fsnotify: prevent mark additions during connector teardown	[Body]
[PATCH 6.18 080/193] pid_namespace: make zap_pid_ns_processes() freezable	[Body]
[PATCH 6.18 081/193] eventfs: Free the eventfs_inode after an rcu grace period too	[Body]
[PATCH 6.18 082/193] namei: test for a negative dentry the way traverse_mounts() does	[Body]
[PATCH 6.18 083/193] lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state	[Body]
[PATCH 6.18 084/193] lib/crypto: poly1305: Use memzero_explicit() in poly1305_final()	[Body]
[PATCH 6.18 085/193] net/sched: fix use-after-free in __tcf_action_put()	[Body]
[PATCH 6.18 086/193] net: rds: fix uninitialized trans dereference in CM event handler	[Body]
[PATCH 6.18 087/193] pinctrl: amd: Clear S4 wake bits when firmware has _AEI	[Body]
[PATCH 6.18 088/193] sctp: revalidate output stream after association connect wait	[Body]
[PATCH 6.18 089/193] tools: gpio: fix building from the top level with O=	[Body]
[PATCH 6.18 090/193] tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields	[Body]
[PATCH 6.18 091/193] i2c: qcom-cci: Fix HALT_ACK reset request being dropped	[Body]
[PATCH 6.18 092/193] i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()	[Body]
[PATCH 6.18 093/193] perf: Track the perf mlock gift separately	[Body]
[PATCH 6.18 094/193] perf: Update cgroup time when rotating multiplexed events	[Body]
[PATCH 6.18 095/193] ring-buffer: Do not show buffer_meta for CPUs without a buffer	[Body]
[PATCH 6.18 096/193] ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()	[Body]
[PATCH 6.18 097/193] ring-buffer: Fix false warning in ring_buffer_map_get_reader()	[Body]
[PATCH 6.18 098/193] scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies	[Body]
[PATCH 6.18 099/193] scsi: xen/scsifront: Check for a NULL shadow entry on a backend response	[Body]
[PATCH 6.18 100/193] scsi: libiscsi: Reject a negative task index from parse_pdu_itt	[Body]
[PATCH 6.18 101/193] scsi: libiscsi: Validate the ITT reflected in a Reject PDU	[Body]
[PATCH 6.18 102/193] scsi: libiscsi: Validate the task named by a management response	[Body]
[PATCH 6.18 103/193] drm/amd/pm: add zero fan stop temperature support on smu 14.0.2	[Body]
[PATCH 6.18 104/193] drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang	[Body]
[PATCH 6.18 105/193] drm/amdgpu: dont drop the runtime PM reference twice in amdgpu_gpr	[Body]
[PATCH 6.18 106/193] drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES	[Body]
[PATCH 6.18 107/193] drm/exec: dont immediately add prelocked obj to array of locked objs	[Body]
[PATCH 6.18 108/193] drm/i915/cx0_phy: Fix ARL-S host bridge detection	[Body]
[PATCH 6.18 109/193] drm/i915/dmc: Add sanity check for DMC load address	[Body]
[PATCH 6.18 110/193] drm/xe: Bump LRU for external objects on exec and rebind	[Body]
[PATCH 6.18 111/193] tracing: Fix the shift out of bounds in the log2 histogram modifier	[Body]
[PATCH 6.18 112/193] tracing: Take trace_types_lock when dropping the buffer_meta reference	[Body]
[PATCH 6.18 113/193] tracing: Check operator stack capacity before pushing	[Body]
[PATCH 6.18 114/193] tracing: Do not initialize tracefs work if tracing is disabled	[Body]
[PATCH 6.18 115/193] tracing: Fix hist trigger timestamps for buffered events	[Body]
[PATCH 6.18 116/193] wifi: p54: validate firmware record lengths	[Body]
[PATCH 6.18 117/193] tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)	[Body]
[PATCH 6.18 118/193] tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)	[Body]
[PATCH 6.18 119/193] cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children	[Body]
[PATCH 6.18 120/193] cifs: dont update i_size in cifs_do_truncate without a cached handle	[Body]
[PATCH 6.18 121/193] dm cache: fix demotion stats in passthrough mode	[Body]
[PATCH 6.18 122/193] dm cache: fix issue with background work locking	[Body]
[PATCH 6.18 123/193] dm-crypt: fix a tiny race condition in crypt_dec_pending	[Body]
[PATCH 6.18 124/193] dm-ebs: fix incorrect device offset check in ebs_ctr()	[Body]
[PATCH 6.18 125/193] dm-integrity: fix infinite loop on discard with large tag size	[Body]
[PATCH 6.18 126/193] dm-integrity: require stable writes for internal hash modes	[Body]
[PATCH 6.18 127/193] mac802154: fix data race and NULL deref on local->assoc_dev	[Body]
[PATCH 6.18 128/193] net/iucv: fix the recvmsg window update	[Body]
[PATCH 6.18 129/193] xfs: dont hold buffer locks across sync transaction commit in xfs_sync_sb_buf	[Body]
[PATCH 6.18 130/193] xfs: fix capability check in xfs	[Body]
[PATCH 6.18 131/193] xfs: fix zoned write iomap flags assignments	[Body]
[PATCH 6.18 132/193] netlink: specs: fix the conntrack filter type	[Body]
[PATCH 6.18 133/193] netlink: specs: add missing mask attributes for conntrack dump	[Body]
[PATCH 6.18 134/193] workqueue: Use raise_softirq() to trigger softirq in irq_work handler	[Body]
[PATCH 6.18 135/193] workqueue: Annotate cb_lock nesting when draining a dead BH pool	[Body]
[PATCH 6.18 136/193] tipc: protect node reset trace dump with node lock	[Body]
[PATCH 6.18 137/193] sctp: validate chunk length in the inqueue parser	[Body]
[PATCH 6.18 138/193] page_pool: keep frag_offset aligned for odd-sized requests	[Body]
[PATCH 6.18 139/193] s390/ctcm: Prevent XID null dereference	[Body]
[PATCH 6.18 140/193] s390/pci: Fix leak of uninitialized kernel data in SCLP report	[Body]
[PATCH 6.18 141/193] ipv4: avoid divide by zero in fib_rebalance	[Body]
[PATCH 6.18 142/193] KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc	[Body]
[PATCH 6.18 143/193] drm/amdgpu: Fix VCE 3 ring align_mask	[Body]
[PATCH 6.18 144/193] ACPI: tiny-power-button: Convert the driver to a platform one	[Body]
[PATCH 6.18 145/193] netfilter: nft_byteorder: remove multi-register support	[Body]
[PATCH 6.18 146/193] KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots	[Body]
[PATCH 6.18 147/193] KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes	[Body]
[PATCH 6.18 148/193] drm/amdgpu: keep the eviction fence until the last handle is closed	[Body]
[PATCH 6.18 149/193] futex: Fix mm reuse handling for FUT_OFF_MMSHARED	[Body]
[PATCH 6.18 150/193] ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture	[Body]
[PATCH 6.18 151/193] ext4: free the sbi after a grace period	[Body]
[PATCH 6.18 152/193] net: bridge: mcast: dont truncate the port group walk on teardown	[Body]
[PATCH 6.18 153/193] net: psp: do not inherit the Rx association on clone	[Body]
[PATCH 6.18 154/193] ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION	[Body]
[PATCH 6.18 155/193] ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION	[Body]
[PATCH 6.18 156/193] ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in	[Body]
[PATCH 6.18 157/193] net/sched: cls_flower: validate mask pointer after nla_next()	[Body]
[PATCH 6.18 158/193] smb: client: fix heap overflow in cifs_do_set_acl()	[Body]
[PATCH 6.18 159/193] smb: client: fix multiuser mount with krb5	[Body]
[PATCH 6.18 160/193] scsi: st: Fix use-after-free race between st_remove() and st_open()	[Body]
[PATCH 6.18 161/193] ntfs3: fix use-after-free of sbi->options in cmp_fnames	[Body]
[PATCH 6.18 162/193] ntfs3: fix double free of sbi->options->nls and clarify ownership of fc->fs_private	[Body]
[PATCH 6.18 163/193] fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()	[Body]
[PATCH 6.18 164/193] ntfs3: free the sbi after a grace period	[Body]
[PATCH 6.18 165/193] drm/i915/dmc: Harden DMC firmware payload parsing	[Body]
[PATCH 6.18 166/193] sched_ext: idle: Respect task affinity in restricted CPU selection	[Body]
[PATCH 6.18 167/193] tracing: Fix ignored return value of resize_buffer_duplicate_size()	[Body]
[PATCH 6.18 168/193] tracing: Keep the predicate limit separate from program capacity	[Body]
[PATCH 6.18 169/193] drm/amdgpu: free the userptr ranges when a CS fails after parser_bos	[Body]
[PATCH 6.18 170/193] sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPUs local DSQ	[Body]
[PATCH 6.18 171/193] tracing: Fix fully-qualified variable reference printing in histograms	[Body]
[PATCH 6.18 172/193] tracing: Use __free() for expr_str() buffer	[Body]
[PATCH 6.18 173/193] tracing: Bound histogram expression strings with seq_buf	[Body]
[PATCH 6.18 174/193] tracing: Fix NULL dereference when copying keys for a field variable	[Body]
[PATCH 6.18 175/193] smb/client: refresh allocation size after duplicate extents	[Body]
[PATCH 6.18 176/193] cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()	[Body]
[PATCH 6.18 177/193] io_uring/cancel: move request/task cancelation logic into cancel.c	[Body]
[PATCH 6.18 178/193] io_uring/cancel: move __io_uring_cancel() into cancel.c	[Body]
[PATCH 6.18 179/193] io_uring/cancel: move cancelation code from io_uring.c to cancel.c	[Body]
[PATCH 6.18 180/193] io_uring/cancel: dont spin on local work the task cant run	[Body]
[PATCH 6.18 181/193] workqueue: release pwq pools by pool type	[Body]
[PATCH 6.18 182/193] workqueue: Fix unbound pool lifetime for pending pwqs	[Body]
[PATCH 6.18 183/193] virtio: set skb owner of virtio_transport_reset_no_sock() reply	[Body]
[PATCH 6.18 184/193] vsock/virtio: validate packet source for connected sockets	[Body]
[PATCH 6.18 185/193] ipv4: udp: Create exceptions before socket matching	[Body]
[PATCH 6.18 186/193] vsock/vmci: validate packet source for connected sockets	[Body]
[PATCH 6.18 187/193] smb: client: fix data corruption with concurrent writes and O_TRUNC	[Body]
[PATCH 6.18 188/193] ice: remove legacy Rx and construct SKB	[Body]
[PATCH 6.18 189/193] ice: drop page splitting and recycling	[Body]
[PATCH 6.18 190/193] ice: switch to Page Pool	[Body]
[PATCH 6.18 191/193] ice: fix broken Rx on VFs	[Body]
[PATCH 6.18 192/193] ice: fix crash in ethtool offline loopback test	[Body]
[PATCH 6.18 193/193] smb: client: drain outstanding I/O before truncating on O_TRUNC open	[Body]

Session 2026-10-23

Passed

ID (for dev)	40ac0954-2080-4a9a-bc4f-b4fb20f05cb8
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	2926d88bb7fc4608fd942453d929c39e4e5ec006 [Config]		passed [Log]
[KASAN] Boot test: Base	2926d88bb7fc4608fd942453d929c39e4e5ec006 [Config]		passed [Log]
[KASAN] Build Patched		2926d88bb7fc4608fd942453d929c39e4e5ec006 [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		2926d88bb7fc4608fd942453d929c39e4e5ec006 [Config] [patched]	passed [Log]
[KASAN] Fuzz	2926d88bb7fc4608fd942453d929c39e4e5ec006 [Config]	2926d88bb7fc4608fd942453d929c39e4e5ec006 [Config] [patched]	passed [Log] [Artifacts]

Patches (193)

Series Summary

Sessions

Session 2026-10-23