Syzbot CI

Subject	6.12.115-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-10-28 16:56:44 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 6.12 001/247] rose: set SOCK_DESTROY in rose_kill_by_device() for prompt cleanup	[Body]
[PATCH 6.12 002/247] rose: disconnect orphaned STATE_2 sockets when device is gone	[Body]
[PATCH 6.12 003/247] rose: release netdev ref and destroy orphaned incoming sockets	[Body]
[PATCH 6.12 004/247] rose: clear neighbour pointer in rose_kill_by_device()	[Body]
[PATCH 6.12 005/247] rose: dont free fd-owned sockets when reaping in the heartbeat	[Body]
[PATCH 6.12 006/247] rose: keep the route needed for routing loop detection	[Body]
[PATCH 6.12 007/247] rose: guard rose_transmit_link() against a NULL neighbour	[Body]
[PATCH 6.12 008/247] rose: use timer_shutdown_sync() for t0timer teardown	[Body]
[PATCH 6.12 009/247] rose: dont warn on stray CALL_ACCEPTED/CLEAR_CONFIRMATION in state 3	[Body]
[PATCH 6.12 010/247] rose: hold a reference on incoming sockets queued for accept()	[Body]
[PATCH 6.12 011/247] ax25: bound REJ-driven fast retransmits with the existing N2 counter	[Body]
[PATCH 6.12 012/247] rose: purge rose_neigh->queue on final teardown	[Body]
[PATCH 6.12 013/247] mptcp: move the OoO check back into __mptcp_try_fallback()	[Body]
[PATCH 6.12 014/247] fat: stop reading directory entries past the end-of-directory marker	[Body]
[PATCH 6.12 015/247] soc/tegra: fuse: Add missing newline to APBMISC error message	[Body]
[PATCH 6.12 016/247] power: supply: Fix maintenance charge table kernel-doc	[Body]
[PATCH 6.12 017/247] power: supply: ds2780: Fix ds2780_get_capacity() returning raw value	[Body]
[PATCH 6.12 018/247] Drivers: hv: Avoid infinite retry loop in init_vp_index()	[Body]
[PATCH 6.12 019/247] x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()	[Body]
[PATCH 6.12 020/247] Drivers: hv: Dont reset VMBus connection state on error/exit paths	[Body]
[PATCH 6.12 021/247] pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13	[Body]
[PATCH 6.12 022/247] tools/power turbostat: Fix fd_perf leak on reset	[Body]
[PATCH 6.12 023/247] tools/power turbostat: Fix add_counter issue if > 24 counters.	[Body]
[PATCH 6.12 024/247] power: supply: generic-adc-battery: Fix temperature IIO channel conversion	[Body]
[PATCH 6.12 025/247] pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12	[Body]
[PATCH 6.12 026/247] drm/vc4: hdmi: Move packet RAM enable to PM runtime	[Body]
[PATCH 6.12 027/247] vsock: treat TCP_CLOSING as once-established	[Body]
[PATCH 6.12 028/247] net/rds: dont let the rdma_cm destroy an id RDS still owns on route failure	[Body]
[PATCH 6.12 029/247] ASoC: Intel: avs: Reset the stream unless it is already prepared	[Body]
[PATCH 6.12 030/247] ASoC: stm32: spdifrx: fix synchronization state check	[Body]
[PATCH 6.12 031/247] ASoC: cs42l56: Put the Limiter Cushion control on the limiter register	[Body]
[PATCH 6.12 032/247] ASoC: cs42l52: Fix the NG Type Switch bit	[Body]
[PATCH 6.12 033/247] ASoC: pcm3168a: Fix the DAC zero flag polarity bit	[Body]
[PATCH 6.12 034/247] ASoC: max98371: Fix the Speaker DHT Min Volume bits	[Body]
[PATCH 6.12 035/247] ASoC: wm8978: Fix the 128x oversampling switch bits	[Body]
[PATCH 6.12 036/247] ASoC: nau8822: Fix the 128x oversampling switch bits	[Body]
[PATCH 6.12 037/247] regcache: Add ->populate() callback to separate from ->init()	[Body]
[PATCH 6.12 038/247] regcache: Do not overwrite error code when finalizing cache after error	[Body]
[PATCH 6.12 039/247] regmap: Drop map lock during cache init and exit	[Body]
[PATCH 6.12 040/247] netlink: reset skb headers before unicast and multicast filtering	[Body]
[PATCH 6.12 041/247] spi: tegra114: assert CS GPIO for every transfer in a message	[Body]
[PATCH 6.12 042/247] nios2: fix __wsum type degradation in csum_fold()	[Body]
[PATCH 6.12 043/247] scsi: st: Save the visited block for the partition the drive is in	[Body]
[PATCH 6.12 044/247] scsi: target: iscsi: Fix race in discovery auth updates	[Body]
[PATCH 6.12 045/247] ocfs2/dlm: Protect the recovery list during debugfs reads	[Body]
[PATCH 6.12 046/247] samples: pidfd: fix userprogs typo	[Body]
[PATCH 6.12 047/247] pipe: preserve existing fasync readers on writer setup failure	[Body]
[PATCH 6.12 048/247] tracing: probes: error if BTF is required but unavailable	[Body]
[PATCH 6.12 049/247] scsi: libsas: Fix SMP IO deadlock during HA resume	[Body]
[PATCH 6.12 050/247] netlink: avoid hashing the network namespace pointer	[Body]
[PATCH 6.12 051/247] net: bcmgenet: unshare the skb before writing the control block	[Body]
[PATCH 6.12 052/247] net/ipv6: Introduce payload_len helpers	[Body]
[PATCH 6.12 053/247] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()	[Body]
[PATCH 6.12 054/247] gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths	[Body]
[PATCH 6.12 055/247] gpio: mxc: use lock guards for the generic GPIO chip lock	[Body]
[PATCH 6.12 056/247] gpio: mxc: fix both_edges bit operations	[Body]
[PATCH 6.12 057/247] gpio: mxc: use BIT() macro	[Body]
[PATCH 6.12 058/247] gpio: mxc: fix wakeup_pads bit operations	[Body]
[PATCH 6.12 059/247] perf: Fix perf_pmu_migrate_context() leaving events behind	[Body]
[PATCH 6.12 060/247] printk: Postpone kthread startup	[Body]
[PATCH 6.12 061/247] PCI: Dont treat ~0 as ready in pci_dev_wait() with RRS SV	[Body]
[PATCH 6.12 062/247] afs: free the super info after a grace period	[Body]
[PATCH 6.12 063/247] autofs: ignore notification errors from a replaced pipe	[Body]
[PATCH 6.12 064/247] unicode: free the map after a grace period	[Body]
[PATCH 6.12 065/247] x86/kvm: Dont consume async #PF flags on a kernel #PF in NMI context	[Body]
[PATCH 6.12 066/247] KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry	[Body]
[PATCH 6.12 067/247] fsnotify: prevent mark additions during connector teardown	[Body]
[PATCH 6.12 068/247] pid_namespace: make zap_pid_ns_processes() freezable	[Body]
[PATCH 6.12 069/247] eventfs: Free the eventfs_inode after an rcu grace period too	[Body]
[PATCH 6.12 070/247] namei: test for a negative dentry the way traverse_mounts() does	[Body]
[PATCH 6.12 071/247] net/sched: fix use-after-free in __tcf_action_put()	[Body]
[PATCH 6.12 072/247] net: rds: fix uninitialized trans dereference in CM event handler	[Body]
[PATCH 6.12 073/247] pinctrl: amd: Clear S4 wake bits when firmware has _AEI	[Body]
[PATCH 6.12 074/247] sctp: revalidate output stream after association connect wait	[Body]
[PATCH 6.12 075/247] tools: gpio: fix building from the top level with O=	[Body]
[PATCH 6.12 076/247] tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields	[Body]
[PATCH 6.12 077/247] i2c: qcom-cci: Fix HALT_ACK reset request being dropped	[Body]
[PATCH 6.12 078/247] perf: Update cgroup time when rotating multiplexed events	[Body]
[PATCH 6.12 079/247] ring-buffer: Do not show buffer_meta for CPUs without a buffer	[Body]
[PATCH 6.12 080/247] ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()	[Body]
[PATCH 6.12 081/247] ring-buffer: Fix false warning in ring_buffer_map_get_reader()	[Body]
[PATCH 6.12 082/247] scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies	[Body]
[PATCH 6.12 083/247] scsi: xen/scsifront: Check for a NULL shadow entry on a backend response	[Body]
[PATCH 6.12 084/247] scsi: libiscsi: Reject a negative task index from parse_pdu_itt	[Body]
[PATCH 6.12 085/247] scsi: libiscsi: Validate the ITT reflected in a Reject PDU	[Body]
[PATCH 6.12 086/247] scsi: libiscsi: Validate the task named by a management response	[Body]
[PATCH 6.12 087/247] drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang	[Body]
[PATCH 6.12 088/247] drm/amdgpu: dont drop the runtime PM reference twice in amdgpu_gpr	[Body]
[PATCH 6.12 089/247] drm/exec: dont immediately add prelocked obj to array of locked objs	[Body]
[PATCH 6.12 090/247] tracing: Fix the shift out of bounds in the log2 histogram modifier	[Body]
[PATCH 6.12 091/247] tracing: Take trace_types_lock when dropping the buffer_meta reference	[Body]
[PATCH 6.12 092/247] tracing: Check operator stack capacity before pushing	[Body]
[PATCH 6.12 093/247] tracing: Do not initialize tracefs work if tracing is disabled	[Body]
[PATCH 6.12 094/247] tracing: Fix hist trigger timestamps for buffered events	[Body]
[PATCH 6.12 095/247] wifi: p54: validate firmware record lengths	[Body]
[PATCH 6.12 096/247] tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)	[Body]
[PATCH 6.12 097/247] tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)	[Body]
[PATCH 6.12 098/247] cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children	[Body]
[PATCH 6.12 099/247] dm cache: fix demotion stats in passthrough mode	[Body]
[PATCH 6.12 100/247] dm cache: fix issue with background work locking	[Body]
[PATCH 6.12 101/247] dm-crypt: fix a tiny race condition in crypt_dec_pending	[Body]
[PATCH 6.12 102/247] dm-ebs: fix incorrect device offset check in ebs_ctr()	[Body]
[PATCH 6.12 103/247] dm-integrity: fix infinite loop on discard with large tag size	[Body]
[PATCH 6.12 104/247] dm-integrity: require stable writes for internal hash modes	[Body]
[PATCH 6.12 105/247] mac802154: fix data race and NULL deref on local->assoc_dev	[Body]
[PATCH 6.12 106/247] net/iucv: fix the recvmsg window update	[Body]
[PATCH 6.12 107/247] xfs: fix capability check in xfs	[Body]
[PATCH 6.12 108/247] workqueue: Use raise_softirq() to trigger softirq in irq_work handler	[Body]
[PATCH 6.12 109/247] tipc: protect node reset trace dump with node lock	[Body]
[PATCH 6.12 110/247] sctp: validate chunk length in the inqueue parser	[Body]
[PATCH 6.12 111/247] page_pool: keep frag_offset aligned for odd-sized requests	[Body]
[PATCH 6.12 112/247] s390/ctcm: Prevent XID null dereference	[Body]
[PATCH 6.12 113/247] s390/pci: Fix leak of uninitialized kernel data in SCLP report	[Body]
[PATCH 6.12 114/247] ipv4: avoid divide by zero in fib_rebalance	[Body]
[PATCH 6.12 115/247] drm/amdgpu: Fix VCE 3 ring align_mask	[Body]
[PATCH 6.12 116/247] mm, madvise: fix potential workingset node list_lru leaks	[Body]
[PATCH 6.12 117/247] mm/huge_memory: initialise workingset state before folio split	[Body]
[PATCH 6.12 118/247] Revert "s390/mm: Add missing secure storage access fixups for donated memory"	[Body]
[PATCH 6.12 119/247] netfilter: nft_byteorder: remove multi-register support	[Body]
[PATCH 6.12 120/247] mm/huge_memory: bypass THP tuneables for huge pfnmap mappings	[Body]
[PATCH 6.12 121/247] KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots	[Body]
[PATCH 6.12 122/247] fs: get rid of __FMODE_NONOTIFY kludge	[Body]
[PATCH 6.12 123/247] net: bridge: mcast: dont truncate the port group walk on teardown	[Body]
[PATCH 6.12 124/247] ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION	[Body]
[PATCH 6.12 125/247] ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION	[Body]
[PATCH 6.12 126/247] ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in	[Body]
[PATCH 6.12 127/247] net/sched: cls_flower: validate mask pointer after nla_next()	[Body]
[PATCH 6.12 128/247] smb: client: fix heap overflow in cifs_do_set_acl()	[Body]
[PATCH 6.12 129/247] smb: client: fix multiuser mount with krb5	[Body]
[PATCH 6.12 130/247] scsi: st: Fix use-after-free race between st_remove() and st_open()	[Body]
[PATCH 6.12 131/247] perf: Track the perf mlock gift separately	[Body]
[PATCH 6.12 132/247] eventfs: fix SRCU read lock leak in eventfs_iterate()	[Body]
[PATCH 6.12 133/247] net: call getsockopt_iter if available	[Body]
[PATCH 6.12 134/247] kernel/watch_queue: Use pipe_buf() to retrieve the pipe buffer	[Body]
[PATCH 6.12 135/247] watch_queue: Fix note pool publication race in watch_queue_set_size()	[Body]
[PATCH 6.12 136/247] ntfs3: free the sbi after a grace period	[Body]
[PATCH 6.12 137/247] ext4: free the sbi after a grace period	[Body]
[PATCH 6.12 138/247] ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture	[Body]
[PATCH 6.12 139/247] drm/xe: Bump LRU for external objects on exec and rebind	[Body]
[PATCH 6.12 140/247] tracing: Keep the predicate limit separate from program capacity	[Body]
[PATCH 6.12 141/247] io_uring/cancel: dont spin on local work the task cant run	[Body]
[PATCH 6.12 142/247] virtio: set skb owner of virtio_transport_reset_no_sock() reply	[Body]
[PATCH 6.12 143/247] vsock/virtio: validate packet source for connected sockets	[Body]
[PATCH 6.12 144/247] ipv4: udp: Create exceptions before socket matching	[Body]
[PATCH 6.12 145/247] workqueue: release pwq pools by pool type	[Body]
[PATCH 6.12 146/247] workqueue: Fix unbound pool lifetime for pending pwqs	[Body]
[PATCH 6.12 147/247] i2c: viai2c-wmt: Replace dev_err() with dev_err_probe() in probe function	[Body]
[PATCH 6.12 148/247] i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()	[Body]
[PATCH 6.12 149/247] futex: Fix mm reuse handling for FUT_OFF_MMSHARED	[Body]
[PATCH 6.12 150/247] drm/i915/dmc: Harden DMC firmware payload parsing	[Body]
[PATCH 6.12 151/247] tracing: Fix ignored return value of resize_buffer_duplicate_size()	[Body]
[PATCH 6.12 152/247] drm/amdgpu: free the userptr ranges when a CS fails after parser_bos	[Body]
[PATCH 6.12 153/247] sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPUs local DSQ	[Body]
[PATCH 6.12 154/247] cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()	[Body]
[PATCH 6.12 155/247] xfs: dont hold buffer locks across sync transaction commit in xfs_sync_sb_buf	[Body]
[PATCH 6.12 156/247] rose: clear stale N(R)/N(S) before (re)transmitting a data frame	[Body]
[PATCH 6.12 157/247] netrom: linearize and validate lengths in nr_rx_frame()	[Body]
[PATCH 6.12 158/247] netrom: require full NET/ROM headers in nr_route_frame()	[Body]
[PATCH 6.12 159/247] net: netrom: validate source address in nr_find_socket()	[Body]
[PATCH 6.12 160/247] netrom: bound fragment reassembly in nr_queue_rx_frame()	[Body]
[PATCH 6.12 161/247] ax25: fix OOB read after address header strip in ax25_rcv()	[Body]
[PATCH 6.12 162/247] ax25: check frame length in ax25_decode() and ax25_rx_iframe()	[Body]
[PATCH 6.12 163/247] net: ax25: fix integer overflow in ax25_rx_fragment()	[Body]
[PATCH 6.12 164/247] netrom: use a single lock for the node and neighbour lists	[Body]
[PATCH 6.12 165/247] netrom: look up and update routes in one critical section	[Body]
[PATCH 6.12 166/247] netrom: fix reference count leak in nr_rt_device_down	[Body]
[PATCH 6.12 167/247] netrom: clear nr_neigh->ax25 under the routing lock in nr_link_failed()	[Body]
[PATCH 6.12 168/247] netrom: fix nr_node leak when nr_del_node() removes the last route	[Body]
[PATCH 6.12 169/247] rose: clear through routes when a neighbour is removed from the tables	[Body]
[PATCH 6.12 170/247] rose: restart the link of a neighbour created over a live AX.25 connection	[Body]
[PATCH 6.12 171/247] ax25: serialise the transmission of I frames on a connection	[Body]
[PATCH 6.12 172/247] rose: process received frames and send with the socket locked	[Body]
[PATCH 6.12 173/247] ax25: dont create two connections for the same link in ax25_send_frame()	[Body]
[PATCH 6.12 174/247] ax25: read the connections ax25_dev only once when walking ax25_list	[Body]
[PATCH 6.12 175/247] ax25: wait for ax25_send_frame() before detaching the connections of a device	[Body]
[PATCH 6.12 176/247] ax25: dont accept frames on a device that is going down	[Body]
[PATCH 6.12 177/247] ax25: send a private copy of each I frame	[Body]
[PATCH 6.12 178/247] rose: clear the circuits of a neighbour that restarts the link	[Body]
[PATCH 6.12 179/247] ax25: send unacknowledged I frames again when a link is re-established	[Body]
[PATCH 6.12 180/247] rose: bring up the link of the preferred route passed over by a connect request	[Body]
[PATCH 6.12 181/247] ax25: dont free an incoming SABM skb left on the listeners queue	[Body]
[PATCH 6.12 182/247] mm/pagewalk: fix stale walk->action escaping walk_pmd_range()	[Body]
[PATCH 6.12 183/247] block: avoid potential deadlock on zone revalidation failure	[Body]
[PATCH 6.12 184/247] Revert "srcu: Use irq_work to start GP in tiny SRCU"	[Body]
[PATCH 6.12 185/247] net_sched: codel: fix stale state for empty flows in fq_codel	[Body]
[PATCH 6.12 186/247] Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn	[Body]
[PATCH 6.12 187/247] tracing: Reject incomplete event filter expressions	[Body]
[PATCH 6.12 188/247] tracing: Save the event file instead of the compatible histogram	[Body]
[PATCH 6.12 189/247] tracing: Unregister field variable histograms when the command fails	[Body]
[PATCH 6.12 190/247] tracing: Fix 64-bit and signed histogram fields on 32-bit kernels	[Body]
[PATCH 6.12 191/247] tracing/histograms: Verify event_call identity when updating synth_event refcount	[Body]
[PATCH 6.12 192/247] io-wq: order the exit bit against worker creation task work	[Body]
[PATCH 6.12 193/247] io_uring/waitid: own the request before clearing ->head	[Body]
[PATCH 6.12 194/247] io_uring/cmd: dont leave list poison in ->hash_node	[Body]
[PATCH 6.12 195/247] io_uring/wait: dont spin on a stuck overflow list	[Body]
[PATCH 6.12 196/247] io_uring/io-wq: dont lose the signal that ends work	[Body]
[PATCH 6.12 197/247] io_uring/io-wq: dont hide a link from cancellations	[Body]
[PATCH 6.12 198/247] io_uring: dont flood a cancelling task with task_work	[Body]
[PATCH 6.12 199/247] io_uring/io-wq: dont strand work when a worker exits	[Body]
[PATCH 6.12 200/247] io_uring/io-wq: dont exit with a creation pending	[Body]
[PATCH 6.12 201/247] io_uring/io-wq: let cancel find picked up hashed work	[Body]
[PATCH 6.12 202/247] io_uring/poll: dont lose a cancel as io-wq arms poll	[Body]
[PATCH 6.12 203/247] io_uring: dont lose a cancel as io-wq parks a request	[Body]
[PATCH 6.12 204/247] io_uring/cancel: dont forget that the work was running	[Body]
[PATCH 6.12 205/247] io_uring/cancel: recognize "no timeout" on 32-bit	[Body]
[PATCH 6.12 206/247] io_uring/cancel: let CANCEL_ALL find parked requests	[Body]
[PATCH 6.12 207/247] io_uring: wake ring pollers for local task_work	[Body]
[PATCH 6.12 208/247] io_uring/wait: look at all CQ waiters on wake up	[Body]
[PATCH 6.12 209/247] io_uring/poll: drop stale double poll entry on rearm	[Body]
[PATCH 6.12 210/247] io_uring/timeout: dont skip over reached sequences	[Body]
[PATCH 6.12 211/247] io_uring/timeout: keep repeat count on multishot update	[Body]
[PATCH 6.12 212/247] io_uring/wait: no early -ETIME if min_wait finds work	[Body]
[PATCH 6.12 213/247] io_uring/napi: make stale entries time out after 60s	[Body]
[PATCH 6.12 214/247] io_uring/napi: dont busy poll past an expired timeout	[Body]
[PATCH 6.12 215/247] io_uring/kbuf: handle index wrap in last buffer check	[Body]
[PATCH 6.12 216/247] io_uring/sqpoll: let the thread sleep on disabled rings	[Body]
[PATCH 6.12 217/247] io_uring: dont pass restart error codes to userspace	[Body]
[PATCH 6.12 218/247] io_uring/net: dont retry recv on uncommitted buffers	[Body]
[PATCH 6.12 219/247] io_uring/timeout: no ABS update of multishot timeouts	[Body]
[PATCH 6.12 220/247] io_uring/timeout: dont end a linked timeout with 1	[Body]
[PATCH 6.12 221/247] io_uring: look up the file before queueing to io-wq	[Body]
[PATCH 6.12 222/247] io_uring/poll: avoid retry wakeup loss when dropping ownership	[Body]
[PATCH 6.12 223/247] io_uring/timeout: dont put a sequence target behind the last flush	[Body]
[PATCH 6.12 224/247] io_uring/timeout: dont flush with the sequence behind the last flush	[Body]
[PATCH 6.12 225/247] io_uring/timeout: dont lose a cancel as io-wq arms a timeout	[Body]
[PATCH 6.12 226/247] io_uring/poll: dont loop on HUP with multiple references	[Body]
[PATCH 6.12 227/247] io_uring/net: keep recv buffer select length within MAX_RW_COUNT	[Body]
[PATCH 6.12 228/247] io_uring/wait: wake real-time waiters from hard interrupt context	[Body]
[PATCH 6.12 229/247] io_uring/waitid: prevent cancel reference wrap	[Body]
[PATCH 6.12 230/247] keys: Avoid the owner account dereference in named keyring lookup	[Body]
[PATCH 6.12 231/247] keys: Check the authorization payload in process keyring searches	[Body]
[PATCH 6.12 232/247] keys: Protect the type name while describing a key	[Body]
[PATCH 6.12 233/247] keys: make keyring indexes independent of kernel addresses	[Body]
[PATCH 6.12 234/247] keys: Protect the read method check against type removal	[Body]
[PATCH 6.12 235/247] KEYS: Fix key_reject_and_link() race with keyring restriction	[Body]
[PATCH 6.12 236/247] KEYS: trusted: Fix blob allocation size in tpm2_key_decode()	[Body]
[PATCH 6.12 237/247] keys/trusted_keys: return immediately after TPM unseal failure	[Body]
[PATCH 6.12 238/247] asymmetric_keys: reject trust keys without IDs	[Body]
[PATCH 6.12 239/247] ftrace: Initialize modname and offset in print_rec()	[Body]
[PATCH 6.12 240/247] coredump: hold RCU while releasing parked threads	[Body]
[PATCH 6.12 241/247] signal: only SIGKILL and the freezers interrupt a coredumping task	[Body]
[PATCH 6.12 242/247] signal: dont retarget shared signals in a dying thread group	[Body]
[PATCH 6.12 243/247] ptrace: refuse to change the signal mask of a user worker	[Body]
[PATCH 6.12 244/247] fork: release the files of a failed fork after sched_cancel_fork()	[Body]
[PATCH 6.12 245/247] pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper	[Body]
[PATCH 6.12 246/247] signal: allow taks to temporarily block TIF_NOTIFY_SIGNAL	[Body]
[PATCH 6.12 247/247] fanotify: Fix crash in fanotify_init(2)	[Body]

Session 2026-10-28

Passed

ID (for dev)	dfde2e0a-8455-4110-8b5c-5d48f1fab0d6
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	85d82e0d7c2dfd3e75d34f35b7ebbf41f45c9c4e [Config]		passed [Log]
[KASAN] Boot test: Base	85d82e0d7c2dfd3e75d34f35b7ebbf41f45c9c4e [Config]		passed [Log]
[KASAN] Build Patched		85d82e0d7c2dfd3e75d34f35b7ebbf41f45c9c4e [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		85d82e0d7c2dfd3e75d34f35b7ebbf41f45c9c4e [Config] [patched]	passed [Log]
[KASAN] Fuzz	85d82e0d7c2dfd3e75d34f35b7ebbf41f45c9c4e [Config]	85d82e0d7c2dfd3e75d34f35b7ebbf41f45c9c4e [Config] [patched]	passed [Log] [Artifacts]

Patches (247)

Series Summary

Sessions

Session 2026-10-28