1:  7d67e7976e48 ! 1:  0ff91258e8c4 wifi: ath11k: bound READY MAC address array reads
    @@ Commit message
         Found by code review while bringing up a device with older firmware; a
         userspace harness that includes the unmodified parser reports a 6-byte
         heap-buffer-overflow read under AddressSanitizer for this input, and
    -    the fixed parser passes. Compile tested only (ath-next, W=1).
    +    the fixed parser passes. Compile tested on ath-next (W=1). The same
    +    change has also run on an IPQ8074 hw1.0 board (with out-of-tree
    +    enablement patches) on every boot since 16 Oct 2026; that firmware
    +    sends a well-formed array, so this exercises only the normal path,
    +    which still assigns both per-radio addresses and prints no warning.
    +
    +    Tested-on: IPQ8074 hw1.0 AHB WLAN.HK.2.0-01792-QCAHKSWPL_SILICONZ-1
     
         Fixes: d5c65159f289 ("ath11k: driver for Qualcomm IEEE 802.11ax devices")
         Assisted-by: LLM
2:  add16c19354f = 2:  536c4ae89dfb wifi: ath12k: bound READY MAC address array reads