)]}'
{
  "commit": "bca084acf36df7105bde6e24bdee99b4cc82df6b",
  "tree": "4661732909ebbbaacee509952b733f7c5c4f52ee",
  "parents": [
    "062ea04d39b48ae7b92268575cd91677e97dd59d",
    "da274362a7bd9ab3a6e46d15945029145ebce672"
  ],
  "author": {
    "name": "COS Kernel Merge Bot",
    "email": "cloud-image-merge-automation@prod.google.com",
    "time": "Fri Sep 26 02:10:51 2025 -0700"
  },
  "committer": {
    "name": "Robert Kolchmeyer",
    "email": "rkolchmeyer@google.com",
    "time": "Fri Sep 26 10:13:18 2025 -0700"
  },
  "message": "merge-upstream/v6.12.49 from branch/tag: upstream/v6.12.49 into branch: cos-6.12\n\nChangelog:\n-------------------------------------------------------------\n\nAjay.Kathat@microchip.com (1):\n      wifi: wilc1000: avoid buffer overflow in WID string configuration\n\nAlexey Nepomnyashih (1):\n      net: liquidio: fix overflow in octeon_init_instr_queue()\n\nAmadeusz Sławiński (1):\n      ASoC: Intel: catpt: Expose correct bit depth to userspace\n\nAnderson Nascimento (1):\n      net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR\n\nAntheas Kapenekakis (2):\n      platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13\n      platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk\n\nBorislav Petkov (1):\n      x86/bugs: KVM: Add support for SRSO_MSR_FIX\n\nBorislav Petkov (AMD) (1):\n      x86/bugs: Add SRSO_USER_KERNEL_NO support\n\nBruno Thomsen (1):\n      rtc: pcf2127: fix SPI command byte for PCF2131 backport\n\nCharles Keepax (3):\n      ASoC: wm8940: Correct PLL rate rounding\n      ASoC: wm8940: Correct typo in control name\n      ASoC: wm8974: Correct PLL rate rounding\n\nChen Ridong (1):\n      cgroup: split cgroup_destroy_wq into 3 workqueues\n\nChristoph Hellwig (1):\n      nvme: fix PI insert on write\n\nColin Ian King (1):\n      ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message\n\nDan Carpenter (1):\n      drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue()\n\nDavid Laight (7):\n      minmax.h: add whitespace around operators and after commas\n      minmax.h: update some comments\n      minmax.h: reduce the #define expansion of min(), max() and clamp()\n      minmax.h: use BUILD_BUG_ON_MSG() for the lo \u003c hi test in clamp()\n      minmax.h: move all the clamp() definitions after the min/max() ones\n      minmax.h: simplify the variants of clamp()\n      minmax.h: remove some #defines that are only expanded once\n\nDuoming Zhou (2):\n      cnic: Fix use-after-free bugs in cnic_delete_task\n      octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()\n\nEugene Koira (1):\n      iommu/vt-d: Fix __domain_mapping()\u0027s usage of switch_to_super_page()\n\nFilipe Manana (1):\n      btrfs: fix invalid extref key setup when replaying dentry\n\nGeert Uytterhoeven (1):\n      pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch\n\nGeliang Tang (1):\n      selftests: mptcp: sockopt: fix error messages\n\nGreg Kroah-Hartman (1):\n      Linux 6.12.49\n\nGuangshuo Li (1):\n      LoongArch: vDSO: Check kcalloc() result in init_vdso()\n\nH. Nikolaus Schaller (2):\n      power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery\n      power: supply: bq27xxx: restrict no-battery detection to bq27000\n\nHangbin Liu (2):\n      bonding: set random address only when slaves already exist\n      bonding: don\u0027t set oif to bond dev when getting NS target destination\n\nHans de Goede (1):\n      net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer\n\nHerbert Xu (2):\n      crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg\n      crypto: af_alg - Set merge to zero early in af_alg_sendmsg\n\nHuacai Chen (1):\n      LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled\n\nHugh Dickins (2):\n      mm: revert \"mm: vmscan.c: fix OOM on swap stress test\"\n      mm/gup: check ref_count instead of lru before migration\n\nHåkon Bugge (1):\n      rds: ib: Increment i_fastreg_wrs before bailing out\n\nIoana Ciornei (1):\n      dpaa2-switch: fix buffer pool seeding for control traffic\n\nIvan Lipski (1):\n      drm/amd/display: Allow RX6xxx \u0026 RX7700 to invoke amdgpu_irq_get/put\n\nJacob Keller (2):\n      ice: store max_frame and rx_buf_len only in ice_rx_ring\n      ice: fix Rx page leak on multi-buffer frames\n\nJakub Kicinski (1):\n      tls: make sure to abort the stream if headers are bogus\n\nJamie Bainbridge (1):\n      qed: Don\u0027t collect too many protection override GRC elements\n\nJens Axboe (4):\n      io_uring: backport io_should_terminate_tw()\n      io_uring: include dying ring in task_work \"should cancel\" state\n      io_uring/msg_ring: kill alloc_cache for io_kiocb allocations\n      io_uring/kbuf: drop WARN_ON_ONCE() from incremental length check\n\nJianbo Liu (1):\n      net/mlx5e: Harden uplink netdev access against device unbind\n\nKan Liang (1):\n      perf/x86/intel: Fix crash in icl_update_topdown_event()\n\nKohei Enju (1):\n      igc: don\u0027t fail igc_probe() on LED setup error\n\nKrzysztof Kozlowski (1):\n      ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed\n\nKuniyuki Iwashima (1):\n      tcp: Clear tcp_sk(sk)-\u003efastopen_rsk in tcp_disconnect().\n\nLachlan Hodges (1):\n      wifi: mac80211: increase scan_ies_len for S1G\n\nLi Zhe (1):\n      gup: optimize longterm pin_user_pages() for large folio\n\nLiao Yuanhong (1):\n      wifi: mac80211: fix incorrect type for ret\n\nLoic Poulain (1):\n      drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ\n\nMaciej Fijalkowski (1):\n      i40e: remove redundant memory barrier when cleaning Tx descs\n\nMaciej S. Szmigiero (1):\n      KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active\n\nMathias Nyman (2):\n      xhci: dbc: decouple endpoint allocation from initialization\n      xhci: dbc: Fix full DbC transfer ring after several reconnects\n\nMatthieu Baerts (NGI0) (7):\n      mptcp: set remote_deny_join_id0 on SYN recv\n      selftests: mptcp: userspace pm: validate deny-join-id0 flag\n      mptcp: tfo: record \u0027deny join id0\u0027 info\n      mptcp: propagate shutdown to subflows when possible\n      selftests: mptcp: connect: catch IO errors on listen side\n      selftests: mptcp: avoid spurious errors on TCP disconnect\n      mptcp: pm: nl: announce deny-join-id0 flag\n\nMiaoqian Lin (1):\n      um: virtio_uml: Fix use-after-free after put_device in probe\n\nMikulas Patocka (2):\n      dm-raid: don\u0027t set io_min and io_opt for raid1\n      dm-stripe: fix a possible integer overflow\n\nMohammad Rafi Shaik (2):\n      ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface\n      ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S\n\nNamjae Jeon (1):\n      ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer\n\nNathan Chancellor (1):\n      nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*\n\nNiklas Neronin (2):\n      usb: xhci: introduce macro for ring segment list iteration\n      usb: xhci: remove option to change a default ring\u0027s TRB cycle bit\n\nPaulo Alcantara (1):\n      smb: client: fix filename matching of deferred files\n\nPavel Begunkov (1):\n      io_uring/cmd: let cmds to know about dying task\n\nPraful Adiga (1):\n      ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx\n\nQi Xi (1):\n      drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path\n\nQu Wenruo (1):\n      btrfs: tree-checker: fix the incorrect inode ref size check\n\nSankararaman Jayaraman (1):\n      vmxnet3: unregister xdp rxq info in the reset path\n\nSathesh B Edara (1):\n      octeon_ep: fix VF MAC address lifecycle handling\n\nSean Christopherson (1):\n      KVM: SVM: Set/clear SRSO\u0027s BP_SPEC_REDUCE on 0 \u003c\u003d\u003e 1 VM count transitions\n\nShivank Garg (1):\n      mm: add folio_expected_ref_count() for reference count calculation\n\nShuicheng Lin (1):\n      drm/xe/tile: Release kobject for the failure path\n\nStefan Metzmacher (3):\n      ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size\n      smb: client: let smbd_destroy() call disable_work_sync(\u0026info-\u003epost_send_credits_work)\n      smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path\n\nTakashi Sakamoto (1):\n      ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported\n\nTao Cui (1):\n      LoongArch: Check the return value when creating kobj\n\nTariq Toukan (1):\n      Revert \"net/mlx5e: Update and set Xon/Xoff upon port speed set\"\n\nThomas Fourier (1):\n      mmc: mvsdio: Fix dma_unmap_sg() nents value\n\nTiezhu Yang (4):\n      LoongArch: Update help info of ARCH_STRICT_ALIGN\n      objtool/LoongArch: Mark types based on break immediate code\n      objtool/LoongArch: Mark special atomic instruction as INSN_BUG type\n      LoongArch: Fix unreliable stack for live patching\n\nTiwei Bie (1):\n      um: Fix FD copy size in os_rcv_fd_msg()\n\nVasant Hegde (1):\n      iommu/amd/pgtbl: Fix possible race while increase page table level\n\nYang Xiuwei (1):\n      io_uring: fix incorrect io_kiocb reference in io_link_skb\n\nYeounsu Moon (1):\n      net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure\n\nBUG\u003db/447536172\nTEST\u003dtryjob, validation and K8s e2e\nRELEASE_NOTE\u003dUpdated the Linux kernel to v6.12.49.\n\nChange-Id: I400cc644152ac3aad44caebccf7e4f24b592b7cd\nSigned-off-by: COS Kernel Merge Bot \u003ccloud-image-merge-automation@prod.google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/112257\nReviewed-by: Kevin Berry \u003ckpberry@google.com\u003e\nReviewed-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": []
}