On Sat, 6 Sep 2025 08:57:37 +0200 David Hildenbrand [off-list ref] wrote:

quoted

quoted

@@ -3024,6 +3025,7 @@ static int gup_fast_pud_leaf(pud_t orig, pud_t *pudp, unsigned long addr,
                 return 0;
         }
+       pages += *nr;
         *nr += refs;
         for (; refs; refs--)
                 *(pages++) = page++;

Can this get folded in soon?  This bug is causing crashes in AF_ALG too.

Andrew immediately dropped the original patch, so it's gone from 
mm-unstable and should be gone from next soon (today?).

I restored it once you sent out the fix.  It doesn't seem to be in
present -next but it should be there in the next one.