Syzbot CI

Subject	6.18.60-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-10-28 16:59:45 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 6.18 001/109] eventfs: fix SRCU read lock leak in eventfs_iterate()	[Body]
[PATCH 6.18 002/109] ACPI: scan: Register platform devices for fixed event buttons	[Body]
[PATCH 6.18 003/109] ice: fix rxq info registering in mbuf packets	[Body]
[PATCH 6.18 004/109] ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz	[Body]
[PATCH 6.18 005/109] rose: clear stale N(R)/N(S) before (re)transmitting a data frame	[Body]
[PATCH 6.18 006/109] netrom: linearize and validate lengths in nr_rx_frame()	[Body]
[PATCH 6.18 007/109] netrom: require full NET/ROM headers in nr_route_frame()	[Body]
[PATCH 6.18 008/109] net: netrom: validate source address in nr_find_socket()	[Body]
[PATCH 6.18 009/109] netrom: bound fragment reassembly in nr_queue_rx_frame()	[Body]
[PATCH 6.18 010/109] ax25: fix OOB read after address header strip in ax25_rcv()	[Body]
[PATCH 6.18 011/109] ax25: check frame length in ax25_decode() and ax25_rx_iframe()	[Body]
[PATCH 6.18 012/109] net: ax25: fix integer overflow in ax25_rx_fragment()	[Body]
[PATCH 6.18 013/109] netrom: use a single lock for the node and neighbour lists	[Body]
[PATCH 6.18 014/109] netrom: look up and update routes in one critical section	[Body]
[PATCH 6.18 015/109] netrom: fix reference count leak in nr_rt_device_down	[Body]
[PATCH 6.18 016/109] netrom: clear nr_neigh->ax25 under the routing lock in nr_link_failed()	[Body]
[PATCH 6.18 017/109] netrom: fix nr_node leak when nr_del_node() removes the last route	[Body]
[PATCH 6.18 018/109] rose: clear through routes when a neighbour is removed from the tables	[Body]
[PATCH 6.18 019/109] rose: restart the link of a neighbour created over a live AX.25 connection	[Body]
[PATCH 6.18 020/109] ax25: serialise the transmission of I frames on a connection	[Body]
[PATCH 6.18 021/109] rose: process received frames and send with the socket locked	[Body]
[PATCH 6.18 022/109] ax25: dont create two connections for the same link in ax25_send_frame()	[Body]
[PATCH 6.18 023/109] ax25: read the connections ax25_dev only once when walking ax25_list	[Body]
[PATCH 6.18 024/109] ax25: wait for ax25_send_frame() before detaching the connections of a device	[Body]
[PATCH 6.18 025/109] ax25: dont accept frames on a device that is going down	[Body]
[PATCH 6.18 026/109] ax25: send a private copy of each I frame	[Body]
[PATCH 6.18 027/109] rose: clear the circuits of a neighbour that restarts the link	[Body]
[PATCH 6.18 028/109] ax25: send unacknowledged I frames again when a link is re-established	[Body]
[PATCH 6.18 029/109] rose: bring up the link of the preferred route passed over by a connect request	[Body]
[PATCH 6.18 030/109] ax25: dont free an incoming SABM skb left on the listeners queue	[Body]
[PATCH 6.18 031/109] block: avoid potential deadlock on zone revalidation failure	[Body]
[PATCH 6.18 032/109] mm/damon/core: error damos_commit_quota_goal() for zero target_value	[Body]
[PATCH 6.18 033/109] net_sched: codel: fix stale state for empty flows in fq_codel	[Body]
[PATCH 6.18 034/109] Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn	[Body]
[PATCH 6.18 035/109] tracing: Hold trace_types_lock when updating modules in persistent instances	[Body]
[PATCH 6.18 036/109] tracing: Hold trace_types_lock when resetting last boot data from readers	[Body]
[PATCH 6.18 037/109] tracing: Reject incomplete event filter expressions	[Body]
[PATCH 6.18 038/109] tracing: Save the event file instead of the compatible histogram	[Body]
[PATCH 6.18 039/109] tracing: Unregister field variable histograms when the command fails	[Body]
[PATCH 6.18 040/109] tracing: Fix 64-bit and signed histogram fields on 32-bit kernels	[Body]
[PATCH 6.18 041/109] tracing/histograms: Verify event_call identity when updating synth_event refcount	[Body]
[PATCH 6.18 042/109] net: gso: limit recursive IP-in-IP segmentation	[Body]
[PATCH 6.18 043/109] io-wq: order the exit bit against worker creation task work	[Body]
[PATCH 6.18 044/109] io_uring/waitid: own the request before clearing ->head	[Body]
[PATCH 6.18 045/109] io_uring/cmd: dont leave list poison in ->hash_node	[Body]
[PATCH 6.18 046/109] io_uring/wait: dont spin on a stuck overflow list	[Body]
[PATCH 6.18 047/109] io_uring/io-wq: dont lose the signal that ends work	[Body]
[PATCH 6.18 048/109] io_uring/io-wq: dont hide a link from cancellations	[Body]
[PATCH 6.18 049/109] io_uring: dont flood a cancelling task with task_work	[Body]
[PATCH 6.18 050/109] io_uring/io-wq: dont go to sleep on pending work	[Body]
[PATCH 6.18 051/109] io_uring/io-wq: dont strand work when a worker exits	[Body]
[PATCH 6.18 052/109] io_uring/io-wq: dont exit with a creation pending	[Body]
[PATCH 6.18 053/109] io_uring/io-wq: let cancel find picked up hashed work	[Body]
[PATCH 6.18 054/109] io_uring/poll: dont lose a cancel as io-wq arms poll	[Body]
[PATCH 6.18 055/109] io_uring: dont lose a cancel as io-wq parks a request	[Body]
[PATCH 6.18 056/109] io_uring/cancel: dont forget that the work was running	[Body]
[PATCH 6.18 057/109] io_uring/cancel: recognize "no timeout" on 32-bit	[Body]
[PATCH 6.18 058/109] io_uring/cancel: let CANCEL_ALL find parked requests	[Body]
[PATCH 6.18 059/109] io_uring: wake ring pollers for local task_work	[Body]
[PATCH 6.18 060/109] io_uring/wait: look at all CQ waiters on wake up	[Body]
[PATCH 6.18 061/109] io_uring/poll: drop stale double poll entry on rearm	[Body]
[PATCH 6.18 062/109] io_uring/futex: allocate private hash before waiting	[Body]
[PATCH 6.18 063/109] io_uring: drop the CQE cache if a refill fails	[Body]
[PATCH 6.18 064/109] io_uring/register: dont wrap 32b CQEs when resizing	[Body]
[PATCH 6.18 065/109] io_uring/register: handle index wrap when resizing	[Body]
[PATCH 6.18 066/109] io_uring/fdinfo: fix CQE dump of CQE32 rings	[Body]
[PATCH 6.18 067/109] io_uring/timeout: dont skip over reached sequences	[Body]
[PATCH 6.18 068/109] io_uring/timeout: keep repeat count on multishot update	[Body]
[PATCH 6.18 069/109] io_uring/wait: no early -ETIME if min_wait finds work	[Body]
[PATCH 6.18 070/109] io_uring/napi: make stale entries time out after 60s	[Body]
[PATCH 6.18 071/109] io_uring/napi: dont busy poll past an expired timeout	[Body]
[PATCH 6.18 072/109] io_uring/zcrx: fix buffer offsets in areas above 4GB	[Body]
[PATCH 6.18 073/109] io_uring/kbuf: handle index wrap in last buffer check	[Body]
[PATCH 6.18 074/109] io_uring/sqpoll: let the thread sleep on disabled rings	[Body]
[PATCH 6.18 075/109] io_uring/openclose: keep the lock in io_pipe_fixed()	[Body]
[PATCH 6.18 076/109] io_uring: dont pass restart error codes to userspace	[Body]
[PATCH 6.18 077/109] io_uring/net: dont retry recv on uncommitted buffers	[Body]
[PATCH 6.18 078/109] io_uring/timeout: no ABS update of multishot timeouts	[Body]
[PATCH 6.18 079/109] io_uring/timeout: dont end a linked timeout with 1	[Body]
[PATCH 6.18 080/109] io_uring: look up the file before queueing to io-wq	[Body]
[PATCH 6.18 081/109] io_uring/poll: avoid retry wakeup loss when dropping ownership	[Body]
[PATCH 6.18 082/109] io_uring/timeout: dont put a sequence target behind the last flush	[Body]
[PATCH 6.18 083/109] io_uring/timeout: dont flush with the sequence behind the last flush	[Body]
[PATCH 6.18 084/109] io_uring/timeout: dont lose a cancel as io-wq arms a timeout	[Body]
[PATCH 6.18 085/109] io_uring/poll: dont loop on HUP with multiple references	[Body]
[PATCH 6.18 086/109] io_uring/net: keep recv buffer select length within MAX_RW_COUNT	[Body]
[PATCH 6.18 087/109] io_uring/wait: wake real-time waiters from hard interrupt context	[Body]
[PATCH 6.18 088/109] io_uring/waitid: prevent cancel reference wrap	[Body]
[PATCH 6.18 089/109] io_uring: end the drain when the drain request completes	[Body]
[PATCH 6.18 090/109] io_uring: keep the drain active when a deferred drain request is started	[Body]
[PATCH 6.18 091/109] keys: Avoid the owner account dereference in named keyring lookup	[Body]
[PATCH 6.18 092/109] keys: Check the authorization payload in process keyring searches	[Body]
[PATCH 6.18 093/109] keys: Protect the type name while describing a key	[Body]
[PATCH 6.18 094/109] keys: make keyring indexes independent of kernel addresses	[Body]
[PATCH 6.18 095/109] keys: Protect the read method check against type removal	[Body]
[PATCH 6.18 096/109] KEYS: Fix key_reject_and_link() race with keyring restriction	[Body]
[PATCH 6.18 097/109] KEYS: trusted: Fix blob allocation size in tpm2_key_decode()	[Body]
[PATCH 6.18 098/109] keys/trusted_keys: return immediately after TPM unseal failure	[Body]
[PATCH 6.18 099/109] asymmetric_keys: reject trust keys without IDs	[Body]
[PATCH 6.18 100/109] ftrace: Initialize modname and offset in print_rec()	[Body]
[PATCH 6.18 101/109] coredump: hold RCU while releasing parked threads	[Body]
[PATCH 6.18 102/109] signal: only SIGKILL and the freezers interrupt a coredumping task	[Body]
[PATCH 6.18 103/109] signal: dont retarget shared signals in a dying thread group	[Body]
[PATCH 6.18 104/109] ptrace: refuse to change the signal mask of a user worker	[Body]
[PATCH 6.18 105/109] fork: release the files of a failed fork after sched_cancel_fork()	[Body]
[PATCH 6.18 106/109] exit: hang up the tty before closing the files	[Body]
[PATCH 6.18 107/109] pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper	[Body]
[PATCH 6.18 108/109] signal: allow taks to temporarily block TIF_NOTIFY_SIGNAL	[Body]
[PATCH 6.18 109/109] ACPI: scan: Avoid registering platform devices with resource overlaps	[Body]

Session 2026-10-28

Passed

ID (for dev)	296d3b49-b965-4c45-b2e5-06f5d8d7e034
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	1253a6aa5d104312bf0992afacc15220ae35bdf9 [Config]		passed [Log]
[KASAN] Boot test: Base	1253a6aa5d104312bf0992afacc15220ae35bdf9 [Config]		passed [Log]
[KASAN] Build Patched		1253a6aa5d104312bf0992afacc15220ae35bdf9 [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		1253a6aa5d104312bf0992afacc15220ae35bdf9 [Config] [patched]	passed [Log]
[KASAN] Fuzz	1253a6aa5d104312bf0992afacc15220ae35bdf9 [Config]	1253a6aa5d104312bf0992afacc15220ae35bdf9 [Config] [patched]	passed [Log] [Artifacts]

Patches (109)

Series Summary

Sessions

Session 2026-10-28