)]}'
{
  "commit": "062ea04d39b48ae7b92268575cd91677e97dd59d",
  "tree": "a9c9aa85f94161ef8193c410d2240ad601f73457",
  "parents": [
    "cae186e568245769d61ab1cff0f14366822276c7",
    "f1e375d5eb68f990709fce37ee1c0ecae3645b6f"
  ],
  "author": {
    "name": "COS Kernel Merge Bot",
    "email": "cloud-image-merge-automation@prod.google.com",
    "time": "Sat Sep 20 01:57:53 2025 -0700"
  },
  "committer": {
    "name": "Robert Kolchmeyer",
    "email": "rkolchmeyer@google.com",
    "time": "Tue Sep 23 13:10:24 2025 -0700"
  },
  "message": "merge-upstream/v6.12.48 from branch/tag: upstream/v6.12.48 into branch: cos-6.12\n\nChangelog:\n-------------------------------------------------------------\n\nAlan Stern (1):\n      USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels\n\nAlex Deucher (2):\n      drm/amd/display: use udelay rather than fsleep\n      drm/amdgpu: fix a memory leak in fence cleanup when unloading\n\nAlex Markuze (2):\n      ceph: fix race condition validating r_parent before applying state\n      ceph: fix race condition where r_parent becomes stale before sending message\n\nAlex Tran (1):\n      docs: networking: can: change bcm_msg_head frames member to support flexible array\n\nAlexander Sverdlin (1):\n      mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing\n\nAlok Tiwari (1):\n      genetlink: fix genl_bind() invoking bind() after -EPERM\n\nAmir Goldstein (2):\n      fhandle: use more consistent rules for decoding file handle from userns\n      fuse: do not allow mapping a non-regular backing file\n\nAnders Roxell (1):\n      dmaengine: ti: edma: Fix memory allocation size for queue_priority_map\n\nAndreas Kemnade (1):\n      regulator: sy7636a: fix lifecycle of power good gpio\n\nAnssi Hannula (1):\n      can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB\n\nAntoine Tenart (1):\n      tunnels: reset the GSO metadata before reusing the skb\n\nAurabindo Pillai (1):\n      Revert \"drm/amd/display: Optimize cursor position updates\"\n\nBaochen Qiang (1):\n      dma-debug: don\u0027t enforce dma mapping check on noncoherent allocations\n\nBoris Burkov (2):\n      btrfs: fix squota compressed stats leak\n      btrfs: use readahead_expand() on compressed extents\n\nBuday Csaba (1):\n      net: mdiobus: release reset_gpio in mdiobus_unregister_device()\n\nChen Ridong (1):\n      kernfs: Fix UAF in polling when open file is released\n\nChia-I Wu (1):\n      drm/panthor: validate group queue count\n\nChiasheng Lee (1):\n      i2c: i801: Hide Intel Birch Stream SoC TCO WDT\n\nChristoffer Sandberg (1):\n      Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table\n\nChristoph Hellwig (1):\n      dma-debug: store a phys_addr_t in struct dma_debug_entry\n\nChristophe Kerello (2):\n      mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer\n      mtd: rawnand: stm32_fmc2: fix ECC overwrite\n\nDan Carpenter (1):\n      dmaengine: idxd: Fix double free in idxd_setup_wqs()\n\nDaniel Borkmann (1):\n      bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt\n\nDavid Rosca (3):\n      drm/amdgpu: Add back JPEG to video caps for carrizo and newer\n      drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time\n      drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages\n\nFabian Vogt (1):\n      tty: hvc_console: Call hvc_kick in hvc_write unconditionally\n\nFabio Porcedda (2):\n      USB: serial: option: add Telit Cinterion FN990A w/audio compositions\n      USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions\n\nFedor Pchelkin (1):\n      dma-debug: fix physical address calculation for struct dma_debug_entry\n\nFlorian Westphal (10):\n      netfilter: nft_set_pipapo: remove unused arguments\n      netfilter: nft_set: remove one argument from lookup and update functions\n      netfilter: nft_set_pipapo: merge pipapo_get/lookup\n      netfilter: nft_set_pipapo: don\u0027t return bogus extension pointer\n      netfilter: nft_set_pipapo: don\u0027t check genbit from packetpath lookups\n      netfilter: nft_set_rbtree: continue traversal if element is inactive\n      netfilter: nf_tables: place base_seq in struct net\n      netfilter: nf_tables: make nft_set_do_lookup available unconditionally\n      netfilter: nf_tables: restart set lookup on base_seq change\n      netfilter: nft_set_pipapo: fix null deref for empty set\n\nGreg Kroah-Hartman (1):\n      Linux 6.12.48\n\nGuenter Roeck (2):\n      trace/fgraph: Fix error handling\n      x86: disable image size check for test builds\n\nHangbin Liu (2):\n      hsr: use rtnl lock when iterating over ports\n      hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr\n\nHarry Yoo (1):\n      mm: introduce and use {pgd,p4d}_populate_kernel()\n\nHuan Yang (1):\n      Revert \"udmabuf: fix vmap_udmabuf error page set\"\n\nHugo Villeneuve (1):\n      serial: sc16is7xx: fix bug in flow control levels init\n\nIlya Dryomov (1):\n      libceph: fix invalid accesses to ceph_connection_v1_info\n\nJakub Kicinski (1):\n      netlink: specs: mptcp: replace underscores with dashes in names\n\nJani Nikula (1):\n      drm/i915/power: fix size for for_each_set_bit() in abox iteration\n\nJeff LaBundy (1):\n      Input: iqs7222 - avoid enabling unused interrupts\n\nJeongjun Park (1):\n      mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range()\n\nJohan Hovold (4):\n      drm/mediatek: fix potential OF node use-after-free\n      phy: tegra: xusb: fix device and OF node leak at probe\n      phy: ti: omap-usb2: fix device leak at unbind\n      phy: ti-pipe3: fix device leak at unbind\n\nJonathan Curley (1):\n      NFSv4/flexfiles: Fix layout merge mirror check.\n\nJustin Worrell (1):\n      SUNRPC: call xs_sock_process_cmsg for all cmsg\n\nK Prateek Nayak (1):\n      x86/cpu/topology: Always try cpu_parse_topology_ext() on AMD/Hygon\n\nKaFai Wan (1):\n      bpf: Allow fall back to interpreter for programs with stack size \u003c\u003d 512\n\nKohei Enju (1):\n      igb: fix link test skipping when interface is admin down\n\nKrister Johansen (1):\n      mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN\n\nKrzysztof Kozlowski (1):\n      dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks\n\nKuniyuki Iwashima (1):\n      tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-\u003ecork.\n\nKyle Meyer (1):\n      mm/memory-failure: fix redundant updates for already poisoned pages\n\nLinus Torvalds (1):\n      Disable SLUB_TINY for build testing\n\nLuo Gengkun (1):\n      tracing: Fix tracing_marker may trigger page fault during preempt_disable\n\nMark Tinguely (1):\n      ocfs2: fix recursive semaphore deadlock in fiemap call\n\nMathias Nyman (1):\n      xhci: fix memory leak regression when freeing xhci vdev devices depth first\n\nMatthieu Baerts (NGI0) (3):\n      netlink: specs: mptcp: add missing \u0027server-side\u0027 attr\n      netlink: specs: mptcp: clearly mention attributes\n      netlink: specs: mptcp: fix if-idx attribute type\n\nMaurizio Lombardi (1):\n      nvme-pci: skip nvme_write_sq_db on empty rqlist\n\nMax Kellermann (1):\n      fs/nfs/io: make nfs_start_io_*() killable\n\nMiaohe Lin (1):\n      mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory\n\nMiaoqian Lin (1):\n      dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate\n\nMichal Schmidt (1):\n      i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path\n\nMike Snitzer (2):\n      nfs/localio: remove extra indirect nfs_to call to check {read,write}_iter\n      nfs/localio: add direct IO enablement with sync and async IO support\n\nMiklos Szeredi (2):\n      fuse: check if copy_file_range() returns larger than requested size\n      fuse: prevent overflow in copy_file_range return value\n\nMurali Karicheri (1):\n      net: hsr: Add VLAN CTAG filter support\n\nNathan Chancellor (1):\n      compiler-clang.h: define __SANITIZE_*__ macros only when undefined\n\nOleksij Rempel (1):\n      net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups\n\nOmar Sandoval (1):\n      btrfs: fix subvolume deletion lockup caused by inodes xarray race\n\nPalmer Dabbelt (1):\n      RISC-V: Remove unnecessary include from compat.h\n\nPaolo Abeni (1):\n      Revert \"net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups\"\n\nPeilin Ye (1):\n      bpf: Tell memcg to use allow_spinning\u003dfalse path in bpf_timer_init()\n\nPengyu Luo (1):\n      phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties\n\nPetr Machata (1):\n      net: bridge: Bounce invalid boolopts\n\nPhil Sutter (1):\n      netfilter: nf_tables: Reintroduce shortened deletion notifications\n\nPu Lehui (1):\n      tracing: Silence warning when chunk allocation fails in trace_pid_write\n\nQu Wenruo (1):\n      btrfs: fix corruption reading compressed range when block size is smaller than page size\n\nQuanmin Yan (2):\n      mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()\n      mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()\n\nRD Babiera (1):\n      usb: typec: tcpm: properly deliver cable vdms to altmode drivers\n\nSalah Triki (1):\n      EDAC/altera: Delete an inappropriate dma_free_coherent() call\n\nSang-Heon Jeon (1):\n      mm/damon/core: set quota-\u003echarged_from to jiffies at first charge window\n\nSanthosh Kumar K (1):\n      mtd: spinand: winbond: Fix oob_layout for W25N01JW\n\nScott Mayhew (1):\n      nfs/localio: restore creds before releasing pageio data\n\nSean Anderson (4):\n      dma-mapping: trace dma_alloc/free direction\n      dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map\n      dma-mapping: trace more error paths\n      dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err\n\nSrinivasan Shanmugam (1):\n      drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed\n\nStanislav Fort (1):\n      mm/damon/sysfs: fix use-after-free in state_show()\n\nStefan Wahren (1):\n      net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()\n\nStephan Gerhold (1):\n      dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees\n\nTakashi Iwai (3):\n      ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA\n      usb: gadget: midi2: Fix missing UMP group attributes initialization\n      usb: gadget: midi2: Fix MIDI2 IN EP max packet size\n\nTetsuo Handa (2):\n      can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed\n      can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails\n\nTheodore Ts\u0027o (1):\n      ext4: introduce linear search for dentries\n\nThomas Hellström (1):\n      drm/xe: Attempt to bring bos back to VRAM after eviction\n\nThomas Richter (2):\n      s390/pai: Deny all events not handled by this PMU\n      s390/cpum_cf: Deny all sampling events by counter PMU\n\nTigran Mkrtchyan (1):\n      flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read\n\nTrond Myklebust (10):\n      NFSv4: Don\u0027t clear capabilities that won\u0027t be reset\n      NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set\n      NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported\n      NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server\n      NFS: Serialise O_DIRECT i/o and truncate()\n      NFSv4.2: Serialise O_DIRECT i/o and fallocate()\n      NFSv4.2: Serialise O_DIRECT i/o and clone range\n      NFSv4.2: Serialise O_DIRECT i/o and copy range\n      NFS: nfs_invalidate_folio() must observe the offset and size arguments\n      Revert \"SUNRPC: Don\u0027t allow waiting for exiting tasks\"\n\nUmesh Nerlige Ramappa (1):\n      drm/i915/pmu: Fix zero delta busyness issue\n\nVladimir Riabchun (1):\n      ftrace/samples: Fix function size computation\n\nWei Yang (1):\n      mm/khugepaged: fix the address passed to notifier on testing young\n\nXiongfeng Wang (1):\n      hrtimers: Unconditionally update target CPU base after offline timer migration\n\nYeoreum Yun (1):\n      kunit: kasan_test: disable fortify string checker on kasan_strings() test\n\nYevgeny Kliteynik (1):\n      net/mlx5: HWS, change error flow on matcher disconnect\n\nYi Sun (2):\n      dmaengine: idxd: Remove improper idxd_free\n      dmaengine: idxd: Fix refcount underflow on module unload\n\nwangzijie (1):\n      proc: fix type confusion in pde_set_flags()\n\nBUG\u003db/446313879\nTEST\u003dtryjob, validation and K8s e2e\nRELEASE_NOTE\u003dUpdated the Linux kernel to v6.12.48.\n\nChange-Id: Ice8f25562ffef0c25d09048e648b7e197f94144e\nSigned-off-by: COS Kernel Merge Bot \u003ccloud-image-merge-automation@prod.google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/111762\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Kevin Berry \u003ckpberry@google.com\u003e\nReviewed-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n",
  "tree_diff": []
}