Syzbot CI

Subject	6.12.114-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-10-17 15:47:22 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 6.12 001/869] spi: mpc52xx: clean up interrupt handling	[Body]
[PATCH 6.12 002/869] usb: gadget: f_hid: Add missing error code	[Body]
[PATCH 6.12 003/869] iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported	[Body]
[PATCH 6.12 004/869] iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init()	[Body]
[PATCH 6.12 005/869] ice: fix use-after-free in dynamic port cleanup	[Body]
[PATCH 6.12 006/869] xfs: stop exchanging reflink flags when exchanging mappings	[Body]
[PATCH 6.12 007/869] xfs: fix exchange-range-to-eof file size exchange	[Body]
[PATCH 6.12 008/869] ip6_gre: remove obsolete ERSPAN PMTU update	[Body]
[PATCH 6.12 009/869] xfs: xfs_ifree_cluster vs xfs_iflush_shutdown_abort deadlock	[Body]
[PATCH 6.12 010/869] xfs: catch stale AGF/AGF metadata	[Body]
[PATCH 6.12 011/869] xfs: avoid dquot buffer pin deadlock	[Body]
[PATCH 6.12 012/869] xfs: rearrange code in xfs_buf_item.c	[Body]
[PATCH 6.12 013/869] xfs: factor out stale buffer item completion	[Body]
[PATCH 6.12 014/869] xfs: fix unmount hang with unflushable inodes stuck in the AIL	[Body]
[PATCH 6.12 015/869] drm/amd: Create a device link between APU display and XHCI devices	[Body]
[PATCH 6.12 016/869] ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands	[Body]
[PATCH 6.12 017/869] mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP	[Body]
[PATCH 6.12 018/869] mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge	[Body]
[PATCH 6.12 019/869] wifi: mt76: connac: tolerate inactive BSS deactivation	[Body]
[PATCH 6.12 020/869] net: team: Remove unused team_mode_op, port_enabled	[Body]
[PATCH 6.12 021/869] net: team: Rename port_disabled team mode op to port_tx_disabled	[Body]
[PATCH 6.12 022/869] net: team: fix NULL pointer dereference in team_xmit during mode change	[Body]
[PATCH 6.12 023/869] net: team: stop reusing skb after queue override	[Body]
[PATCH 6.12 024/869] sched_ext: Fix CPU hotplug hang when a dying CPUs tasks sit in the BPF scheduler	[Body]
[PATCH 6.12 025/869] Bluetooth: hci_sync: Fix command skb lifetime during scan setup	[Body]
[PATCH 6.12 026/869] Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex	[Body]
[PATCH 6.12 027/869] drm/vmwgfx: Stop using dev_private to store driver data.	[Body]
[PATCH 6.12 028/869] drm/vmwgfx: validate pitch coming from userspace	[Body]
[PATCH 6.12 029/869] namespace: dont inherit MNT_UMOUNT in clone_mnt()	[Body]
[PATCH 6.12 030/869] namespace: check the mounts before reading their parents in pivot_root()	[Body]
[PATCH 6.12 031/869] dm-integrity: use internal variable for digestsize	[Body]
[PATCH 6.12 032/869] dm-integrity: rename internal_hash	[Body]
[PATCH 6.12 033/869] dm-integrity: fix buffer overflow in inline mode with large tag size	[Body]
[PATCH 6.12 034/869] net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop	[Body]
[PATCH 6.12 035/869] riscv: patch: Avoid early phys_to_page()	[Body]
[PATCH 6.12 036/869] riscv: patch: fix handling of bpf-jit execmem addresses	[Body]
[PATCH 6.12 037/869] scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ	[Body]
[PATCH 6.12 038/869] scsi: ch: Do not keep references to data transfer element devices	[Body]
[PATCH 6.12 039/869] scsi: ufs: core: Move an assignment in ufshcd_mcq_process_cqe()	[Body]
[PATCH 6.12 040/869] scsi: ufs: core: Add debug log for MCQ command timeout	[Body]
[PATCH 6.12 041/869] scsi: ufs: core: Add a comment block above ufshcd_mcq_compl_all_cqes_lock()	[Body]
[PATCH 6.12 042/869] scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock()	[Body]
[PATCH 6.12 043/869] drm/vc4: Use video aperture helpers	[Body]
[PATCH 6.12 044/869] drm/vc4: Fix firmware reference leak in vc4_drm_bind()	[Body]
[PATCH 6.12 045/869] namespace: unhash a dentry before detaching the mounts on it	[Body]
[PATCH 6.12 046/869] namespace: check the target before walking it in do_mount_setattr()	[Body]
[PATCH 6.12 047/869] fcntl: refuse F_SET_RW_HINT on an immutable inode	[Body]
[PATCH 6.12 048/869] namespace: handle mount locking for automounts correctly	[Body]
[PATCH 6.12 049/869] smb: client: improve compound padding in encryption	[Body]
[PATCH 6.12 050/869] smb: client: get rid of bounds check in SMB2_ioctl_init()	[Body]
[PATCH 6.12 051/869] smb: client: fix compound alignment with encryption	[Body]
[PATCH 6.12 052/869] um: work around sched_yield not yielding in time-travel mode	[Body]
[PATCH 6.12 053/869] drm/i915/display: pass display to intel_crtc_for_pipe()	[Body]
[PATCH 6.12 054/869] drm/i915/vga: Convert VGA code to intel_display	[Body]
[PATCH 6.12 055/869] drm/i915/display: convert I915_STATE_WARN() to struct intel_display	[Body]
[PATCH 6.12 056/869] drm/i915/gmbus: convert to struct intel_display	[Body]
[PATCH 6.12 057/869] drm/i915/crt: convert to struct intel_display	[Body]
[PATCH 6.12 058/869] drm/i915: Grab intel_display from the encoder to avoid potential oopsies	[Body]
[PATCH 6.12 059/869] ax25: Remove broken autobind	[Body]
[PATCH 6.12 060/869] f2fs: quota: fix to avoid warning in dquot_writeback_dquots()	[Body]
[PATCH 6.12 061/869] RISC-V: KVM: Teardown riscv specific bits after kvm_exit	[Body]
[PATCH 6.12 062/869] wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info	[Body]
[PATCH 6.12 063/869] wifi: ath12k: fix incorrect TID updation in DP monitor status path	[Body]
[PATCH 6.12 064/869] wifi: ath12k: Avoid explicit type cast in monitor status parse handler	[Body]
[PATCH 6.12 065/869] wifi: ath12k: Avoid memory leak while enabling statistics	[Body]
[PATCH 6.12 066/869] perf/dwc_pcie: Qualify RAS DES VSEC Capability by Vendor, Revision	[Body]
[PATCH 6.12 067/869] perf/dwc_pcie: fix duplicate pci_dev devices	[Body]
[PATCH 6.12 068/869] ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd	[Body]
[PATCH 6.12 069/869] kasan: avoid sleepable page allocation from atomic context	[Body]
[PATCH 6.12 070/869] clk: sunxi-ng: h616: Reparent CPU clock during frequency changes	[Body]
[PATCH 6.12 071/869] clk: sunxi-ng: h616: Reparent GPU clock during frequency changes	[Body]
[PATCH 6.12 072/869] net: ethernet: ti: am65-cpsw: streamline RX queue creation and cleanup	[Body]
[PATCH 6.12 073/869] dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn	[Body]
[PATCH 6.12 074/869] virtio: break and reset virtio devices on device_shutdown()	[Body]
[PATCH 6.12 075/869] coresight: holding cscfg_csdev_lock while removing cscfg from csdev	[Body]
[PATCH 6.12 076/869] PCI/pwrctl: Use of_platform_device_create() to create pwrctl devices	[Body]
[PATCH 6.12 077/869] PCI/pwrctl: Create pwrctl device only if at least one power supply is present	[Body]
[PATCH 6.12 078/869] PCI/pwrctrl: Cancel outstanding rescan work when unregistering	[Body]
[PATCH 6.12 079/869] drm/nouveau: fix a use-after-free in r535_gsp_rpc_push()	[Body]
[PATCH 6.12 080/869] wifi: ath12k: convert struct ath12k_sta::update_wk to use struct wiphy_work	[Body]
[PATCH 6.12 081/869] wifi: ath12k: ath12k_mac_op_sta_state(): clean up update_wk cancellation	[Body]
[PATCH 6.12 082/869] wifi: ath12k: prepare vif data structure for MLO handling	[Body]
[PATCH 6.12 083/869] wifi: ath12k: Fix memory leak due to multiple rx_stats allocation	[Body]
[PATCH 6.12 084/869] mm: fix uprobe pte be overwritten when expanding vma	[Body]
[PATCH 6.12 085/869] riscv: Enable cbo.zero only when all harts support Zicboz	[Body]
[PATCH 6.12 086/869] riscv: Add support for per-thread envcfg CSR values	[Body]
[PATCH 6.12 087/869] riscv: save the SR_SUM status over switches	[Body]
[PATCH 6.12 088/869] wifi: rtw89: pci: configure manual DAC mode via PCI config API only	[Body]
[PATCH 6.12 089/869] s390/entry: Remove __GMAP_ASCE and use _PIF_GUEST_FAULT again	[Body]
[PATCH 6.12 090/869] s390/kvm: Remove kvm_arch_fault_in_page()	[Body]
[PATCH 6.12 091/869] s390/mm/fault: Handle guest-related program interrupts in KVM	[Body]
[PATCH 6.12 092/869] s390/mm: Simplify get_fault_type()	[Body]
[PATCH 6.12 093/869] s390/mm: Get rid of fault type switch statements	[Body]
[PATCH 6.12 094/869] s390/mm: Fix in_atomic() handling in do_secure_storage_access()	[Body]
[PATCH 6.12 095/869] platform/x86/amd/pmf: Switch to platform_get_resource() and devm_ioremap_resource()	[Body]
[PATCH 6.12 096/869] platform/x86/amd: pmf: Use device managed allocations	[Body]
[PATCH 6.12 097/869] drm/rockchip: vop2: Consistently use dev_err_probe()	[Body]
[PATCH 6.12 098/869] drm/rockchip: vop2: Register the primary plane and overlay plane separately	[Body]
[PATCH 6.12 099/869] drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port	[Body]
[PATCH 6.12 100/869] wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()	[Body]
[PATCH 6.12 101/869] rv: Remove trailing whitespace from tracepoint string	[Body]
[PATCH 6.12 102/869] rv: Use strings in da monitors tracepoints	[Body]
[PATCH 6.12 103/869] wifi: iwlwifi: return ERR_PTR from opmode start()	[Body]
[PATCH 6.12 104/869] wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()	[Body]
[PATCH 6.12 105/869] net/sched: Fix backlog accounting in qdisc_dequeue_internal	[Body]
[PATCH 6.12 106/869] mm/mremap: fix WARN with uffd that has remap events disabled	[Body]
[PATCH 6.12 107/869] crypto: x86/aegis128 - eliminate some indirect calls	[Body]
[PATCH 6.12 108/869] crypto: x86/aegis128 - optimize length block preparation using SSE4.1	[Body]
[PATCH 6.12 109/869] crypto: x86/aegis128 - improve assembly function prototypes	[Body]
[PATCH 6.12 110/869] crypto: x86/aegis - Fix sleeping when disallowed on PREEMPT_RT	[Body]
[PATCH 6.12 111/869] crypto: x86/aegis - Add missing error checks	[Body]
[PATCH 6.12 112/869] net/mlx5: HWS, denote how refcounts are protected	[Body]
[PATCH 6.12 113/869] net/mlx5: HWS, simplify allocations as we support only FDB	[Body]
[PATCH 6.12 114/869] net/mlx5: HWS, handle returned error value in pool alloc	[Body]
[PATCH 6.12 115/869] net/mlx5: HWS, update flow - remove the use of dual RTCs	[Body]
[PATCH 6.12 116/869] net/mlx5: HWS, Remove unused element array	[Body]
[PATCH 6.12 117/869] net/mlx5: HWS, Make pool single resource	[Body]
[PATCH 6.12 118/869] net/mlx5: HWS, Refactor pool implementation	[Body]
[PATCH 6.12 119/869] net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path	[Body]
[PATCH 6.12 120/869] net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow	[Body]
[PATCH 6.12 121/869] ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog	[Body]
[PATCH 6.12 122/869] wifi: mt76: mt7915: fix list corruption after hardware restart	[Body]
[PATCH 6.12 123/869] mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()	[Body]
[PATCH 6.12 124/869] smb: client: let recv_done verify data_offset, data_length and remaining_data_length	[Body]
[PATCH 6.12 125/869] iommu/s390: handle IOAT registration based on domain	[Body]
[PATCH 6.12 126/869] iommu/s390: set appropriate IOTA region type	[Body]
[PATCH 6.12 127/869] iommu/s390: Make attach succeed when the device was surprise removed	[Body]
[PATCH 6.12 128/869] RISC-V: KVM: Write hgatp register with valid mode bits	[Body]
[PATCH 6.12 129/869] drm/xe: Dont allow evicting of BOs in same VM in array of VM binds	[Body]
[PATCH 6.12 130/869] remoteproc: Switch back to struct platform_driver::remove()	[Body]
[PATCH 6.12 131/869] remoteproc: qcom: pas: Make remoteproc name human friendly	[Body]
[PATCH 6.12 132/869] remoteproc: qcom_q6v5_pas: Simplify with dev_err_probe()	[Body]
[PATCH 6.12 133/869] remoteproc: qcom: pas: Conclude the rename from adsp	[Body]
[PATCH 6.12 134/869] remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E	[Body]
[PATCH 6.12 135/869] scsi: ufs: core: Fix data race in CPU latency PM QoS request handling	[Body]
[PATCH 6.12 136/869] crypto: hisilicon/hpre - enable all clusters clock gating	[Body]
[PATCH 6.12 137/869] crypto: hisilicon/qm - request reserved interrupt for virtual function	[Body]
[PATCH 6.12 138/869] ASoC: Intel: avs: Use topology information for endpoint numbers	[Body]
[PATCH 6.12 139/869] ASoC: Intel: avs: Do not share the name pointer between components	[Body]
[PATCH 6.12 140/869] sysfs: check visibility before changing group attribute ownership	[Body]
[PATCH 6.12 141/869] amd/amdkfd: enhance kfd process check in switch partition	[Body]
[PATCH 6.12 142/869] drm/xe/guc: Add devm release action to safely tear down CT	[Body]
[PATCH 6.12 143/869] RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage	[Body]
[PATCH 6.12 144/869] net/mlx5: HWS, fix bad parameter in CQ creation	[Body]
[PATCH 6.12 145/869] net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET	[Body]
[PATCH 6.12 146/869] net/mlx5: Store the global doorbell in mlx5_priv	[Body]
[PATCH 6.12 147/869] net/mlx5e: Prepare for using different CQ doorbells	[Body]
[PATCH 6.12 148/869] mlx5: Fix default values in create CQ	[Body]
[PATCH 6.12 149/869] scsi: ufs: qcom : Refactor phy_power_on/off calls	[Body]
[PATCH 6.12 150/869] scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)	[Body]
[PATCH 6.12 151/869] clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL	[Body]
[PATCH 6.12 152/869] netconsole: Acquire su_mutex before navigating configs hierarchy	[Body]
[PATCH 6.12 153/869] net: vxlan: prevent NULL deref in vxlan_xmit_one	[Body]
[PATCH 6.12 154/869] btrfs: fix double free of qgroup record after failure to add delayed ref head	[Body]
[PATCH 6.12 155/869] wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks	[Body]
[PATCH 6.12 156/869] md: init bioset in mddev_init	[Body]
[PATCH 6.12 157/869] coresight-tmc: change tmc_drvdata spinlocks type to raw_spinlock_t	[Body]
[PATCH 6.12 158/869] coresight: ETR: Fix ETR buffer use-after-free issue	[Body]
[PATCH 6.12 159/869] wifi: ath12k: Fix MSDU buffer types handling in RX error path	[Body]
[PATCH 6.12 160/869] accel/ivpu: Allow to import single buffer into multiple contexts	[Body]
[PATCH 6.12 161/869] accel/ivpu: Rework bind/unbind of imported buffers	[Body]
[PATCH 6.12 162/869] accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()	[Body]
[PATCH 6.12 163/869] drm/panthor: Prevent potential UAF in group creation	[Body]
[PATCH 6.12 164/869] scsi: qla2xxx: Clear cmds after chip reset	[Body]
[PATCH 6.12 165/869] s390/fpu: Fix false-positive kmsan report in fpu_vstl()	[Body]
[PATCH 6.12 166/869] staging: most: remove broken i2c driver	[Body]
[PATCH 6.12 167/869] wifi: mac80211: fix typo in HE MCS check	[Body]
[PATCH 6.12 168/869] wifi: mac80211: log link information in ieee80211_determine_chan_mode	[Body]
[PATCH 6.12 169/869] wifi: mac80211: dont WARN for connections on invalid channels	[Body]
[PATCH 6.12 170/869] accel/qaic: Add config structs for supported cards	[Body]
[PATCH 6.12 171/869] net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels	[Body]
[PATCH 6.12 172/869] PCI: endpoint: Add missing NULL check for alloc_workqueue()	[Body]
[PATCH 6.12 173/869] bpf: Mark bpf_refcount field as unique	[Body]
[PATCH 6.12 174/869] staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths	[Body]
[PATCH 6.12 175/869] drm/msm: Recover HW before retire hung submit	[Body]
[PATCH 6.12 176/869] block: zero non-PI portion of auto integrity buffer	[Body]
[PATCH 6.12 177/869] idpf: fix error handling in the init_task on load	[Body]
[PATCH 6.12 178/869] stddef: Introduce TRAILING_OVERLAP() helper macro	[Body]
[PATCH 6.12 179/869] virtio_net: Fix misalignment bug in struct virtnet_info	[Body]
[PATCH 6.12 180/869] ALSA: usb-audio: Prevent excessive number of frames	[Body]
[PATCH 6.12 181/869] riscv: trace: fix snapshot deadlock with sbi ecall	[Body]
[PATCH 6.12 182/869] io_uring/rw: free potentially allocated iovec on cache put failure	[Body]
[PATCH 6.12 183/869] cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()	[Body]
[PATCH 6.12 184/869] sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting	[Body]
[PATCH 6.12 185/869] ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz	[Body]
[PATCH 6.12 186/869] netfilter: nf_tables: clone set on flush only	[Body]
[PATCH 6.12 187/869] serial: rename local uart_port_lock() -> uart_port_ref_lock()	[Body]
[PATCH 6.12 188/869] serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN	[Body]
[PATCH 6.12 189/869] RDMA/efa: Fix use of completion ctx after free	[Body]
[PATCH 6.12 190/869] bpf: Fix exception exit lock checking for subprogs	[Body]
[PATCH 6.12 191/869] drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register	[Body]
[PATCH 6.12 192/869] s390/mm: Add missing secure storage access fixups for donated memory	[Body]
[PATCH 6.12 193/869] dm: limit swapping tables for devices with zone write plugs	[Body]
[PATCH 6.12 194/869] drm/tilcdc: Fix removal actions in case of failed probe	[Body]
[PATCH 6.12 195/869] net: Factorise setup_net() and cleanup_net().	[Body]
[PATCH 6.12 196/869] net: Add ops_undo_single for module load/unload.	[Body]
[PATCH 6.12 197/869] net: Add ->exit_rtnl() hook to struct pernet_operations.	[Body]
[PATCH 6.12 198/869] wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit	[Body]
[PATCH 6.12 199/869] KVM: SEV: Use long-term pin when registering encrypted memory regions	[Body]
[PATCH 6.12 200/869] KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock	[Body]
[PATCH 6.12 201/869] rxrpc: proc: size address buffers for %pISpc output	[Body]
[PATCH 6.12 202/869] Bluetooth: hci_event: move wake reason storage into validated event handlers	[Body]
[PATCH 6.12 203/869] ALSA: ctxfi: Add hw parameter to daio_mgr_dao_init()	[Body]
[PATCH 6.12 204/869] ALSA: ctxfi: Use explicit output flag for DAIO resources	[Body]
[PATCH 6.12 205/869] ALSA: ctxfi: Refactor resource alloc for sparse mappings	[Body]
[PATCH 6.12 206/869] ALSA: ctxfi: Check the error for index mapping	[Body]
[PATCH 6.12 207/869] bpf: Factor out atomic_ptr_type_ok()	[Body]
[PATCH 6.12 208/869] bpf: Factor out check_atomic_rmw()	[Body]
[PATCH 6.12 209/869] bpf: Factor out check_load_mem() and check_store_reg()	[Body]
[PATCH 6.12 210/869] bpf: Fix incorrect pruning due to atomic fetch precision tracking	[Body]
[PATCH 6.12 211/869] Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists	[Body]
[PATCH 6.12 212/869] mptcp: move the whole rx path under msk socket lock protection	[Body]
[PATCH 6.12 213/869] mptcp: cleanup mem accounting	[Body]
[PATCH 6.12 214/869] mptcp: leverage skb deferral free	[Body]
[PATCH 6.12 215/869] mptcp: add eat_recv_skb helper	[Body]
[PATCH 6.12 216/869] mptcp: fix soft lockup in mptcp_recvmsg()	[Body]
[PATCH 6.12 217/869] bnxt_en: Update firmware interface spec to 1.10.3.85	[Body]
[PATCH 6.12 218/869] bnxt_en: set backing store type from query type	[Body]
[PATCH 6.12 219/869] mpls: Hold dev refcnt for mpls_nh.	[Body]
[PATCH 6.12 220/869] mpls: Unify return paths in mpls_dev_notify().	[Body]
[PATCH 6.12 221/869] mpls: Add mpls_dev_rcu().	[Body]
[PATCH 6.12 222/869] mpls: Pass net to mpls_dev_get().	[Body]
[PATCH 6.12 223/869] mpls: Add mpls_route_input().	[Body]
[PATCH 6.12 224/869] mpls: Convert mpls_dump_routes() to RCU.	[Body]
[PATCH 6.12 225/869] mpls: Protect net->mpls.platform_label with a per-netns mutex.	[Body]
[PATCH 6.12 226/869] mpls: add seqcount to protect the platform_label{,s} pair	[Body]
[PATCH 6.12 227/869] HID: core: Add reserved item tag for main items	[Body]
[PATCH 6.12 228/869] HID: rate-limit hid_warn to prevent log flooding	[Body]
[PATCH 6.12 229/869] HID: core: Mitigate potential OOB by removing bogus memset()	[Body]
[PATCH 6.12 230/869] xfs: remove bp->b_error check in xfs_attr3_root_inactive	[Body]
[PATCH 6.12 231/869] xfs: factor out xfs_attr3_node_entry_remove	[Body]
[PATCH 6.12 232/869] xfs: close crash window in attr dabtree inactivation	[Body]
[PATCH 6.12 233/869] net: ioam6: fix OOB and missing lock	[Body]
[PATCH 6.12 234/869] ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()	[Body]
[PATCH 6.12 235/869] srcu: Use irq_work to start GP in tiny SRCU	[Body]
[PATCH 6.12 236/869] btrfs: tree-log: dont use token set/get accessors in fill_inode_item()	[Body]
[PATCH 6.12 237/869] btrfs: fix zero size inode with non-zero size after log replay	[Body]
[PATCH 6.12 238/869] fs/ntfs3: Accumulated refactoring changes	[Body]
[PATCH 6.12 239/869] ntfs3: fix circular locking dependency in run_unpack_ex	[Body]
[PATCH 6.12 240/869] wifi: iwlwifi: fix 22000 series SMEM parsing	[Body]
[PATCH 6.12 241/869] ksmbd: fix signededness bug in smb_direct_prepare_negotiation()	[Body]
[PATCH 6.12 242/869] drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35	[Body]
[PATCH 6.12 243/869] ASoC: qcom: q6asm: handle the responses after closing	[Body]
[PATCH 6.12 244/869] ASoC: qcom: q6asm: drop DSP responses for closed data streams	[Body]
[PATCH 6.12 245/869] wifi: rtw89: pci: validate sequence number of TX release report	[Body]
[PATCH 6.12 246/869] team: avoid NETDEV_CHANGEMTU event when unregistering slave	[Body]
[PATCH 6.12 247/869] media: chips-media: wave5: Fix Null reference while testing fluster	[Body]
[PATCH 6.12 248/869] ring-buffer: Fix possible dereference of uninitialized pointer	[Body]
[PATCH 6.12 249/869] drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels	[Body]
[PATCH 6.12 250/869] drm/amdgpu: Skip vcn poison irq release on VF	[Body]
[PATCH 6.12 251/869] btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()	[Body]
[PATCH 6.12 252/869] btrfs: remove reserved argument from btrfs_pin_extent()	[Body]
[PATCH 6.12 253/869] btrfs: dont BUG() on unexpected delayed ref type in run_one_delayed_ref()	[Body]
[PATCH 6.12 254/869] md raid: fix hang when stopping arrays with metadata through dm-raid	[Body]
[PATCH 6.12 255/869] media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure	[Body]
[PATCH 6.12 256/869] media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC	[Body]
[PATCH 6.12 257/869] KVM: Export hardware virtualization enabling/disabling functions	[Body]
[PATCH 6.12 258/869] syscore: Pass context data to callbacks	[Body]
[PATCH 6.12 259/869] soc/tegra: pmc: Fix unsafe generic_handle_irq() call	[Body]
[PATCH 6.12 260/869] wifi: iwlwifi: mvm: dont send a 6E related command when not supported	[Body]
[PATCH 6.12 261/869] drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()	[Body]
[PATCH 6.12 262/869] ice: ptp: dont WARN when controlling PF is unavailable	[Body]
[PATCH 6.12 263/869] i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue	[Body]
[PATCH 6.12 264/869] i3c: mipi-i3c-hci: Fix race in DMA ring dequeue	[Body]
[PATCH 6.12 265/869] scsi: qla2xxx: Completely fix fcport double free	[Body]
[PATCH 6.12 266/869] ASoC: amd: acp-mach-common: Add missing error check for clock acquisition	[Body]
[PATCH 6.12 267/869] rxrpc: kdoc: Update function descriptions and add link from rxrpc.rst	[Body]
[PATCH 6.12 268/869] rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()	[Body]
[PATCH 6.12 269/869] net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ	[Body]
[PATCH 6.12 270/869] net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ	[Body]
[PATCH 6.12 271/869] nouveau/gsp: drop WARN_ON in ACPI probes	[Body]
[PATCH 6.12 272/869] bpf: Fix tcx/netkit detach permissions when prog fd isnt given	[Body]
[PATCH 6.12 273/869] btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation	[Body]
[PATCH 6.12 274/869] net: stmmac: fix oops when split header is enabled	[Body]
[PATCH 6.12 275/869] drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()	[Body]
[PATCH 6.12 276/869] gfs2: fix memory leaks in gfs2_fill_super error path	[Body]
[PATCH 6.12 277/869] KVM: SVM: Add missing save/restore handling of LBR MSRs	[Body]
[PATCH 6.12 278/869] ipmi:ssif: Clean up kthread on errors	[Body]
[PATCH 6.12 279/869] KVM: x86: Rename "governed features" helpers to use "guest_cpu_cap"	[Body]
[PATCH 6.12 280/869] KVM: nSVM: Always use NextRIP as vmcb02s NextRIP after first L2 VMRUN	[Body]
[PATCH 6.12 281/869] ceph: Remove call to PagePrivate2()	[Body]
[PATCH 6.12 282/869] ceph: extend ceph_writeback_ctl for ceph_writepages_start() refactoring	[Body]
[PATCH 6.12 283/869] ceph: introduce ceph_process_folio_batch() method	[Body]
[PATCH 6.12 284/869] ceph: Remove uses of page from ceph_process_folio_batch()	[Body]
[PATCH 6.12 285/869] ceph: fix num_ops off-by-one when crypto allocation fails	[Body]
[PATCH 6.12 286/869] KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12	[Body]
[PATCH 6.12 287/869] dm-verity-fec: fix reading parity bytes split across blocks (take 3)	[Body]
[PATCH 6.12 288/869] spi: microchip-core-qspi: Support per spi-mem operation frequency switches	[Body]
[PATCH 6.12 289/869] spi: microchip-core-qspi: set min_speed_hz during probe	[Body]
[PATCH 6.12 290/869] spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op()	[Body]
[PATCH 6.12 291/869] spi: microchip-core-qspi: control built-in cs manually	[Body]
[PATCH 6.12 292/869] riscv: kvm: fix vector context allocation leak	[Body]
[PATCH 6.12 293/869] f2fs: fix fsck inconsistency caused by FGGC of node block	[Body]
[PATCH 6.12 294/869] refcount: provide ops for cases when objects memory can be reused	[Body]
[PATCH 6.12 295/869] RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()	[Body]
[PATCH 6.12 296/869] spi: ch341: switch to use devm_spi_alloc_host()	[Body]
[PATCH 6.12 297/869] spi: ch341: fix devres lifetime	[Body]
[PATCH 6.12 298/869] drm/amd/display: Fix dc_link NULL handling in HPD init	[Body]
[PATCH 6.12 299/869] NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages	[Body]
[PATCH 6.12 300/869] coresight: tmc-etr: Fix race condition between sysfs and perf mode	[Body]
[PATCH 6.12 301/869] selinux: allow multiple opens of /sys/fs/selinux/policy	[Body]
[PATCH 6.12 302/869] netfilter: nf_tables: use list_del_rcu for netlink hooks	[Body]
[PATCH 6.12 303/869] RDMA/rxe: Move some code to rxe_loc.h in preparation for ODP	[Body]
[PATCH 6.12 304/869] RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE	[Body]
[PATCH 6.12 305/869] Revert "net/smc: Introduce TCP ULP support"	[Body]
[PATCH 6.12 306/869] tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR	[Body]
[PATCH 6.12 307/869] libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()	[Body]
[PATCH 6.12 308/869] net: airoha: fix BQL imbalance in TX path	[Body]
[PATCH 6.12 309/869] sched/psi: fix race between file release and pressure write	[Body]
[PATCH 6.12 310/869] netfilter: nat: use kfree_rcu to release ops	[Body]
[PATCH 6.12 311/869] ice: fix double-free of tx_buf skb	[Body]
[PATCH 6.12 312/869] f2fs: fix data loss caused by incorrect use of nat_entry flag	[Body]
[PATCH 6.12 313/869] f2fs: avoid reading already updated pages during GC	[Body]
[PATCH 6.12 314/869] greybus: raw: fix use-after-free on cdev close	[Body]
[PATCH 6.12 315/869] net: pull headers in qdisc_pkt_len_segs_init()	[Body]
[PATCH 6.12 316/869] wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync	[Body]
[PATCH 6.12 317/869] wifi: mt76: Fix memory leak destroying device	[Body]
[PATCH 6.12 318/869] powerpc/64s: Fix unmap race with PMD migration entries	[Body]
[PATCH 6.12 319/869] powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy	[Body]
[PATCH 6.12 320/869] vdpa: use generic driver_override infrastructure	[Body]
[PATCH 6.12 321/869] staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction	[Body]
[PATCH 6.12 322/869] sctp: validate embedded INIT chunk and address list lengths in cookie	[Body]
[PATCH 6.12 323/869] wifi: fix leak if split 6 GHz scanning fails	[Body]
[PATCH 6.12 324/869] KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation	[Body]
[PATCH 6.12 325/869] iommu/vt-d: Avoid NULL pointer dereference or refcount corruption	[Body]
[PATCH 6.12 326/869] btrfs: only release the dirty pages io tree after successful writes	[Body]
[PATCH 6.12 327/869] drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED	[Body]
[PATCH 6.12 328/869] net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind	[Body]
[PATCH 6.12 329/869] net: mana: Guard mana_remove against double invocation	[Body]
[PATCH 6.12 330/869] io_uring/napi: protect concurrent io_napi_entry timeout accesses	[Body]
[PATCH 6.12 331/869] io_uring/napi: improve __io_napi_add	[Body]
[PATCH 6.12 332/869] io_uring/napi: Use lock guards	[Body]
[PATCH 6.12 333/869] io_uring/napi: clean up __io_napi_do_busy_loop	[Body]
[PATCH 6.12 334/869] io_uring/napi: cap busy_poll_to 10 msec	[Body]
[PATCH 6.12 335/869] drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()	[Body]
[PATCH 6.12 336/869] f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage	[Body]
[PATCH 6.12 337/869] drm/msm: always recover the gpu	[Body]
[PATCH 6.12 338/869] fbdev: omap2: fix inconsistent lock returns in omapfb_mmap	[Body]
[PATCH 6.12 339/869] fbdev: omap2: fix use-after-free in omapfb_mmap	[Body]
[PATCH 6.12 340/869] f2fs: read COW data with the original inode during atomic write	[Body]
[PATCH 6.12 341/869] gcov: use atomic counter updates to fix concurrent access crashes	[Body]
[PATCH 6.12 342/869] wifi: mt76: add wcid publish check in mt76_sta_add	[Body]
[PATCH 6.12 343/869] drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring	[Body]
[PATCH 6.12 344/869] net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit()	[Body]
[PATCH 6.12 345/869] net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue()	[Body]
[PATCH 6.12 346/869] drm/amdgpu: fix amdgpu_hmm_range_get_pages	[Body]
[PATCH 6.12 347/869] net/handshake: hand off the pinned file reference to accept_doit	[Body]
[PATCH 6.12 348/869] ethtool: module: call ethnl_ops_complete() on module flash errors	[Body]
[PATCH 6.12 349/869] ethtool: rss: fix indir_table and hkey leak on get_rxfh failure	[Body]
[PATCH 6.12 350/869] netfilter: nf_tables: fix dst corruption in same register operation	[Body]
[PATCH 6.12 351/869] tcp: Remove sk->sk_prot->orphan_count.	[Body]
[PATCH 6.12 352/869] tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction	[Body]
[PATCH 6.12 353/869] cgroup/rstat: validate cpu before css_rstat_cpu() access	[Body]
[PATCH 6.12 354/869] hwmon: (lm90) Stop work before releasing hwmon device	[Body]
[PATCH 6.12 355/869] netfs: Fix leak of request in netfs_write_begin() error handling	[Body]
[PATCH 6.12 356/869] netfs: Fix missing locking around retry adding new subreqs	[Body]
[PATCH 6.12 357/869] netfilter: bridge: eb_tables: close module init race	[Body]
[PATCH 6.12 358/869] netfilter: ebtables: move to two-stage removal scheme	[Body]
[PATCH 6.12 359/869] netfilter: x_tables: allow initial table replace without emitting audit log message	[Body]
[PATCH 6.12 360/869] netfilter: x_tables: allocate hook ops while under mutex	[Body]
[PATCH 6.12 361/869] wifi: mac80211: fix missing RX bitrate update for mesh forwarding path	[Body]
[PATCH 6.12 362/869] wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb	[Body]
[PATCH 6.12 363/869] erofs: fix metabuf leak in inode xattr initialization	[Body]
[PATCH 6.12 364/869] drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()	[Body]
[PATCH 6.12 365/869] netfs: Fix zeropoint update where i_size > remote_i_size	[Body]
[PATCH 6.12 366/869] hwmon: (lm90) Add lock protection to lm90_alert	[Body]
[PATCH 6.12 367/869] KVM: guest_memfd: Treat memslot binding offset+size as unsigned values	[Body]
[PATCH 6.12 368/869] smb/client: fix chown/chgrp with SMB3 POSIX Extensions	[Body]
[PATCH 6.12 369/869] ksmbd: validate NTLMv2 response before updating session key	[Body]
[PATCH 6.12 370/869] ksmbd: prevent path traversal bypass by restricting caseless retry	[Body]
[PATCH 6.12 371/869] KVM: x86: Drop superfluous kvm_lapic_set_base() call when setting APIC state	[Body]
[PATCH 6.12 372/869] KVM: x86: Move kvm_set_apic_base() implementation to lapic.c (from x86.c)	[Body]
[PATCH 6.12 373/869] KVM: x86: Rename APIC base setters to better capture their relationship	[Body]
[PATCH 6.12 374/869] KVM: x86: Move update_cr8_intercept() to lapic.c	[Body]
[PATCH 6.12 375/869] KVM: x86: Unconditionally recompute CR8 intercept on PPR update	[Body]
[PATCH 6.12 376/869] KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state	[Body]
[PATCH 6.12 377/869] drm/amdgpu: Fix kernel panic during driver load failure	[Body]
[PATCH 6.12 378/869] media: stm32: dcmipp: use v4l2_subdev_is_streaming	[Body]
[PATCH 6.12 379/869] media: stm32: dcmipp: replace s_stream with enable/disable_streams	[Body]
[PATCH 6.12 380/869] media: stm32-dcmipp: Return queued buffers on start_streaming() failure	[Body]
[PATCH 6.12 381/869] drm/vc4: Shut down BO cache timer before teardown	[Body]
[PATCH 6.12 382/869] drm/amdgpu: Use dbg level for VBIOS check messages	[Body]
[PATCH 6.12 383/869] drm/amdgpu: Add wrapper for freeing vbios memory	[Body]
[PATCH 6.12 384/869] drm/amdgpu: Release VFCT ACPI table reference	[Body]
[PATCH 6.12 385/869] drm/i915/mst: limit DP MST ESI service loop	[Body]
[PATCH 6.12 386/869] drm/i915/gt: Fix NULL deref on sched_engine alloc failure	[Body]
[PATCH 6.12 387/869] drm/amdkfd: Check bounds on CRIU restore queue type and mqd size	[Body]
[PATCH 6.12 388/869] idpf: fix max_vport related crash on allocation error during init	[Body]
[PATCH 6.12 389/869] LoongArch: BPF: Zero-extend signed ALU32 div/mod results	[Body]
[PATCH 6.12 390/869] cifs: prevent readdir from changing file size due to stale directory metadata	[Body]
[PATCH 6.12 391/869] cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths	[Body]
[PATCH 6.12 392/869] tipc: serialize udp bearer replicast list updates	[Body]
[PATCH 6.12 393/869] fwctl/bnxt_en: Refactor aux bus functions to be more generic	[Body]
[PATCH 6.12 394/869] bnxt_en: Handle partially initialized auxiliary devices	[Body]
[PATCH 6.12 395/869] drm/xe/guc: Keep scheduler timeline name alive	[Body]
[PATCH 6.12 396/869] Bluetooth: hci_sync: extend conn_hash lookup critical sections	[Body]
[PATCH 6.12 397/869] bpf: Disable migration when destroying sock storage	[Body]
[PATCH 6.12 398/869] bpf: Disable migration when cloning sock storage	[Body]
[PATCH 6.12 399/869] rcu: add rcu_read_lock_dont_migrate()	[Body]
[PATCH 6.12 400/869] bpf: Use rcu_read_lock_dont_migrate in bpf_sk_storage.c	[Body]
[PATCH 6.12 401/869] bpf: Fix UAF in sock clone early bailouts	[Body]
[PATCH 6.12 402/869] firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()	[Body]
[PATCH 6.12 403/869] wifi: cfg80211: use wiphy work for socket owner autodisconnect	[Body]
[PATCH 6.12 404/869] wifi: mac80211: refactor populating mesh related fields in sinfo	[Body]
[PATCH 6.12 405/869] wifi: cfg80211: add link_station_info structure to support MLO statistics	[Body]
[PATCH 6.12 406/869] wifi: mac80211: defer link RX stats percpu free to RCU	[Body]
[PATCH 6.12 407/869] wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()	[Body]
[PATCH 6.12 408/869] RDMA/irdma: Prevent user-triggered null deref on QP create	[Body]
[PATCH 6.12 409/869] sched_ext: Dont warn on core-sched forced idle in put_prev_task_scx()	[Body]
[PATCH 6.12 410/869] xfrm: fix stale skb->prev after async crypto steals a GSO segment	[Body]
[PATCH 6.12 411/869] LoongArch: Fix address space mismatch in kexec command line lookup	[Body]
[PATCH 6.12 412/869] drm/amd/display: use kvzalloc to allocate struct dc	[Body]
[PATCH 6.12 413/869] net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains	[Body]
[PATCH 6.12 414/869] drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size	[Body]
[PATCH 6.12 415/869] ovl: check access to copy_file_range source with src mounter creds	[Body]
[PATCH 6.12 416/869] s390/zcrypt: Fix buffer over-read in cca_cipher2protkey	[Body]
[PATCH 6.12 417/869] wifi: mac80211: validate extension-frame layout before RX	[Body]
[PATCH 6.12 418/869] wifi: ieee80211: validate MLE common info length	[Body]
[PATCH 6.12 419/869] ata: libata-core: Disable LPM on Silicon Motion MD619{H,G}XCLDE3TC	[Body]
[PATCH 6.12 420/869] ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD	[Body]
[PATCH 6.12 421/869] mmc: vub300: Use devm_mmc_alloc_host() helper	[Body]
[PATCH 6.12 422/869] mmc: vub300: fix use-after-free on disconnect	[Body]
[PATCH 6.12 423/869] mmc: vub300: rename probe error labels	[Body]
[PATCH 6.12 424/869] mmc: vub300: fix use-after-free on probe failure	[Body]
[PATCH 6.12 425/869] dm-verity: fix buffer overflow in FEC calculation	[Body]
[PATCH 6.12 426/869] ocfs2: correct l_next_free_rec in online check	[Body]
[PATCH 6.12 427/869] ocfs2: add suballoc slot check in ocfs2_validate_inode_block()	[Body]
[PATCH 6.12 428/869] ocfs2: add extra consistency checks for chain allocator dinodes	[Body]
[PATCH 6.12 429/869] ocfs2: validate i_refcount_loc when refcount flag is set	[Body]
[PATCH 6.12 430/869] ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec	[Body]
[PATCH 6.12 431/869] KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling	[Body]
[PATCH 6.12 432/869] ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()	[Body]
[PATCH 6.12 433/869] net/liquidio: drop cached VF pci_dev LUT	[Body]
[PATCH 6.12 434/869] Bluetooth: 6lowpan: avoid untracked enable work	[Body]
[PATCH 6.12 435/869] net/mlx5e: Fix publication race for priv->channel_stats[]	[Body]
[PATCH 6.12 436/869] netfs: Clean up some whitespace in trace header	[Body]
[PATCH 6.12 437/869] netfs: Use a folio_queue allocation and free functions	[Body]
[PATCH 6.12 438/869] netfs: Add a tracepoint to log the lifespan of folio_queue structs	[Body]
[PATCH 6.12 439/869] netfs: Abstract out a rolling folio buffer implementation	[Body]
[PATCH 6.12 440/869] netfs: Drop the was_async arg from netfs_read_subreq_terminated()	[Body]
[PATCH 6.12 441/869] netfs: Fix netfs_create_write_req() to handle async cache object creation	[Body]
[PATCH 6.12 442/869] iomap: guard io_size EOF trim against concurrent truncate underflow	[Body]
[PATCH 6.12 443/869] afs: Fix reinitialisation of the inode, in particular ->lock_work	[Body]
[PATCH 6.12 444/869] xen/pvcalls: bound backend response req_id before indexing rsp[]	[Body]
[PATCH 6.12 445/869] sctp: fix addr_wq_timer race in sctp_free_addr_wq()	[Body]
[PATCH 6.12 446/869] drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock	[Body]
[PATCH 6.12 447/869] hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()	[Body]
[PATCH 6.12 448/869] sctp: add INIT verification after cookie unpacking	[Body]
[PATCH 6.12 449/869] tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()	[Body]
[PATCH 6.12 450/869] bpf: Guard conntrack opts error writes	[Body]
[PATCH 6.12 451/869] md/raid10: fix writes_pending leak on write request failures	[Body]
[PATCH 6.12 452/869] md/raid1: fix writes_pending and barrier reference leaks on write failures	[Body]
[PATCH 6.12 453/869] soundwire: fix bug in sdw_add_element_group_count found by syzkaller	[Body]
[PATCH 6.12 454/869] net: serialize netif_running() check in enqueue_to_backlog()	[Body]
[PATCH 6.12 455/869] RDMA/irdma: Replace waitqueue and flag with completion	[Body]
[PATCH 6.12 456/869] RDMA/bnxt_re: Avoid repeated requests to allocate WC pages	[Body]
[PATCH 6.12 457/869] RDMA/bnxt_re: Add a max slot check for SQ	[Body]
[PATCH 6.12 458/869] RDMA/bnxt_re: Free CQ toggle page after firmware teardown	[Body]
[PATCH 6.12 459/869] RDMA/bnxt_re: Fix budget handling of notification queue	[Body]
[PATCH 6.12 460/869] RDMA/bnxt_re: Remove unusable nq variable	[Body]
[PATCH 6.12 461/869] RDMA/bnxt_re: Free SRQ toggle page after firmware teardown	[Body]
[PATCH 6.12 462/869] RDMA/bnxt_re: Initialize dpi variable to zero	[Body]
[PATCH 6.12 463/869] sockmap: Fix use-after-free in udp_bpf_recvmsg()	[Body]
[PATCH 6.12 464/869] ALSA: seq: Clean up fifo locking with guard	[Body]
[PATCH 6.12 465/869] ALSA: seq: avoid stale FIFO cells during resize	[Body]
[PATCH 6.12 466/869] net: watchdog: fix refcount tracking races	[Body]
[PATCH 6.12 467/869] bnxt: fix head underflow on XDP head-grow	[Body]
[PATCH 6.12 468/869] cxl/region: Block region delete during region creation	[Body]
[PATCH 6.12 469/869] ixgbe: do not configure xps for XDP queues	[Body]
[PATCH 6.12 470/869] bpf: Reject sleepable BPF_LSM_CGROUP programs at load time	[Body]
[PATCH 6.12 471/869] ocfs2: validate fast symlink target during inode read	[Body]
[PATCH 6.12 472/869] wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic()	[Body]
[PATCH 6.12 473/869] md: replace wait loop with wait_event() in md_handle_request()	[Body]
[PATCH 6.12 474/869] md/raid1,raid10: fix deadlock in read error recovery path	[Body]
[PATCH 6.12 475/869] md/raid1,raid10: fix bio accounting for split md cloned bios	[Body]
[PATCH 6.12 476/869] md/raid1,raid10: fix error-path detection with md_cloned_bio()	[Body]
[PATCH 6.12 477/869] nvmet-tcp: check return value of nvmet_tcp_set_queue_sock	[Body]
[PATCH 6.12 478/869] ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data	[Body]
[PATCH 6.12 479/869] OPP: Fix race between OPP addition and lookup	[Body]
[PATCH 6.12 480/869] wifi: ath11k: cancel SSR work items during PCI shutdown	[Body]
[PATCH 6.12 481/869] drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport	[Body]
[PATCH 6.12 482/869] s390/ap: Move response_type struct into ap_msg struct	[Body]
[PATCH 6.12 483/869] s390/ap/zcrypt: Rework AP message buffer allocation	[Body]
[PATCH 6.12 484/869] s390/ap: Introduce ap message buffer pool	[Body]
[PATCH 6.12 485/869] s390/ap/zcrypt: New xflag parameter	[Body]
[PATCH 6.12 486/869] s390/zcrypt: Move inline function rng_type6cprb_msgx from header to code	[Body]
[PATCH 6.12 487/869] s390/zcrypt: Rework domain processing within zcrypt device driver	[Body]
[PATCH 6.12 488/869] s390/zcrypt: Close speculative mem read possibility	[Body]
[PATCH 6.12 489/869] afs: Fix UAF when sending a message	[Body]
[PATCH 6.12 490/869] dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister	[Body]
[PATCH 6.12 491/869] iommu/iommufd: Fix IOPF group ownership UAF	[Body]
[PATCH 6.12 492/869] octeontx2-af: Block VFs from clobbering special CGX PKIND state	[Body]
[PATCH 6.12 493/869] Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback	[Body]
[PATCH 6.12 494/869] Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback	[Body]
[PATCH 6.12 495/869] Bluetooth: ISO: hold sk properly in iso_conn_ready	[Body]
[PATCH 6.12 496/869] Bluetooth: ISO: lock sk in iso_connect_ind	[Body]
[PATCH 6.12 497/869] netfs: Fix folio_queue ENOMEM in writeback by adding a mempool	[Body]
[PATCH 6.12 498/869] net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds	[Body]
[PATCH 6.12 499/869] xsk: drain continuation descs after overflow in xsk_build_skb()	[Body]
[PATCH 6.12 500/869] xsk: provide sufficient space in pool->tx_descs	[Body]
[PATCH 6.12 501/869] xsk: reclaim invalid Tx descriptors in ZC batch path	[Body]
[PATCH 6.12 502/869] btrfs: skip global block reserve accounting for rescue mounts	[Body]
[PATCH 6.12 503/869] mm/page_table_check: skip special zero mappings	[Body]
[PATCH 6.12 504/869] eventfs: Use children field for rcu head and add memory barriers	[Body]
[PATCH 6.12 505/869] selftests: tls: add rekey tests	[Body]
[PATCH 6.12 506/869] tls: rx: restore msg_iter before TLS 1.3 optimistic retry	[Body]
[PATCH 6.12 507/869] watchdog: at91sam9_wdt: prevent timer rearm during teardown	[Body]
[PATCH 6.12 508/869] s390/ism: Fix UAF of sba and ieq during ism_dev_exit()	[Body]
[PATCH 6.12 509/869] netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()	[Body]
[PATCH 6.12 510/869] bnxt_en: Disable EOP for TPA on all chips to prevent data corruption	[Body]
[PATCH 6.12 511/869] hwmon: (pmbus) Fix type confusion in notification logic	[Body]
[PATCH 6.12 512/869] vhost_iotlb: bound map allocation in add_range	[Body]
[PATCH 6.12 513/869] bpf: Fix netns reference imbalance in conntrack kfuncs	[Body]
[PATCH 6.12 514/869] btrfs: lzo: reject inline extents without valid headers	[Body]
[PATCH 6.12 515/869] xfs: handle NULL b_addr in xfs_buf_free	[Body]
[PATCH 6.12 516/869] soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read	[Body]
[PATCH 6.12 517/869] gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock	[Body]
[PATCH 6.12 518/869] firewire: ohci: fix NULL pointer dereference in ar_context_release	[Body]
[PATCH 6.12 519/869] ipvs: revalidate ihl to prevent out-of-bounds access	[Body]
[PATCH 6.12 520/869] sctp: validate cookie AUTH state before use	[Body]
[PATCH 6.12 521/869] scsi: core: pair EH runtime PM get and put	[Body]
[PATCH 6.12 522/869] ASoC: SOF: Relocate and rework functionality for PCM stream freeing	[Body]
[PATCH 6.12 523/869] ASoC: SOF: pcm: Move period/buffer configuration print after platform open	[Body]
[PATCH 6.12 524/869] ASoC: SOF: pcm: Add snd_sof_pcm specific wrappers for dev_dbg() and dev_err()	[Body]
[PATCH 6.12 525/869] ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout	[Body]
[PATCH 6.12 526/869] tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg	[Body]
[PATCH 6.12 527/869] net: ibm: emac: use devm_platform_ioremap_resource	[Body]
[PATCH 6.12 528/869] net: ibm: emac: use platform_get_irq	[Body]
[PATCH 6.12 529/869] net: emac: Fix NULL pointer dereference in emac_probe	[Body]
[PATCH 6.12 530/869] ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()	[Body]
[PATCH 6.12 531/869] coresight: ete: Always save state on power down	[Body]
[PATCH 6.12 532/869] ALSA: seq: oss: Serialize readq reset state with q->lock	[Body]
[PATCH 6.12 533/869] btrfs: lzo: reject compressed segment that overflows the compressed input	[Body]
[PATCH 6.12 534/869] netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag	[Body]
[PATCH 6.12 535/869] EDAC/igen6: Initialize edac_op_state according to the configuration data	[Body]
[PATCH 6.12 536/869] EDAC/igen6: Add polling support	[Body]
[PATCH 6.12 537/869] EDAC/igen6: Skip absent memory controllers	[Body]
[PATCH 6.12 538/869] EDAC/igen6: Fix call trace due to missing release()	[Body]
[PATCH 6.12 539/869] scsi: hisi_sas: Add slave_destroy interface for v3 hw	[Body]
[PATCH 6.12 540/869] soc: xilinx: Fix race condition in event registration	[Body]
[PATCH 6.12 541/869] cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size	[Body]
[PATCH 6.12 542/869] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations	[Body]
[PATCH 6.12 543/869] perf tools: Use perf_env__get_cpu_topology() in machine__resolve()	[Body]
[PATCH 6.12 544/869] Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks	[Body]
[PATCH 6.12 545/869] idpf: bound interrupt-vector register fill to the allocated array	[Body]
[PATCH 6.12 546/869] dmaengine: idxd: fix double free of wq, engine, and group structs	[Body]
[PATCH 6.12 547/869] drm/amd/display: check if dml21_add_phantom_plane() is successful	[Body]
[PATCH 6.12 548/869] btrfs: initialize inode mapping flags for cached inodes	[Body]
[PATCH 6.12 549/869] bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie	[Body]
[PATCH 6.12 550/869] drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype length	[Body]
[PATCH 6.12 551/869] drm/amdkfd: Add bounds check for CRAT subtype length	[Body]
[PATCH 6.12 552/869] Bluetooth: ISO: zero the sockaddr before returning it in getname	[Body]
[PATCH 6.12 553/869] fbdev: Wrap user-invoked calls to fb_set_var() in helper	[Body]
[PATCH 6.12 554/869] tipc: avoid busy looping in tipc_exit_net()	[Body]
[PATCH 6.12 555/869] NTB: core: Add .get_dma_dev() callback to ntb_dev_ops	[Body]
[PATCH 6.12 556/869] NTB: ntb_transport: Use ntb_get_dma_dev() for DMA buffers	[Body]
[PATCH 6.12 557/869] ntb: Store original DMA address for future release	[Body]
[PATCH 6.12 558/869] tap: Keep hdr_len in tap_get_user()	[Body]
[PATCH 6.12 559/869] net: tap: fix wrong transport_header when sending VLAN-tagged frame	[Body]
[PATCH 6.12 560/869] io_uring: defer eventfd signaling when queued from a wakeup handler	[Body]
[PATCH 6.12 561/869] wifi: iwlwifi: dvm: pair transport op-mode enter/leave	[Body]
[PATCH 6.12 562/869] wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()	[Body]
[PATCH 6.12 563/869] svcrdma: Reject Read lists that exceed the page budget	[Body]
[PATCH 6.12 564/869] svcrdma: Add Write chunk WRs to the RPCs Send WR chain	[Body]
[PATCH 6.12 565/869] svcrdma: wake sq waiters when the transport closes	[Body]
[PATCH 6.12 566/869] svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails	[Body]
[PATCH 6.12 567/869] SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2	[Body]
[PATCH 6.12 568/869] ext2: Fix lost inode updates for IS_SYNC inodes	[Body]
[PATCH 6.12 569/869] smb: client: reject a tree connect response whose byte count is too small	[Body]
[PATCH 6.12 570/869] cifs: call pagecache_isize_extended() in cifs_setsize() when extending	[Body]
[PATCH 6.12 571/869] ceph: cap delegated inode count in ceph_parse_deleg_inos()	[Body]
[PATCH 6.12 572/869] ceph: fix UAF in check_new_map() on session freed during unlock	[Body]
[PATCH 6.12 573/869] nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net	[Body]
[PATCH 6.12 574/869] nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths	[Body]
[PATCH 6.12 575/869] lockd, nfsd: RCU-protect nlmsvc_ops dispatch	[Body]
[PATCH 6.12 576/869] mm/mglru: reset page lru tier bits when activating	[Body]
[PATCH 6.12 577/869] mm/mglru: use the common routine for dirty/writeback reactivation	[Body]
[PATCH 6.12 578/869] mm/mglru: fix and remove redundant unevictable folio handling	[Body]
[PATCH 6.12 579/869] ksmbd: fix tree connection use-after-free in smb2_tree_connect()	[Body]
[PATCH 6.12 580/869] drm/amdkfd: Fix partial migrate issue	[Body]
[PATCH 6.12 581/869] drm/amdkfd: return migration pages from copy function	[Body]
[PATCH 6.12 582/869] Revert "drm/amdkfd: return migration pages from copy function"	[Body]
[PATCH 6.12 583/869] drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram	[Body]
[PATCH 6.12 584/869] drm/amdkfd: return migration pages from copy function - again	[Body]
[PATCH 6.12 585/869] drm/amdkfd: Fix error path at svm_migrate_copy_to_ram	[Body]
[PATCH 6.12 586/869] drm/amdkfd: Add TLB flush after MES queue eviction/suspension	[Body]
[PATCH 6.12 587/869] drm/amdgpu: force complete the MES ring fences on reset	[Body]
[PATCH 6.12 588/869] drm/amdgpu: force complete the KIQ ring fences on reset	[Body]
[PATCH 6.12 589/869] f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()	[Body]
[PATCH 6.12 590/869] LoongArch: BPF: Refactor jump offset calculation in tail call	[Body]
[PATCH 6.12 591/869] KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables	[Body]
[PATCH 6.12 592/869] KVM: s390: Fix memory corruption by not reinjecting CK machine checks	[Body]
[PATCH 6.12 593/869] mm/huge_memory: transfer the pmd dirty bit to the folio on zap	[Body]
[PATCH 6.12 594/869] netfilter: nf_tables: prefer nft_trans_elem_alloc helper	[Body]
[PATCH 6.12 595/869] netfilter: nf_tables: add nft_trans_commit_list_add_elem helper	[Body]
[PATCH 6.12 596/869] netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structure	[Body]
[PATCH 6.12 597/869] netfilter: nf_tables: skip double clone set expressions on element insert	[Body]
[PATCH 6.12 598/869] net_sched: sch_fq: add three drop_reason	[Body]
[PATCH 6.12 599/869] net/sched: add qstats_cpu_drop_inc() helper	[Body]
[PATCH 6.12 600/869] net/sched: act_ife: Only operate on Ethernet frames	[Body]
[PATCH 6.12 601/869] octeontx2-vf: fix workqueue and netdev race in probe/remove	[Body]
[PATCH 6.12 602/869] xsk: honor XDP_TX_METADATA in zero-copy path	[Body]
[PATCH 6.12 603/869] Bluetooth: do not leak an hci_conn when a second LE connect is rejected	[Body]
[PATCH 6.12 604/869] net: add getsockopt_iter callback to proto_ops	[Body]
[PATCH 6.12 605/869] Bluetooth: L2CAP: convert to getsockopt_iter	[Body]
[PATCH 6.12 606/869] Bluetooth: L2CAP: access chan->conn safely in get/setsockopt	[Body]
[PATCH 6.12 607/869] Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition	[Body]
[PATCH 6.12 608/869] net/sched: account classifier filter allocations to memcg	[Body]
[PATCH 6.12 609/869] NFSv4.1: zero referring call lists before decoding	[Body]
[PATCH 6.12 610/869] vxlan: fix reading neigh ha	[Body]
[PATCH 6.12 611/869] net: bridge: arp/nd proxy: fix reading neigh ha	[Body]
[PATCH 6.12 612/869] ip6mr: do not clone dst in ip6mr_cache_report()	[Body]
[PATCH 6.12 613/869] ALSA: mtpav: shut down output timer before card teardown	[Body]
[PATCH 6.12 614/869] virtio_net: Fix resize of the RX ring	[Body]
[PATCH 6.12 615/869] dpll: fix NULL deref in dpll_device_ops() during teardown race	[Body]
[PATCH 6.12 616/869] bpf, xdp: move offload check into dev_xdp_install()	[Body]
[PATCH 6.12 617/869] NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers	[Body]
[PATCH 6.12 618/869] ksmbd: scope session state changes to bound connections	[Body]
[PATCH 6.12 619/869] ksmbd: detach blocked lock requests before freeing	[Body]
[PATCH 6.12 620/869] ksmbd: safely discard unregistered deferred locks	[Body]
[PATCH 6.12 621/869] erofs: fix interlaced ztailpacking pclusters	[Body]
[PATCH 6.12 622/869] ksmbd: defer publishing granted locks to prevent UAF/double-free race	[Body]
[PATCH 6.12 623/869] ksmbd: serialize oplock close with pending break ownership	[Body]
[PATCH 6.12 624/869] ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()	[Body]
[PATCH 6.12 625/869] bpf: Check pointer type for all atomic RMW paths	[Body]
[PATCH 6.12 626/869] apparmor: fix deadlock in complain-mode change_hat	[Body]
[PATCH 6.12 627/869] blk-cgroup: delay freeing policy data after rcu grace period	[Body]
[PATCH 6.12 628/869] blk-iocost: clear delay state when freeing policy data	[Body]
[PATCH 6.12 629/869] blk-iolatency: clear delay state when freeing policy data	[Body]
[PATCH 6.12 630/869] ocfs2: validate DIO orphan slot during inode read	[Body]
[PATCH 6.12 631/869] ocfs2: validate orphan slot during inode read	[Body]
[PATCH 6.12 632/869] nvmet: fix max_qid race between configfs and controller allocation	[Body]
[PATCH 6.12 633/869] clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type	[Body]
[PATCH 6.12 634/869] bpf, s390: Clear fetch destination on faulting arena atomic	[Body]
[PATCH 6.12 635/869] bpf: Compare iterator types during state pruning	[Body]
[PATCH 6.12 636/869] apparmor: fix unconfined user namespace restriction forced stack	[Body]
[PATCH 6.12 637/869] amt: Dont support cross-netns setup.	[Body]
[PATCH 6.12 638/869] NFS: Return a delegation the client fails to record	[Body]
[PATCH 6.12 639/869] iommu/vt-d: Flush context cache with correct SID when tearing down aliases	[Body]
[PATCH 6.12 640/869] bpf: Fix mmap_lock leak in irq_work path	[Body]
[PATCH 6.12 641/869] Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero	[Body]
[PATCH 6.12 642/869] Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind	[Body]
[PATCH 6.12 643/869] btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()	[Body]
[PATCH 6.12 644/869] btrfs: zoned: dont clobber the extent buffer when zeroing it out	[Body]
[PATCH 6.12 645/869] btrfs: check if root is readonly when setting posix acl	[Body]
[PATCH 6.12 646/869] btrfs: always wait for ordered extents to avoid OE races	[Body]
[PATCH 6.12 647/869] btrfs: defrag: fix deadlock between defrag and delalloc space reservation	[Body]
[PATCH 6.12 648/869] scsi: sd: Move the sd_config_discard() function definition	[Body]
[PATCH 6.12 649/869] scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails	[Body]
[PATCH 6.12 650/869] coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable	[Body]
[PATCH 6.12 651/869] drm/amd/display: disable replay when crc source is enabled	[Body]
[PATCH 6.12 652/869] drm/amd/display: Resize MST HDCP per-connector arrays to 32	[Body]
[PATCH 6.12 653/869] bpf: Factor callchain_store function from __bpf_get_stack	[Body]
[PATCH 6.12 654/869] bpf: Factor callchain_finalize function from __bpf_get_stack	[Body]
[PATCH 6.12 655/869] bpf: Remove trace_in argument from __bpf_get_stack	[Body]
[PATCH 6.12 656/869] bpf: Clear buf on error in __bpf_get_task_stack	[Body]
[PATCH 6.12 657/869] ocfs2/heartbeat: fix slot mapping rollback leaks on error paths	[Body]
[PATCH 6.12 658/869] ocfs2: o2hb: quiesce negotiate handlers and timeout work	[Body]
[PATCH 6.12 659/869] ARM: 9481/2: breakpoint: CFI breakpoints only on demand	[Body]
[PATCH 6.12 660/869] thermal: hwmon: Remove hwmon class device along with its parent	[Body]
[PATCH 6.12 661/869] ocfs2: validate inline xattrs during inode block validation	[Body]
[PATCH 6.12 662/869] ublk: check import_ubuf() return value	[Body]
[PATCH 6.12 663/869] blk-cgroup: fix race between policy activation and blkg destruction	[Body]
[PATCH 6.12 664/869] HID: steam: Reject short reads	[Body]
[PATCH 6.12 665/869] HID: logitech-hidpp: Fix FF device cleanup on init failure	[Body]
[PATCH 6.12 666/869] tty: skip cdev_del() when no cdev is registered	[Body]
[PATCH 6.12 667/869] serial: core: clear freed pointers on uart_register_driver() failure	[Body]
[PATCH 6.12 668/869] serial: core: do fallible allocations before the console can be registered	[Body]
[PATCH 6.12 669/869] wifi: cfg80211: stop PMSR before P2P and NAN teardown	[Body]
[PATCH 6.12 670/869] wifi: brcmfmac: fix P2P action frame handling without device vif	[Body]
[PATCH 6.12 671/869] wifi: nl80211: check link is beaconing for color change	[Body]
[PATCH 6.12 672/869] wifi: nl80211: clean up color-change beacon data on errors	[Body]
[PATCH 6.12 673/869] arm64: ptrace: Keep orig_x0 in-sync with x0 on syscall entry	[Body]
[PATCH 6.12 674/869] wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed	[Body]
[PATCH 6.12 675/869] bpf: Reject >8 byte return values on return-reading trampoline paths	[Body]
[PATCH 6.12 676/869] drm/msm: dont tear down KMS twice when KMS init fails	[Body]
[PATCH 6.12 677/869] wifi: mt76: cancel reset and rc work on device unregister	[Body]
[PATCH 6.12 678/869] wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER	[Body]
[PATCH 6.12 679/869] wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()	[Body]
[PATCH 6.12 680/869] drm/i915: rename range_overflows_end() to range_end_overflows()	[Body]
[PATCH 6.12 681/869] drm/i915: document range_overflows() and range_end_overflows() macros	[Body]
[PATCH 6.12 682/869] overflow: add range_overflows() and range_end_overflows()	[Body]
[PATCH 6.12 683/869] drm/panthor: Add vm_bind region with kbo range overlap check	[Body]
[PATCH 6.12 684/869] RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()	[Body]
[PATCH 6.12 685/869] PCI: Make pci_match_one_device() match on ID instead of device	[Body]
[PATCH 6.12 686/869] PCI: Fix dyn_id add TOCTOU	[Body]
[PATCH 6.12 687/869] PCI: Fix UAF when probe runs concurrent to dyn ID removal	[Body]
[PATCH 6.12 688/869] clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path	[Body]
[PATCH 6.12 689/869] iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path	[Body]
[PATCH 6.12 690/869] iommu/tegra241-cmdqv: Dont fall back to a freed smmu after devm_krealloc()	[Body]
[PATCH 6.12 691/869] scsi: ufs: core: Convert string descriptor format macros to enum	[Body]
[PATCH 6.12 692/869] scsi: ufs: core: Validate string descriptors	[Body]
[PATCH 6.12 693/869] pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip	[Body]
[PATCH 6.12 694/869] bpf: Fix WARNING in bpf_tracing_link_release	[Body]
[PATCH 6.12 695/869] ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()	[Body]
[PATCH 6.12 696/869] kcfi: Rename CONFIG_CFI_CLANG to CONFIG_CFI	[Body]
[PATCH 6.12 697/869] riscv, bpf: Fix kernel stack corruption in tailcall with CFI	[Body]
[PATCH 6.12 698/869] bpf: Zero queue and stack outputs on lock failure	[Body]
[PATCH 6.12 699/869] drm/sched: Use struct for drm_sched_init() params	[Body]
[PATCH 6.12 700/869] drm/msm: Only fini scheduler after successful init	[Body]
[PATCH 6.12 701/869] firmware: arm_scmi: Fix SCMI device destroy lifetimes	[Body]
[PATCH 6.12 702/869] fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()	[Body]
[PATCH 6.12 703/869] RDMA/rvt: Return NULL after port allocation failure	[Body]
[PATCH 6.12 704/869] esp: do not unref managed frag pages in esp_ssg_unref()	[Body]
[PATCH 6.12 705/869] platform/x86: asus-wmi: fix resource leaks on probe failure	[Body]
[PATCH 6.12 706/869] usb: gadget: uac: validate rate list length before storing	[Body]
[PATCH 6.12 707/869] bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max	[Body]
[PATCH 6.12 708/869] platform/x86: dell-wmi-base: Fix handling of ultra performance key	[Body]
[PATCH 6.12 709/869] bpf: Reject writes through untrusted BTF pointers	[Body]
[PATCH 6.12 710/869] time/namespace: Validate nanosecond field in proc_timens_set_offset()	[Body]
[PATCH 6.12 711/869] bpf: Reject MEM_ALLOC BTF accesses past object bounds	[Body]
[PATCH 6.12 712/869] dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout	[Body]
[PATCH 6.12 713/869] drm/amd/display: Fix dangling pointer in CRTC reset function	[Body]
[PATCH 6.12 714/869] drm/amd/display: Fix dangling pointer in plane reset function	[Body]
[PATCH 6.12 715/869] mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()	[Body]
[PATCH 6.12 716/869] nfsd: convert nfsd_net boolean flags to unsigned long flags word	[Body]
[PATCH 6.12 717/869] mm/hugetlb: refactor code around vmemmap_walk	[Body]
[PATCH 6.12 718/869] mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier	[Body]
[PATCH 6.12 719/869] ACPI: bus: Introduce acpi_bus_get_primary_device()	[Body]
[PATCH 6.12 720/869] powerpc/xive: add error return value to xive_smp_probe()	[Body]
[PATCH 6.12 721/869] powerpc/xive: propagate IPI init errors to prevent use-after-free	[Body]
[PATCH 6.12 722/869] remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3	[Body]
[PATCH 6.12 723/869] ksmbd: remove redundant DACL check in smb_check_perm_dacl	[Body]
[PATCH 6.12 724/869] ksmbd: fix maximum allowed access checks	[Body]
[PATCH 6.12 725/869] drm/amdkfd: fix SMI event cross-process information leak	[Body]
[PATCH 6.12 726/869] drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support	[Body]
[PATCH 6.12 727/869] drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq	[Body]
[PATCH 6.12 728/869] wifi: iwlwifi: simplify nested if checks	[Body]
[PATCH 6.12 729/869] wifi: iwlwifi: mvm: fix P2P-Device binding handling	[Body]
[PATCH 6.12 730/869] RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()	[Body]
[PATCH 6.12 731/869] virt: acrn: Remove unused list acrn_irqfd_clients	[Body]
[PATCH 6.12 732/869] virt: acrn: Fix irqfd use-after-free during eventfd shutdown	[Body]
[PATCH 6.12 733/869] PM: sleep: core: Synchronize runtime PM status of parents and children	[Body]
[PATCH 6.12 734/869] PM: sleep: core: Restrict power.set_active propagation	[Body]
[PATCH 6.12 735/869] PM: Rearrange documentation related to __pm_runtime_disable()	[Body]
[PATCH 6.12 736/869] PM: Block enabling of runtime PM during system suspend	[Body]
[PATCH 6.12 737/869] PM: runtime: Introduce pm_runtime_blocked()	[Body]
[PATCH 6.12 738/869] PM: sleep: Use DPM_FLAG_SMART_SUSPEND conditionally	[Body]
[PATCH 6.12 739/869] PM: sleep: Fix bit masking operation	[Body]
[PATCH 6.12 740/869] driver core: Add device_link_test() for testing device link flags	[Body]
[PATCH 6.12 741/869] driver core: Avoid warning when removing a device while its supplier is unbinding	[Body]
[PATCH 6.12 742/869] serial: 8250: invert serial8250_register_8250_port() CIR condition	[Body]
[PATCH 6.12 743/869] tty: serial: 8250: protect against NULL uart->port.dev in register	[Body]
[PATCH 6.12 744/869] drm/amdgpu: Remove unused amdgpu_i2c functions	[Body]
[PATCH 6.12 745/869] drm/amdgpu/atombios: drop empty function	[Body]
[PATCH 6.12 746/869] drm/amdgpu: rework i2c init and fini	[Body]
[PATCH 6.12 747/869] drm/amdgpu: Bound GPIO I2C table entry count from VBIOS	[Body]
[PATCH 6.12 748/869] gpiolib: make value setters have return values	[Body]
[PATCH 6.12 749/869] gpiolib: wrap gpio_chip::set()	[Body]
[PATCH 6.12 750/869] gpiolib: rework the wrapper around gpio_chip::set_multiple()	[Body]
[PATCH 6.12 751/869] gpiolib: introduce gpio_chip setters that return values	[Body]
[PATCH 6.12 752/869] pinctrl: mediatek: paris: dont double-check the GPIO number	[Body]
[PATCH 6.12 753/869] pinctrl: mediatek: paris: use new GPIO line value setter callbacks	[Body]
[PATCH 6.12 754/869] pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction	[Body]
[PATCH 6.12 755/869] genirq/proc: Switch to lock guards	[Body]
[PATCH 6.12 756/869] genirq: Consistently use %u format specifier for unsigned int variables	[Body]
[PATCH 6.12 757/869] genirq/proc: Size interrupt directory names for 10-digit interrupt numbers	[Body]
[PATCH 6.12 758/869] media: chips-media: wave5: Release m2m_ctx after Instance Removed from List	[Body]
[PATCH 6.12 759/869] i3c: master: svc: Fix npcm845 FIFO empty issue	[Body]
[PATCH 6.12 760/869] i3c: master: svc: Fix npcm845 invalid slvstart event	[Body]
[PATCH 6.12 761/869] i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845	[Body]
[PATCH 6.12 762/869] hwmon: (asus_rog_ryujin) Rely on subsystem locking	[Body]
[PATCH 6.12 763/869] hwmon: (asus_rog_ryujin) Add per-device configuration	[Body]
[PATCH 6.12 764/869] hwmon: (asus_rog_ryujin) Validate HID report lengths	[Body]
[PATCH 6.12 765/869] smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()	[Body]
[PATCH 6.12 766/869] smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid	[Body]
[PATCH 6.12 767/869] drm/amdgpu: skip the VMID 0 flush for VRAM	[Body]
[PATCH 6.12 768/869] perf/x86/intel: Prevent drain_pebs() reentry	[Body]
[PATCH 6.12 769/869] net/mlx5e: Move representor vnic reporter to eswitch devlink port	[Body]
[PATCH 6.12 770/869] Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()	[Body]
[PATCH 6.12 771/869] vhost: invalidate vring access on IOTLB transitions	[Body]
[PATCH 6.12 772/869] vduse: validate virtqueue alignment	[Body]
[PATCH 6.12 773/869] virtio_ring: fix stale descriptor flags after a failed packed add	[Body]
[PATCH 6.12 774/869] iommu/amd: Do not reallocate GA log buffers on resume	[Body]
[PATCH 6.12 775/869] bpf: mark a NULL call argument precise	[Body]
[PATCH 6.12 776/869] tracing: Fix subbuf resize races with trace_pipe_raw readers	[Body]
[PATCH 6.12 777/869] bpf: Preserve inner map identity in callback frames	[Body]
[PATCH 6.12 778/869] bpf: Mark NULL kptr stores precise	[Body]
[PATCH 6.12 779/869] bpf: Keep refcount_acquire nullable for borrowed RCU kptrs	[Body]
[PATCH 6.12 780/869] bpf: Dont infer non-NULL from a pointer with an unbounded offset	[Body]
[PATCH 6.12 781/869] bpf: Reject legacy packet loads from callbacks	[Body]
[PATCH 6.12 782/869] bpf: Check ancestor frames for rbtree callbacks	[Body]
[PATCH 6.12 783/869] bpf: dont rewrite bpf_fastcall patterns entered by a jump	[Body]
[PATCH 6.12 784/869] bpf: zero extend the result of an arena 32-bit cmpxchg	[Body]
[PATCH 6.12 785/869] ASoC: Intel: avs: Refactor and fix init_config access	[Body]
[PATCH 6.12 786/869] bpf: Mark syscall helpers as sleepable	[Body]
[PATCH 6.12 787/869] bpf: Mark signal tracepoint siginfo arguments as scalar	[Body]
[PATCH 6.12 788/869] erofs: disable LZ4 rolling decompression for now	[Body]
[PATCH 6.12 789/869] net: rename netns_local to netns_immutable	[Body]
[PATCH 6.12 790/869] net: plumb extack in __dev_change_net_namespace()	[Body]
[PATCH 6.12 791/869] net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().	[Body]
[PATCH 6.12 792/869] btrfs: zstd: fix lost wakeup when waiting for a workspace	[Body]
[PATCH 6.12 793/869] bpf: backtracking shouldnt clear outer frame R1-R5 for callbacks	[Body]
[PATCH 6.12 794/869] bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge	[Body]
[PATCH 6.12 795/869] ipv6: mcast: use rcu_assign_pointer() for __rcu list updates	[Body]
[PATCH 6.12 796/869] smb/client: invalidate fscache for fallocate range operations	[Body]
[PATCH 6.12 797/869] net: stmmac: fix dma mapping leak in stmmac_tso_xmit()	[Body]
[PATCH 6.12 798/869] bpf: check_cond_jmp_op(): properly infer if register is null	[Body]
[PATCH 6.12 799/869] printk: Dont WARN on kthread_run failure.	[Body]
[PATCH 6.12 800/869] drm/gud: validate GUD_ROTATION_0 is present in supported rotations	[Body]
[PATCH 6.12 801/869] drm/virtio: Use drm_gem_plane_helper_prepare_fb()	[Body]
[PATCH 6.12 802/869] drm/virtio: Add a helper to map and note the dma addrs and lengths	[Body]
[PATCH 6.12 803/869] drm/virtio: use the DMA API for resource backing on Xen	[Body]
[PATCH 6.12 804/869] functionfs: fix the open/removal races	[Body]
[PATCH 6.12 805/869] ACPI: platform: Use acpi_bus_get_primary_device()	[Body]
[PATCH 6.12 806/869] KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT	[Body]
[PATCH 6.12 807/869] greybus: raw: fix use-after-free if write is called after disconnect	[Body]
[PATCH 6.12 808/869] firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor	[Body]
[PATCH 6.12 809/869] firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation	[Body]
[PATCH 6.12 810/869] pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI	[Body]
[PATCH 6.12 811/869] cxl/region: Resolve region deletion races	[Body]
[PATCH 6.12 812/869] bpf: Remove migrate_{disable\|enable} in bpf_obj_free_fields()	[Body]
[PATCH 6.12 813/869] bpf: Clear rb node linkage when freeing bpf_rb_root	[Body]
[PATCH 6.12 814/869] ocfs2: validate external xattr entries when reading metadata	[Body]
[PATCH 6.12 815/869] dm-integrity: replace forgeable discard filler with a keyed sector marker	[Body]
[PATCH 6.12 816/869] perf/x86/intel/uncore: Fix uncore_box ref/unref ordering	[Body]
[PATCH 6.12 817/869] i3c: master: Fix recursive locking during device registration	[Body]
[PATCH 6.12 818/869] xfs: remove unused trace event xfs_dqreclaim_dirty	[Body]
[PATCH 6.12 819/869] ublk: fix dead loop when canceling io command	[Body]
[PATCH 6.12 820/869] riscv: uaccess: Only restore the CSR_STATUS SUM bit	[Body]
[PATCH 6.12 821/869] s390/kvm: Initialize uninitialized flags variable	[Body]
[PATCH 6.12 822/869] KVM: s390: wrapper for KVM_BUG	[Body]
[PATCH 6.12 823/869] KVM: s390: move pv gmap functions into kvm	[Body]
[PATCH 6.12 824/869] KVM: s390: use __kvm_faultin_pfn()	[Body]
[PATCH 6.12 825/869] KVM: s390: move gmap_shadow_pgt_lookup() into kvm	[Body]
[PATCH 6.12 826/869] KVM: s390: pv: fix race when making a page secure	[Body]
[PATCH 6.12 827/869] KVM: s390: Fix FOLL_/FAULT_FLAG_ confusion	[Body]
[PATCH 6.12 828/869] s390/kvm: Mask extra bits from program interrupt code	[Body]
[PATCH 6.12 829/869] scsi: ufs: qcom : Fix NULL pointer dereference in ufs_qcom_setup_clocks	[Body]
[PATCH 6.12 830/869] accel/ivpu: Fix race condition when mapping dmabuf	[Body]
[PATCH 6.12 831/869] KVM: SEV: Drop FOLL_WRITE for encrypted region registration	[Body]
[PATCH 6.12 832/869] net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n.	[Body]
[PATCH 6.12 833/869] mpls: Set rt->rt_nhn just before returning from mpls_nh_build_multi().	[Body]
[PATCH 6.12 834/869] media: verisilicon: Fix kernel panic due to __initconst misuse	[Body]
[PATCH 6.12 835/869] soc/tegra: pmc: Document tegra_pmc.syscore field	[Body]
[PATCH 6.12 836/869] soc/tegra: pmc: Add kerneldoc for wake-up variables	[Body]
[PATCH 6.12 837/869] i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring	[Body]
[PATCH 6.12 838/869] ceph: do not skip the first folio of the next object in writeback	[Body]
[PATCH 6.12 839/869] ceph: fix crash after fscrypt_encrypt_pagecache_blocks() error	[Body]
[PATCH 6.12 840/869] ceph: introduce ceph_submit_write() method	[Body]
[PATCH 6.12 841/869] ceph: always call ceph_shift_unused_folios_left()	[Body]
[PATCH 6.12 842/869] spi: microchip-core-qspi: stop checking viability of op->max_freq in supports_op callback	[Body]
[PATCH 6.12 843/869] sched/psi: Create the psimon kthread outside of cgroup_mutex	[Body]
[PATCH 6.12 844/869] ocfs2: use correct endian in ocfs2_dinode_has_extents	[Body]
[PATCH 6.12 845/869] netfs: release readahead folios on iterator preparation failure	[Body]
[PATCH 6.12 846/869] netfs: Fix folio state after ENOMEM whilst under writeback iteration	[Body]
[PATCH 6.12 847/869] net: do not acquire dev->tx_global_lock in netdev_watchdog_up()	[Body]
[PATCH 6.12 848/869] s390/zcrypt: Fix memory leak with CCA cards used as accelerator	[Body]
[PATCH 6.12 849/869] EDAC/igen6: Fix the flood of invalid error reports	[Body]
[PATCH 6.12 850/869] netfilter: ctnetlink: do not expose expectation DEAD flag	[Body]
[PATCH 6.12 851/869] EDAC/igen6: Fix NULL pointer dereference	[Body]
[PATCH 6.12 852/869] Revert "esp: do not unref managed frag pages in esp_ssg_unref()"	[Body]
[PATCH 6.12 853/869] mm/hugetlb_vmemmap: fix incorrect vmemmap restore in rollback	[Body]
[PATCH 6.12 854/869] PM: sleep: Unblock runtime PM when device prepare fails	[Body]
[PATCH 6.12 855/869] soundwire: intel_auxdevice: Fix system suspend/resume handling	[Body]
[PATCH 6.12 856/869] gpiolib: Allow to use setters with return value for output-only gpios	[Body]
[PATCH 6.12 857/869] gpiolib: initialize return value in gpiochip_set_multiple()	[Body]
[PATCH 6.12 858/869] i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845	[Body]
[PATCH 6.12 859/869] i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk	[Body]
[PATCH 6.12 860/869] i3c: master: svc: Fix i3c_master_get_free_addr return check	[Body]
[PATCH 6.12 861/869] tracing: Fix ring_buffer_read_page_size() kernel-doc	[Body]
[PATCH 6.12 862/869] tracing: Fix comment in tracing_buffers_splice_read()	[Body]
[PATCH 6.12 863/869] dm-integrity: fix buffer overflow with keyed discard	[Body]
[PATCH 6.12 864/869] types: move struct rcuwait into types.h	[Body]
[PATCH 6.12 865/869] irqwork: Move data struct to a types header	[Body]
[PATCH 6.12 866/869] bpf, sockmap: Account for receive queue in FIONREAD without a verdict program	[Body]
[PATCH 6.12 867/869] wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses"	[Body]
[PATCH 6.12 868/869] s390/uv: Dont return 0 from make_hva_secure() if the operation was not successful	[Body]
[PATCH 6.12 869/869] drm/panfrost: Fix scheduler workqueue bug	[Body]

ID (for dev)	3f0c725b-4967-4ad1-99f0-b354d67ea0f4
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	7fdb7c1824a1f9979d648d7ae28ac446bcee9c6e [Config]		passed [Log]
[KASAN] Boot test: Base	7fdb7c1824a1f9979d648d7ae28ac446bcee9c6e [Config]		passed [Log]
[KASAN] Build Patched		7fdb7c1824a1f9979d648d7ae28ac446bcee9c6e [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		7fdb7c1824a1f9979d648d7ae28ac446bcee9c6e [Config] [patched]	passed [Log]
[KASAN] Fuzz	7fdb7c1824a1f9979d648d7ae28ac446bcee9c6e [Config]	7fdb7c1824a1f9979d648d7ae28ac446bcee9c6e [Config] [patched]	passed [Log] [Artifacts]

Patches (869)

Series Summary

Sessions

Session 2026-10-20