[PATCH 6.12 000/185] 6.12.59-rc1 review

[PATCH 6.12 000/185] 6.12.59-rc1 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 6.12.59 release.
There are 185 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun, 23 Nov 2025 13:01:08 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.59-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 6.12.59-rc1

Pauli Virtanen <pav@iki.fi>
    Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete

Jialin Wang <wjl.linux@gmail.com>
    proc: proc_maps_open allow proc_mem_open to return NULL

John Sperbeck <jsperbeck@google.com>
    net: netpoll: ensure skb_pool list is always initialized

Horatiu Vultur <horatiu.vultur@microchip.com>
    net: phy: micrel: Fix lan8814_config_init

Abdun Nihaal <nihaal@cse.iitm.ac.in>
    isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()

Zi Yan <ziy@nvidia.com>
    mm/huge_memory: preserve PG_has_hwpoisoned if a folio is split to >0 order

Zi Yan <ziy@nvidia.com>
    mm/huge_memory: do not change split_huge_page*() target order silently

Lance Yang <lance.yang@linux.dev>
    mm/secretmem: fix use-after-free race in fault handler

Kiryl Shutsemau <kas@kernel.org>
    mm/truncate: unmap large folio on split failure

Kiryl Shutsemau <kas@kernel.org>
    mm/memory: do not populate page table entries beyond i_size

Long Li <longli@microsoft.com>
    uio_hv_generic: Set event for all channels on the device

Miguel Ojeda <ojeda@kernel.org>
    rust: kbuild: workaround `rustdoc` doctests modifier bug

Miguel Ojeda <ojeda@kernel.org>
    rust: kbuild: treat `build_error` and `rustdoc` as kernel objects

Olivier Langlois <olivier@trillion01.com>
    io_uring/napi: fix io_napi_entry RCU accesses

Denis Arefev <arefev@swemel.ru>
    ALSA: hda: Fix missing pointer check in hda_component_manager_init function

Sukrit Bhatnagar <Sukrit.Bhatnagar@sony.com>
    KVM: VMX: Fix check for valid GVA on an EPT violation

Sean Christopherson <seanjc@google.com>
    KVM: VMX: Split out guts of EPT violation to common/exposed function

Breno Leitao <leitao@debian.org>
    net: netpoll: fix incorrect refcount handling causing incorrect cleanup

Breno Leitao <leitao@debian.org>
    net: netpoll: flush skb pool during cleanup

Breno Leitao <leitao@debian.org>
    net: netpoll: Individualize the skb pool

Sean Christopherson <seanjc@google.com>
    KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying

Yan Zhao <yan.y.zhao@intel.com>
    KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file

Sean Christopherson <seanjc@google.com>
    KVM: guest_memfd: Pass index, not gfn, to __kvm_gmem_get_pfn()

Michal Hocko <mhocko@suse.com>
    mm, percpu: do not consider sleepable allocations atomic

Benjamin Berg <benjamin.berg@intel.com>
    wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work

Benjamin Berg <benjamin.berg@intel.com>
    wifi: cfg80211: add an hrtimer based delayed work item

Paolo Abeni <pabeni@redhat.com>
    mptcp: fix MSG_PEEK stream corruption

Matthieu Baerts (NGI0) <matttbe@kernel.org>
    selftests: mptcp: join: properly kill background tasks

Matthieu Baerts (NGI0) <matttbe@kernel.org>
    selftests: mptcp: join: userspace: longer transfer

Matthieu Baerts (NGI0) <matttbe@kernel.org>
    selftests: mptcp: connect: trunc: read all recv data

Matthieu Baerts (NGI0) <matttbe@kernel.org>
    selftests: mptcp: join: endpoints: longer transfer

Matthieu Baerts (NGI0) <matttbe@kernel.org>
    selftests: mptcp: join: rm: set backup flag

Matthieu Baerts (NGI0) <matttbe@kernel.org>
    selftests: mptcp: connect: fix fallback note due to OoO

André Draszik <andre.draszik@linaro.org>
    pmdomain: samsung: plug potential memleak during probe

Miaoqian Lin <linmq006@gmail.com>
    pmdomain: imx: Fix reference count leak in imx_gpc_remove

Sudeep Holla <sudeep.holla@arm.com>
    pmdomain: arm: scmi: Fix genpd leak on provider registration failure

Vitaly Prosyak <vitaly.prosyak@amd.com>
    drm/amdgpu: disable peer-to-peer access for DCC-enabled GC12 VRAM surfaces

Jonathan Kim <jonathan.kim@amd.com>
    drm/amdkfd: relax checks for over allocation of save area

Zilin Guan <zilin@seu.edu.cn>
    btrfs: release root after error in data_reloc_print_warning_inode()

Filipe Manana <fdmanana@suse.com>
    btrfs: do not update last_log_commit when logging inode due to a new name

Zilin Guan <zilin@seu.edu.cn>
    btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe()

Naohiro Aota <naohiro.aota@wdc.com>
    btrfs: zoned: fix conventional zone capacity calculation

Mario Limonciello (AMD) <superm1@kernel.org>
    PM: hibernate: Use atomic64_t for compressed_size variable

Mario Limonciello (AMD) <superm1@kernel.org>
    PM: hibernate: Emit an error when image writing fails

Niravkumar L Rabara <niravkumarlaxmidas.rabara@altera.com>
    EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection

Niravkumar L Rabara <niravkumarlaxmidas.rabara@altera.com>
    EDAC/altera: Handle OCRAM ECC enable after warm reset

Huacai Chen <chenhuacai@kernel.org>
    LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY

Song Liu <song@kernel.org>
    ftrace: Fix BPF fexit with livepatch

Ankit Khushwaha <ankitkhushwaha.linux@gmail.com>
    selftests/user_events: fix type cast for write_index packed member in perf_test

Borislav Petkov (AMD) <bp@alien8.de>
    x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev

Hans de Goede <hansg@kernel.org>
    spi: Try to get ACPI GPIO IRQ earlier

Henrique Carvalho <henrique.carvalho@suse.com>
    smb: client: fix cifs_pick_channel when channel needs reconnect

Miaoqian Lin <linmq006@gmail.com>
    crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value

Sourabh Jain <sourabhjain@linux.ibm.com>
    crash: fix crashkernel resource shrink

Hao Ge <gehao@kylinos.cn>
    codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext

Edward Adam Davis <eadavis@qq.com>
    cifs: client: fix memory leak in smb3_fs_context_parse_param

Takashi Iwai <tiwai@suse.de>
    ALSA: usb-audio: Fix potential overflow of PCM transfer buffer

Shawn Lin <shawn.lin@rock-chips.com>
    mmc: dw_mmc-rockchip: Fix wrong internal phase calculate

Shawn Lin <shawn.lin@rock-chips.com>
    mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4

Kairui Song <kasong@tencent.com>
    mm/shmem: fix THP allocation and fallback loop

Isaac J. Manjarres <isaacmanjarres@google.com>
    mm/mm_init: fix hash table order logging in alloc_large_system_hash()

Wei Yang <albinwyang@tencent.com>
    fs/proc: fix uaf in proc_readdir_de()

Johannes Berg <johannes.berg@intel.com>
    wifi: mac80211: reject address change while connecting

Steven Rostedt <rostedt@goodmis.org>
    selftests/tracing: Run sample events to clear page cache events

Edward Adam Davis <eadavis@qq.com>
    nilfs2: avoid having an active sc_timer before freeing sci

Chuang Wang <nashuiliang@gmail.com>
    ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe

Tianyang Zhang <zhangtianyang@loongson.cn>
    LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY

Huacai Chen <chenhuacai@kernel.org>
    LoongArch: Use correct accessor to read FWPC/MWPC

Qinxin Xia <xiaqinxin@huawei.com>
    dma-mapping: benchmark: Restore padding to ensure uABI remained consistent

Nate Karstens <nate.karstens@garmin.com>
    strparser: Fix signed/unsigned mismatch bug

Pedro Demarchi Gomes <pedrodemargomes@gmail.com>
    ksm: use range-walk function to jump over holes in scan_get_next_rmap_item

Joshua Rogers <linux@joshua.hu>
    ksmbd: close accepted socket when per-IP limit rejects connection

Peter Oberparleiter <oberpar@linux.ibm.com>
    gcov: add support for GCC 15

Olga Kornievskaia <okorniev@redhat.com>
    NFSD: free copynotify stateid in nfs4_free_ol_stateid()

Olga Kornievskaia <okorniev@redhat.com>
    nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes

NeilBrown <neil@brown.name>
    nfsd: fix refcount leak in nfsd_set_fh_dentry()

Yosry Ahmed <yosry.ahmed@linux.dev>
    KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated

Bibo Mao <maobibo@loongson.cn>
    LoongArch: KVM: Add delay until timer interrupt injected

Bibo Mao <maobibo@loongson.cn>
    LoongArch: KVM: Restore guest PMU if it is enabled

Vladimir Oltean <vladimir.oltean@nxp.com>
    net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()

Abdun Nihaal <nihaal@cse.iitm.ac.in>
    HID: uclogic: Fix potential memory leak in error path

Abdun Nihaal <nihaal@cse.iitm.ac.in>
    HID: playstation: Fix memory leak in dualshock4_get_calibration_data()

Rafał Miłecki <rafal@milecki.pl>
    ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY

Masami Ichikawa <masami256@gmail.com>
    HID: hid-ntrig: Prevent memory leak in ntrig_report_version()

Jihed Chaibi <jihed.chaibi.dev@gmail.com>
    ARM: dts: imx51-zii-rdu1: Fix audmux node names

Dragan Simic <dsimic@manjaro.org>
    arm64: dts: rockchip: Make RK3588 GPU OPP table naming less generic

Anand Moon <linux.amoon@gmail.com>
    arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1

Pablo Neira Ayuso <pablo@netfilter.org>
    netfilter: nf_tables: reject duplicate device on updates

Pablo Neira Ayuso <pablo@netfilter.org>
    Revert "netfilter: nf_tables: Reintroduce shortened deletion notifications"

Zqiang <qiang.zhang@linux.dev>
    sched_ext: Fix unsafe locking in the scx_dump_state()

Andrei Vagin <avagin@google.com>
    fs/namespace: correctly handle errors returned by grab_requested_mnt_ns

Alok Tiwari <alok.a.tiwari@oracle.com>
    virtio-fs: fix incorrect check for fsvq->kobj

Dan Carpenter <dan.carpenter@linaro.org>
    mtd: onenand: Pass correct pointer to IRQ handler

Hongbo Li <lihongbo22@huawei.com>
    hostfs: Fix only passing host root in boot stage with new mount

Chao Yu <chao@kernel.org>
    f2fs: fix to avoid overflow while left shift operation

Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
    Bluetooth: MGMT: Fix possible UAFs

Ye Bin <yebin10@huawei.com>
    ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

Eric Biggers <ebiggers@kernel.org>
    lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN

Ye Bin <yebin10@huawei.com>
    ext4: introduce ITAIL helper

Penglei Jiang <superman.xpt@gmail.com>
    proc: fix the issue of proc_mem_open returning NULL

Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org>
    wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path

Nick Hu <nick.hu@sifive.com>
    irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops

Eduard Zingerman <eddyz87@gmail.com>
    bpf: account for current allocated stack depth in widen_imprecise_scalars()

Eric Dumazet <edumazet@google.com>
    bpf: Add bpf_prog_run_data_pointers()

Dave Jiang <dave.jiang@intel.com>
    acpi/hmat: Fix lockdep warning for hmem_register_resource()

Haein Lee <lhi0729@kaist.ac.kr>
    ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd

Dai Ngo <dai.ngo@oracle.com>
    NFS: Fix LTP test failures when timestamps are delegated

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()

Yang Xiuwei <yangxiuwei@kylinos.cn>
    NFS: sysfs: fix leak when nfs_client kobject add fails

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFSv2/v3: Fix error handling in nfs_atomic_open_v23()

Al Viro <viro@zeniv.linux.org.uk>
    simplify nfs_atomic_open_v23()

Trond Myklebust <trond.myklebust@hammerspace.com>
    pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS

Trond Myklebust <trond.myklebust@hammerspace.com>
    pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()

Shenghao Ding <shenghao-ding@ti.com>
    ASoC: tas2781: fix getting the wrong device number

Ian Forbes <ian.forbes@broadcom.com>
    drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

Haotian Zhang <vulab@iscas.ac.cn>
    ASoC: codecs: va-macro: fix resource leak in probe error path

Haotian Zhang <vulab@iscas.ac.cn>
    ASoC: cs4271: Fix regulator leak on probe failure

Haotian Zhang <vulab@iscas.ac.cn>
    regulator: fixed: fix GPIO descriptor leak on register failure

Shuai Xue <xueshuai@linux.alibaba.com>
    acpi,srat: Fix incorrect device handle check for Generic Initiator

Pauli Virtanen <pav@iki.fi>
    Bluetooth: L2CAP: export l2cap_chan_hold for modules

Gautham R. Shenoy <gautham.shenoy@amd.com>
    ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs

Gautham R. Shenoy <gautham.shenoy@amd.com>
    ACPI: CPPC: Perform fast check switch only for online CPUs

Gautham R. Shenoy <gautham.shenoy@amd.com>
    ACPI: CPPC: Check _CPC validity for only the online CPUs

Gautham R. Shenoy <gautham.shenoy@amd.com>
    ACPI: CPPC: Detect preferred core availability on online CPUs

Felix Maurer <fmaurer@redhat.com>
    hsr: Fix supervision frame sending on HSRv0

Xuan Zhuo <xuanzhuo@linux.alibaba.com>
    virtio-net: fix incorrect flags recording in big mode

Eric Dumazet <edumazet@google.com>
    net_sched: limit try_bulk_dequeue_skb() batches

Gal Pressman <gal@nvidia.com>
    net/mlx5e: Fix potentially misleading debug message

Gal Pressman <gal@nvidia.com>
    net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps

Gal Pressman <gal@nvidia.com>
    net/mlx5e: Fix maxrate wraparound in threshold between units

Ranganath V N <vnranganath.20@gmail.com>
    net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak

Ranganath V N <vnranganath.20@gmail.com>
    net: sched: act_connmark: initialize struct tc_ife to fix kernel leak

Eric Dumazet <edumazet@google.com>
    net_sched: act_connmark: use RCU in tcf_connmark_dump()

Kuniyuki Iwashima <kuniyu@google.com>
    af_unix: Initialise scc_index in unix_add_edge().

Benjamin Berg <benjamin.berg@intel.com>
    wifi: mac80211: skip rate verification for not captured PSDUs

Buday Csaba <buday.csaba@prolan.hu>
    net: mdio: fix resource leak in mdiobus_register_device()

Kuniyuki Iwashima <kuniyu@google.com>
    tipc: Fix use-after-free in tipc_mon_reinit_self().

Aksh Garg <a-garg7@ti.com>
    net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism

Aksh Garg <a-garg7@ti.com>
    net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout

Zilin Guan <zilin@seu.edu.cn>
    net/handshake: Fix memory leak in tls_handshake_accept()

D. Wythe <alibuda@linux.alibaba.com>
    net/smc: fix mismatch between CLC header and proposal

Eric Dumazet <edumazet@google.com>
    sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto

Pauli Virtanen <pav@iki.fi>
    Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions

Pauli Virtanen <pav@iki.fi>
    Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion

Pauli Virtanen <pav@iki.fi>
    Bluetooth: 6lowpan: reset link-local header on ipv6 recv path

Raphael Pinsonneault-Thibeault <rpthibeault@gmail.com>
    Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF

Pauli Virtanen <pav@iki.fi>
    Bluetooth: MGMT: cancel mesh send timer when hdev removed

Chuck Lever <chuck.lever@oracle.com>
    NFSD: Skip close replay processing if XDR encoding fails

Xi Ruoyao <xry111@xry111.site>
    rust: Add -fno-isolate-erroneous-paths-dereference to bindgen_skip_c_flags

Horatiu Vultur <horatiu.vultur@microchip.com>
    net: phy: micrel: lan8814 fix reset of the QSGMII interface

Horatiu Vultur <horatiu.vultur@microchip.com>
    net: phy: micrel: Replace hardcoded pages with defines

Horatiu Vultur <horatiu.vultur@microchip.com>
    net: phy: micrel: Introduce lanphy_modify_page_reg

Wei Fang <wei.fang@nxp.com>
    net: fec: correct rx_bytes statistic for the case SHIFT16 is set

Alexander Sverdlin <alexander.sverdlin@siemens.com>
    selftests: net: local_termination: Wait for interfaces to come up

Gao Xiang <xiang@kernel.org>
    erofs: avoid infinite loop due to incomplete zstd-compressed data

Nicolas Escande <nico.escande@gmail.com>
    wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()

Sharique Mohammad <sharq0406@gmail.com>
    ASoC: max98090/91: fixed max98091 ALSA widget powering up/down

Stuart Hayhurst <stuart.a.hayhurst@gmail.com>
    HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL

ZhangGuoDong <zhangguodong@kylinos.cn>
    smb/server: fix possible refcount leak in smb2_sess_setup()

ZhangGuoDong <zhangguodong@kylinos.cn>
    smb/server: fix possible memory leak in smb2_read()

Jaehun Gou <p22gone@gmail.com>
    exfat: fix improper check of dentry.stream.valid_size

Oleg Makarenko <oleg@makarenk.ooo>
    HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel

Scott Mayhew <smayhew@redhat.com>
    NFS: check if suid/sgid was cleared after a write as needed

Vicki Pfau <vi@endrift.com>
    HID: nintendo: Wait longer for initial probe

Tristan Lobb <tristan.lobb@it-lobb.de>
    HID: quirks: avoid Cooler Master MM712 dongle wakeup bug

Joshua Watt <jpewhacker@gmail.com>
    NFS4: Apply delay_retrans to async operations

Joshua Watt <jpewhacker@gmail.com>
    NFS4: Fix state renewals missing after boot

Jesse.Zhang <Jesse.Zhang@amd.com>
    drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices

Christian König <christian.koenig@amd.com>
    drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM

Timur Kristóf <timur.kristof@gmail.com>
    drm/amd/pm: Disable MCLK switching on SI at high pixel clocks

Christian König <christian.koenig@amd.com>
    drm/amdgpu: remove two invalid BUG_ON()s

Han Gao <rabenda.cn@gmail.com>
    riscv: acpi: avoid errors caused by probing DT devices when ACPI is used

Danil Skrebenkov <danil.skrebenkov@cloudbear.ru>
    RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors

Feng Jiang <jiangfeng@kylinos.cn>
    riscv: Build loader.bin exclusively for Canaan K210

Peter Zijlstra <peterz@infradead.org>
    compiler_types: Move unused static inline functions warning to W=2

Yang Shi <yang@os.amperecomputing.com>
    arm64: kprobes: check the return value of set_memory_rox()

Jouni Högander <jouni.hogander@intel.com>
    drm/xe: Do clean shutdown also when using flr

Tejas Upadhyay <tejas.upadhyay@intel.com>
    drm/xe: Move declarations under conditional branch

Balasubramani Vivekanandan <balasubramani.vivekanandan@intel.com>
    drm/xe/guc: Synchronize Dead CT worker with unbind

Mario Limonciello <mario.limonciello@amd.com>
    drm/amd: Fix suspend failure with secure display TA

Jason Gunthorpe <jgg@ziepe.ca>
    iommufd: Make vfio_compat's unmap succeed if the range is already empty

Shuhao Fu <sfual@cse.ust.hk>
    smb: client: fix refcount leak in smb2_set_path_attr

Umesh Nerlige Ramappa <umesh.nerlige.ramappa@intel.com>
    drm/i915: Fix conversion between clock ticks and nanoseconds

Janusz Krzysztofik <janusz.krzysztofik@linux.intel.com>
    drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD

Jason-JH Lin <jason-jh.lin@mediatek.com>
    drm/mediatek: Add pm_runtime support for GCE power control


-------------

Diffstat:

 Makefile                                           |   4 +-
 .../boot/dts/broadcom/bcm47189-luxul-xap-1440.dts  |   4 +-
 arch/arm/boot/dts/nxp/imx/imx51-zii-rdu1.dts       |   4 +-
 arch/arm/crypto/Kconfig                            |   2 +-
 arch/arm64/boot/dts/rockchip/rk3568-odroid-m1.dts  |   2 +
 arch/arm64/boot/dts/rockchip/rk3588-opp.dtsi       |   2 +-
 arch/arm64/boot/dts/rockchip/rk3588j.dtsi          |   2 +-
 arch/arm64/kernel/probes/kprobes.c                 |   5 +-
 arch/loongarch/include/asm/hw_breakpoint.h         |   4 +-
 arch/loongarch/include/asm/pgtable.h               |  11 +-
 arch/loongarch/kernel/traps.c                      |   4 +-
 arch/loongarch/kvm/timer.c                         |   2 +
 arch/loongarch/kvm/vcpu.c                          |   5 +
 arch/riscv/Makefile                                |   2 +-
 arch/riscv/kernel/cpu-hotplug.c                    |   1 +
 arch/riscv/kernel/setup.c                          |   7 +-
 arch/x86/kernel/acpi/cppc.c                        |   2 +-
 arch/x86/kernel/cpu/microcode/amd.c                |   1 +
 arch/x86/kvm/svm/svm.c                             |   4 +
 arch/x86/kvm/vmx/common.h                          |  34 ++
 arch/x86/kvm/vmx/vmx.c                             |  25 +-
 drivers/acpi/cppc_acpi.c                           |   6 +-
 drivers/acpi/numa/hmat.c                           |  46 +-
 drivers/acpi/numa/srat.c                           |   2 +-
 drivers/bluetooth/btusb.c                          |  13 +-
 drivers/crypto/hisilicon/qm.c                      |   2 +
 drivers/edac/altera_edac.c                         |  22 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c             |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c        |  12 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c            |   7 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c            |   5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c           |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c       |   3 +
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |   2 -
 drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c             |   2 -
 drivers/gpu/drm/amd/amdkfd/kfd_queue.c             |  12 +-
 drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c         |   5 +
 drivers/gpu/drm/i915/gt/intel_gt_clock_utils.c     |   4 +-
 drivers/gpu/drm/i915/i915_vma.c                    |  16 +-
 drivers/gpu/drm/mediatek/mtk_crtc.c                |   7 +
 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c            |   5 +
 drivers/gpu/drm/xe/xe_device.c                     |  14 +-
 drivers/gpu/drm/xe/xe_guc_ct.c                     |   3 +
 drivers/hid/hid-ids.h                              |   4 +
 drivers/hid/hid-logitech-hidpp.c                   |  21 +
 drivers/hid/hid-nintendo.c                         |   2 +-
 drivers/hid/hid-ntrig.c                            |   7 +-
 drivers/hid/hid-playstation.c                      |   2 +
 drivers/hid/hid-quirks.c                           |   2 +
 drivers/hid/hid-uclogic-params.c                   |   4 +-
 drivers/iommu/iommufd/io_pagetable.c               |  12 +-
 drivers/iommu/iommufd/ioas.c                       |   4 +
 drivers/irqchip/irq-riscv-intc.c                   |   3 +-
 drivers/isdn/hardware/mISDN/hfcsusb.c              |  18 +-
 drivers/mmc/host/dw_mmc-rockchip.c                 |   4 +-
 drivers/mmc/host/sdhci-of-dwcmshc.c                |   2 +-
 drivers/mtd/nand/onenand/onenand_samsung.c         |   2 +-
 drivers/net/dsa/sja1105/sja1105_static_config.c    |   6 +-
 drivers/net/ethernet/freescale/fec_main.c          |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c |  33 +-
 drivers/net/ethernet/ti/am65-cpsw-qos.c            |  53 ++-
 drivers/net/phy/mdio_bus.c                         |   5 +-
 drivers/net/phy/micrel.c                           | 515 +++++++++++++--------
 drivers/net/virtio_net.c                           |  16 +-
 drivers/net/wireless/ath/ath11k/pci.c              |   2 +
 drivers/net/wireless/ath/ath11k/wmi.c              |   3 +
 drivers/pmdomain/arm/scmi_pm_domain.c              |  13 +-
 drivers/pmdomain/imx/gpc.c                         |   2 +
 drivers/pmdomain/samsung/exynos-pm-domains.c       |  11 +-
 drivers/regulator/fixed.c                          |   1 +
 drivers/spi/spi.c                                  |  10 +
 drivers/uio/uio_hv_generic.c                       |  32 +-
 fs/btrfs/inode.c                                   |   4 +-
 fs/btrfs/scrub.c                                   |   2 +
 fs/btrfs/tree-log.c                                |   2 +-
 fs/btrfs/zoned.c                                   |   4 +-
 fs/erofs/decompressor_zstd.c                       |  11 +-
 fs/exfat/namei.c                                   |   6 +-
 fs/ext4/inode.c                                    |   5 +
 fs/ext4/xattr.c                                    |  32 +-
 fs/ext4/xattr.h                                    |  10 +
 fs/f2fs/compress.c                                 |   2 +-
 fs/fuse/virtio_fs.c                                |   2 +-
 fs/hostfs/hostfs_kern.c                            |  29 +-
 fs/namespace.c                                     |  32 +-
 fs/nfs/dir.c                                       |  23 +-
 fs/nfs/inode.c                                     |  18 +-
 fs/nfs/nfs3client.c                                |  14 +-
 fs/nfs/nfs4client.c                                |  15 +-
 fs/nfs/nfs4proc.c                                  |  22 +-
 fs/nfs/pnfs_nfs.c                                  |  34 +-
 fs/nfs/sysfs.c                                     |   1 +
 fs/nfs/write.c                                     |   3 +-
 fs/nfsd/nfs4state.c                                |   3 +-
 fs/nfsd/nfs4xdr.c                                  |   3 +-
 fs/nfsd/nfsd.h                                     |   1 +
 fs/nfsd/nfsfh.c                                    |   6 +-
 fs/nilfs2/segment.c                                |   7 +-
 fs/proc/base.c                                     |  12 +-
 fs/proc/generic.c                                  |  12 +-
 fs/proc/task_mmu.c                                 |   8 +-
 fs/proc/task_nommu.c                               |   4 +-
 fs/smb/client/fs_context.c                         |   2 +
 fs/smb/client/smb2inode.c                          |   2 +
 fs/smb/client/transport.c                          |   2 +-
 fs/smb/server/smb2pdu.c                            |   2 +
 fs/smb/server/transport_tcp.c                      |   5 +-
 include/linux/compiler_types.h                     |   5 +-
 include/linux/filter.h                             |  20 +
 include/linux/huge_mm.h                            |  21 +-
 include/linux/kvm_host.h                           |   7 +-
 include/linux/map_benchmark.h                      |   1 +
 include/linux/netpoll.h                            |   1 +
 include/linux/nfs_xdr.h                            |   1 +
 include/net/bluetooth/mgmt.h                       |   2 +-
 include/net/cfg80211.h                             |  78 ++++
 include/net/tc_act/tc_connmark.h                   |   1 +
 include/uapi/linux/mount.h                         |   2 +-
 io_uring/napi.c                                    |  19 +-
 kernel/bpf/trampoline.c                            |   5 -
 kernel/bpf/verifier.c                              |   6 +-
 kernel/crash_core.c                                |   2 +-
 kernel/gcov/gcc_4_7.c                              |   4 +-
 kernel/power/swap.c                                |  17 +-
 kernel/sched/ext.c                                 |   4 +-
 kernel/trace/ftrace.c                              |  20 +-
 mm/filemap.c                                       |  20 +-
 mm/huge_memory.c                                   |  32 +-
 mm/ksm.c                                           | 113 ++++-
 mm/memory.c                                        |  23 +-
 mm/mm_init.c                                       |   2 +-
 mm/percpu.c                                        |   8 +-
 mm/secretmem.c                                     |   2 +-
 mm/shmem.c                                         |   9 +-
 mm/slub.c                                          |   6 +-
 mm/truncate.c                                      |  27 +-
 net/bluetooth/6lowpan.c                            | 103 +++--
 net/bluetooth/l2cap_core.c                         |   1 +
 net/bluetooth/mgmt.c                               | 260 ++++++++---
 net/bluetooth/mgmt_util.c                          |  46 ++
 net/bluetooth/mgmt_util.h                          |   3 +
 net/core/netpoll.c                                 |  56 ++-
 net/handshake/tlshd.c                              |   1 +
 net/hsr/hsr_device.c                               |   3 +
 net/ipv4/route.c                                   |   5 +
 net/mac80211/chan.c                                |   2 +-
 net/mac80211/ieee80211_i.h                         |   4 +-
 net/mac80211/iface.c                               |  14 +-
 net/mac80211/link.c                                |   4 +-
 net/mac80211/mlme.c                                |  18 +-
 net/mac80211/rx.c                                  |  10 +-
 net/mptcp/protocol.c                               |  36 +-
 net/netfilter/nf_tables_api.c                      |  66 ++-
 net/sched/act_bpf.c                                |   6 +-
 net/sched/act_connmark.c                           |  30 +-
 net/sched/act_ife.c                                |  12 +-
 net/sched/cls_bpf.c                                |   6 +-
 net/sched/sch_generic.c                            |  17 +-
 net/sctp/transport.c                               |  13 +-
 net/smc/smc_clc.c                                  |   1 +
 net/strparser/strparser.c                          |   2 +-
 net/tipc/net.c                                     |   2 +
 net/unix/garbage.c                                 |  14 +-
 net/wireless/core.c                                |  56 +++
 net/wireless/trace.h                               |  21 +
 rust/Makefile                                      |  16 +-
 sound/pci/hda/hda_component.c                      |   4 +
 sound/soc/codecs/cs4271.c                          |  10 +-
 sound/soc/codecs/lpass-va-macro.c                  |   2 +-
 sound/soc/codecs/max98090.c                        |   6 +-
 sound/soc/codecs/tas2781-i2c.c                     |   9 +-
 sound/usb/endpoint.c                               |   5 +
 sound/usb/mixer.c                                  |   2 +
 .../ftrace/test.d/filter/event-filter-function.tc  |   4 +
 tools/testing/selftests/iommu/iommufd.c            |   2 +
 .../selftests/net/forwarding/local_termination.sh  |   2 +
 tools/testing/selftests/net/mptcp/mptcp_connect.c  |  18 +-
 tools/testing/selftests/net/mptcp/mptcp_connect.sh |   2 +-
 tools/testing/selftests/net/mptcp/mptcp_join.sh    |  90 ++--
 tools/testing/selftests/net/mptcp/mptcp_lib.sh     |  21 +
 tools/testing/selftests/user_events/perf_test.c    |   2 +-
 virt/kvm/guest_memfd.c                             |  89 ++--
 182 files changed, 2094 insertions(+), 912 deletions(-)

[PATCH 6.12 172/185] io_uring/napi: fix io_napi_entry RCU accesses

[Greg Kroah-Hartman]

6.12-stable review patch.  If anyone has any objections, please let me know.

------------------

From: Olivier Langlois <olivier@trillion01.com>

[Upstream commit 45b3941d09d13b3503309be1f023b83deaf69b4d ]

correct 3 RCU structures modifications that were not using the RCU
functions to make their update.

Cc: Jens Axboe <axboe@kernel.dk>
Cc: Pavel Begunkov <asml.silence@gmail.com>
Cc: io-uring@vger.kernel.org
Cc: linux-kernel@vger.kernel.org
Cc: lvc-project@linuxtesting.org
Signed-off-by: Olivier Langlois <olivier@trillion01.com>
Link: https://lore.kernel.org/r/9f53b5169afa8c7bf3665a0b19dc2f7061173530.1728828877.git.olivier@trillion01.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
[Stepan Artuhov: cherry-picked a commit]
Signed-off-by: Stepan Artuhov <s.artuhov@tssltd.ru>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
 io_uring/napi.c |   19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

--- a/io_uring/napi.c
+++ b/io_uring/napi.c
@@ -81,19 +81,24 @@ void __io_napi_add(struct io_ring_ctx *c
 	}
 
 	hlist_add_tail_rcu(&e->node, hash_list);
-	list_add_tail(&e->list, &ctx->napi_list);
+	list_add_tail_rcu(&e->list, &ctx->napi_list);
 	spin_unlock(&ctx->napi_lock);
 }
 
 static void __io_napi_remove_stale(struct io_ring_ctx *ctx)
 {
 	struct io_napi_entry *e;
-	unsigned int i;
 
 	spin_lock(&ctx->napi_lock);
-	hash_for_each(ctx->napi_ht, i, e, node) {
-		if (time_after(jiffies, e->timeout)) {
-			list_del(&e->list);
+	/*
+	 * list_for_each_entry_safe() is not required as long as:
+	 * 1. list_del_rcu() does not reset the deleted node next pointer
+	 * 2. kfree_rcu() delays the memory freeing until the next quiescent
+	 *    state
+	 */
+	list_for_each_entry(e, &ctx->napi_list, list) {
+		if (time_after(jiffies, READ_ONCE(e->timeout))) {
+			list_del_rcu(&e->list);
 			hash_del_rcu(&e->node);
 			kfree_rcu(e, rcu);
 		}
@@ -204,13 +209,13 @@ void io_napi_init(struct io_ring_ctx *ct
 void io_napi_free(struct io_ring_ctx *ctx)
 {
 	struct io_napi_entry *e;
-	unsigned int i;
 
 	spin_lock(&ctx->napi_lock);
-	hash_for_each(ctx->napi_ht, i, e, node) {
+	list_for_each_entry(e, &ctx->napi_list, list) {
 		hash_del_rcu(&e->node);
 		kfree_rcu(e, rcu);
 	}
+	INIT_LIST_HEAD_RCU(&ctx->napi_list);
 	spin_unlock(&ctx->napi_lock);
 }
 

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Pavel Machek]

[-- Attachment #1: Type: text/plain, Size: 746 bytes --]

Hi!

> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.

I have successful test result, but I am not sure it matches the
release. Please quote git hashes to make this easier.

https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/pipelines/2170546623

Linux 6.12.59-rc1 (bba98f3faf27)
Passed
 cip-ci created pipeline for commit eac30293  19 hours ago, finished 18 hours ago

Best regards,
								Pavel
-- 
In cooperation with DENX Software Engineering GmbH, HRB 165235 Munich,
Office: Kirchenstr.5, D-82194 Groebenzell, Germany

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Jon Hunter]

On Fri, 21 Nov 2025 14:10:27 +0100, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Sun, 23 Nov 2025 13:01:08 +0000.
> Anything received after that time might be too late.
> 
> The whole patch series can be found in one patch at:
> 	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.59-rc1.gz
> or in the git tree and branch at:
> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
> and the diffstat can be found below.
> 
> thanks,
> 
> greg k-h

All tests passing for Tegra ...

Test results for stable-v6.12:
    10 builds:	10 pass, 0 fail
    28 boots:	28 pass, 0 fail
    120 tests:	120 pass, 0 fail

Linux version:	6.12.59-rc1-g92f6b4140c17
Boards tested:	tegra124-jetson-tk1, tegra186-p2771-0000,
                tegra186-p3509-0000+p3636-0001, tegra194-p2972-0000,
                tegra194-p3509-0000+p3668-0000, tegra20-ventana,
                tegra210-p2371-2180, tegra210-p3450-0000,
                tegra30-cardhu-a04

Tested-by: Jon Hunter <jonathanh@nvidia.com>

Jon

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Brett Mastbergen]

On Fri, Nov 21, 2025 at 8:32 AM Greg Kroah-Hartman
<gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sun, 23 Nov 2025 13:01:08 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
>         https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.59-rc1.gz
> or in the git tree and branch at:
>         git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
>

Builds successfully.  Boots and works on qemu and Dell XPS 15 9520 w/
Intel Core i7-12600H

Tested-by: Brett Mastbergen <bmastbergen@ciq.com>

Thanks,
Brett

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Florian Fainelli]

On 11/21/25 05:10, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Sun, 23 Nov 2025 13:01:08 +0000.
> Anything received after that time might be too late.
> 
> The whole patch series can be found in one patch at:
> 	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.59-rc1.gz
> or in the git tree and branch at:
> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
> and the diffstat can be found below.
> 
> thanks,
> 
> greg k-h

On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on 
BMIPS_GENERIC:

Tested-by: Florian Fainelli <florian.fainelli@broadcom.com>
-- 
Florian

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Naresh Kamboju]

On Fri, 21 Nov 2025 at 18:56, Greg Kroah-Hartman
<gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sun, 23 Nov 2025 13:01:08 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
>         https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.59-rc1.gz
> or in the git tree and branch at:
>         git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h

The LTP syscalls listmount04 failures noticed across the 6.18.0-rc6,
Linux next-20251120, stable-rc 6.17.9-rc1, 6.17.9-rc2 and 6.12.59-rc1.

First seen on 6.12.59-rc1
Good: v6.12.56
Bad: 6.12.59-rc1

Regression Analysis:
- New regression? yes
- Reproducibility? yes

Test regression: listmount04.c:128: TFAIL: invalid mnt_id_req.spare
expected EINVAL: EBADF (9)

Reported-by: Linux Kernel Functional Testing <lkft@linaro.org>

## Test log,
<8>[  467.451816] <LAVA_SIGNAL_STARTTC listmount04>
tst_buffers.c:57: TINFO: Test is using guarded buffers
tst_test.c:2021: TINFO: LTP version: 20250930
tst_test.c:2024: TINFO: Tested kernel: 6.17.9-rc1 #1 SMP PREEMPT
@1763732790 aarch64
tst_kconfig.c:88: TINFO: Parsing kernel config '/proc/config.gz'
tst_kconfig.c:676: TINFO: CONFIG_TRACE_IRQFLAGS kernel option detected
which might slow the execution
tst_test.c:1842: TINFO: Overall timeout per run is 0h 21m 36s
listmount04.c:128: TPASS: request points to unaccessible memory : EFAULT (14)
listmount04.c:128: TPASS: mnt_ids points to unaccessible memory : EFAULT (14)
listmount04.c:128: TPASS: invalid flags : EINVAL (22)
listmount04.c:128: TPASS: insufficient mnt_id_req.size : EINVAL (22)
listmount04.c:128: TFAIL: invalid mnt_id_req.spare expected EINVAL: EBADF (9)
listmount04.c:128: TPASS: invalid mnt_id_req.param : EINVAL (22)
listmount04.c:128: TPASS: invalid mnt_id_req.mnt_id : EINVAL (22)
listmount04.c:128: TPASS: non-existant mnt_id : ENOENT (2)

Summary:
passed   7
failed   1
broken   0
skipped  0
warnings 0

## Build
* kernel: 6.12.59-rc1
* git: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
* git commit: 92f6b4140c17182e28e19312fce7c6ee90cd3077
* git describe: v6.12.56-790-g92f6b4140c17
* test details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.12.y/build/v6.12.56-790-g92f6b4140c17


## Test
* Test details:
https://regressions.linaro.org/lkft/linux-stable-rc-linux-6.12.y/v6.12.56-790-g92f6b4140c17/ltp-syscalls/listmount04/
* Test log: https://lkft.validation.linaro.org/scheduler/job/8532397#L26259
* Test plan: https://tuxapi.tuxsuite.com/v1/groups/linaro/projects/lkft/tests/35n4IGltUEJH9dNtMu47XsPdqo4
* Build link: https://storage.tuxsuite.com/public/linaro/lkft/builds/35n4GHe84Of9RjprzsxRkq6NEho/
* Kernel config:
https://storage.tuxsuite.com/public/linaro/lkft/builds/35n4GHe84Of9RjprzsxRkq6NEho/config

--
Linaro LKFT
https://lkft.linaro.org

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Brett A C Sheffield]

# Librecast Test Results

020/020 [ OK ] liblcrq
010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast

CPU/kernel: Linux auntie 6.12.59-rc1-g92f6b4140c17 #131 SMP PREEMPT_DYNAMIC Sat Nov 22 05:46:45 -00 2025 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux

Tested-by: Brett A C Sheffield <bacs@librecast.net>

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Greg Kroah-Hartman]

On Sat, Nov 22, 2025 at 10:16:09AM +0530, Naresh Kamboju wrote:
> On Fri, 21 Nov 2025 at 18:56, Greg Kroah-Hartman
> <gregkh@linuxfoundation.org> wrote:
> >
> > This is the start of the stable review cycle for the 6.12.59 release.
> > There are 185 patches in this series, all will be posted as a response
> > to this one.  If anyone has any issues with these being applied, please
> > let me know.
> >
> > Responses should be made by Sun, 23 Nov 2025 13:01:08 +0000.
> > Anything received after that time might be too late.
> >
> > The whole patch series can be found in one patch at:
> >         https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.59-rc1.gz
> > or in the git tree and branch at:
> >         git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
> > and the diffstat can be found below.
> >
> > thanks,
> >
> > greg k-h
> 
> The LTP syscalls listmount04 failures noticed across the 6.18.0-rc6,

So this is upstream, has it been bisected and reported there?

thanks,

greg k-h

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Pavel Machek]

[-- Attachment #1: Type: text/plain, Size: 643 bytes --]

Hi!

> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.

CIP testing did not find any problems here:

https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/tree/linux-6.12.y

Tested-by: Pavel Machek (CIP) <pavel@denx.de>

Best regards,
                                                                Pavel
-- 
In cooperation with DENX Software Engineering GmbH, HRB 165235 Munich,
Office: Kirchenstr.5, D-82194 Groebenzell, Germany

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Peter Schneider]

Am 21.11.2025 um 14:10 schrieb Greg Kroah-Hartman:
> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.

Builds, boots and works on my 2-socket Ivy Bridge Xeon E5-2697 v2 server. No dmesg oddities or regressions found.

Tested-by: Peter Schneider <pschneider1968@googlemail.com>


Beste Grüße,
Peter Schneider

-- 
Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you.                    -- David McCullough Jr.

OpenPGP:  0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@googlemail.com
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@gmail.com

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Jeffrin Thalakkottoor]

hello

Compiled and booted  6.12.59-rc1+

No new regressions   from dmesg.

As per dmidecode command.
Version: AMD Ryzen 3 3250U with Radeon Graphics

Processor Information
        Socket Designation: FP5
        Type: Central Processor
        Family: Zen
        Manufacturer: Advanced Micro Devices, Inc.
        ID: 81 0F 81 00 FF FB 8B 17
        Signature: Family 23, Model 24, Stepping 1

Tested-by: Jeffrin Jose T <jeffrin@rajagiritech.edu.in>

--
software engineer
rajagiri school of engineering and technology

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Ron Economos]

On 11/21/25 05:10, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sun, 23 Nov 2025 13:01:08 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> 	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.59-rc1.gz
> or in the git tree and branch at:
> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h

Built and booted successfully on RISC-V RV64 (HiFive Unmatched).

Tested-by: Ron Economos <re@w6rz.net>

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Miguel Ojeda]

On Fri, 21 Nov 2025 14:10:27 +0100 Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Sun, 23 Nov 2025 13:01:08 +0000.
> Anything received after that time might be too late.

Boot-tested under QEMU for Rust x86_64, arm64 and riscv64; built-tested
for loongarch64:

Tested-by: Miguel Ojeda <ojeda@kernel.org>

Thanks!

Cheers,
Miguel

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Mark Brown]

[-- Attachment #1: Type: text/plain, Size: 2972 bytes --]

On Fri, Nov 21, 2025 at 02:10:27PM +0100, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.

I'm seeing the same regression Naresh is in LTP listmount04, bisected to

[c5d44c8b2ed1fd6761bf9157d2c5b887a4dc78cf] fs/namespace: correctly handle errors returned by grab_requested_mnt_ns

# bad: [92f6b4140c17182e28e19312fce7c6ee90cd3077] Linux 6.12.59-rc1
# good: [7475d784169c7df48b0c55525fb862e06674d63c] Linux 6.12.58
git bisect start '92f6b4140c17182e28e19312fce7c6ee90cd3077' '7475d784169c7df48b0c55525fb862e06674d63c'
# test job: [92f6b4140c17182e28e19312fce7c6ee90cd3077] https://lava.sirena.org.uk/scheduler/job/2121934
# bad: [92f6b4140c17182e28e19312fce7c6ee90cd3077] Linux 6.12.59-rc1
git bisect bad 92f6b4140c17182e28e19312fce7c6ee90cd3077
# test job: [c16418189c97fd90c46b3b00d7d7224711d49e42] https://lava.sirena.org.uk/scheduler/job/2123608
# good: [c16418189c97fd90c46b3b00d7d7224711d49e42] mtd: onenand: Pass correct pointer to IRQ handler
git bisect good c16418189c97fd90c46b3b00d7d7224711d49e42
# test job: [9c7df79d445495aeb1ea7fae6bd5e6beb5a86ea2] https://lava.sirena.org.uk/scheduler/job/2124517
# bad: [9c7df79d445495aeb1ea7fae6bd5e6beb5a86ea2] LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY
git bisect bad 9c7df79d445495aeb1ea7fae6bd5e6beb5a86ea2
# test job: [4e681269759ae153055fbcffeadd611a7b15df84] https://lava.sirena.org.uk/scheduler/job/2124890
# bad: [4e681269759ae153055fbcffeadd611a7b15df84] strparser: Fix signed/unsigned mismatch bug
git bisect bad 4e681269759ae153055fbcffeadd611a7b15df84
# test job: [fb4fd3fb2f254aa4ce76f70e3f3a2e1fa5dd9031] https://lava.sirena.org.uk/scheduler/job/2125058
# bad: [fb4fd3fb2f254aa4ce76f70e3f3a2e1fa5dd9031] HID: playstation: Fix memory leak in dualshock4_get_calibration_data()
git bisect bad fb4fd3fb2f254aa4ce76f70e3f3a2e1fa5dd9031
# test job: [ec7a798f14ae4058e88ebe088e89ded5fe17e312] https://lava.sirena.org.uk/scheduler/job/2125258
# bad: [ec7a798f14ae4058e88ebe088e89ded5fe17e312] netfilter: nf_tables: reject duplicate device on updates
git bisect bad ec7a798f14ae4058e88ebe088e89ded5fe17e312
# test job: [c5d44c8b2ed1fd6761bf9157d2c5b887a4dc78cf] https://lava.sirena.org.uk/scheduler/job/2125373
# bad: [c5d44c8b2ed1fd6761bf9157d2c5b887a4dc78cf] fs/namespace: correctly handle errors returned by grab_requested_mnt_ns
git bisect bad c5d44c8b2ed1fd6761bf9157d2c5b887a4dc78cf
# test job: [652ab7b107fd7121b28113d0e3ba63b7821ee36e] https://lava.sirena.org.uk/scheduler/job/2125457
# good: [652ab7b107fd7121b28113d0e3ba63b7821ee36e] virtio-fs: fix incorrect check for fsvq->kobj
git bisect good 652ab7b107fd7121b28113d0e3ba63b7821ee36e
# first bad commit: [c5d44c8b2ed1fd6761bf9157d2c5b887a4dc78cf] fs/namespace: correctly handle errors returned by grab_requested_mnt_ns

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Pavel Machek]

[-- Attachment #1: Type: text/plain, Size: 968 bytes --]

On Fri 2025-11-21 14:10:27, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.12.59 release.
> There are 185 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.


> Takashi Iwai <tiwai@suse.de>
>     ALSA: usb-audio: Fix potential overflow of PCM transfer buffer

This one is wrong for at least 6.12 and older.

+       if (ep->packsize[1] > ep->maxpacksize) {
+               usb_audio_dbg(chip, "Too small maxpacksize %u for rate %u / pps %u\n",
+                             ep->maxpacksize, ep->cur_rate, ep->pps);
+               return -EINVAL;
+       }
 
Needs to be err = -EINVAL; goto unlock;.

(Or cherry pick guard() handling from newer kernels).

Best regards,
								Pavel
-- 
In cooperation with DENX Software Engineering GmbH, HRB 165235 Munich,
Office: Kirchenstr.5, D-82194 Groebenzell, Germany

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Takashi Iwai]

On Tue, 25 Nov 2025 14:20:31 +0100,
Pavel Machek wrote:
> 
> On Fri 2025-11-21 14:10:27, Greg Kroah-Hartman wrote:
> > This is the start of the stable review cycle for the 6.12.59 release.
> > There are 185 patches in this series, all will be posted as a response
> > to this one.  If anyone has any issues with these being applied, please
> > let me know.
> 
> 
> > Takashi Iwai <tiwai@suse.de>
> >     ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
> 
> This one is wrong for at least 6.12 and older.
> 
> +       if (ep->packsize[1] > ep->maxpacksize) {
> +               usb_audio_dbg(chip, "Too small maxpacksize %u for rate %u / pps %u\n",
> +                             ep->maxpacksize, ep->cur_rate, ep->pps);
> +               return -EINVAL;
> +       }
>  
> Needs to be err = -EINVAL; goto unlock;.
> 
> (Or cherry pick guard() handling from newer kernels).

Thanks Pavel, a good catch!

A cherry-pick of the commit efea7a57370b for converting to guard()
doesn't seem to be cleanly applicable on 6.12.y, unfortunately.
So I guess it'd be easier to have a correction on the top instead,
something like below.


Takashi

-- 8< --
From: Takashi Iwai <tiwai@suse.de>
Subject: [PATCH v6.12.y] ALSA: usb-audio: Fix missing unlock at error path of
 maxpacksize check

The recent backport of the upstream commit 05a1fc5efdd8 ("ALSA:
usb-audio: Fix potential overflow of PCM transfer buffer") on the
older stable kernels like 6.12.y was broken since it doesn't consider
the mutex unlock, where the upstream code manages with guard().
In the older code, we still need an explicit unlock.

This is a fix that corrects the error path, applied only on old stable
trees.

Reported-by: Pavel Machek <pavel@denx.de>
Closes: https://lore.kernel.org/aSWtH0AZH5+aeb+a@duo.ucw.cz
Fixes: 98e9d5e33bda ("ALSA: usb-audio: Fix potential overflow of PCM transfer buffer")
Signed-off-by: Takashi Iwai <tiwai@suse.de>
---
 sound/usb/endpoint.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sound/usb/endpoint.c b/sound/usb/endpoint.c
index 7238f65cbcff..aa201e4744bf 100644
--- a/sound/usb/endpoint.c
+++ b/sound/usb/endpoint.c
@@ -1389,7 +1389,8 @@ int snd_usb_endpoint_set_params(struct snd_usb_audio *chip,
 	if (ep->packsize[1] > ep->maxpacksize) {
 		usb_audio_dbg(chip, "Too small maxpacksize %u for rate %u / pps %u\n",
 			      ep->maxpacksize, ep->cur_rate, ep->pps);
-		return -EINVAL;
+		err = -EINVAL;
+		goto unlock;
 	}
 
 	/* calculate the frequency in 16.16 format */
-- 
2.52.0

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Pavel Machek]

[-- Attachment #1: Type: text/plain, Size: 1926 bytes --]

Hi!

> > > Takashi Iwai <tiwai@suse.de>
> > >     ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
> > 
> > This one is wrong for at least 6.12 and older.
> > 
> > +       if (ep->packsize[1] > ep->maxpacksize) {
> > +               usb_audio_dbg(chip, "Too small maxpacksize %u for rate %u / pps %u\n",
> > +                             ep->maxpacksize, ep->cur_rate, ep->pps);
> > +               return -EINVAL;
> > +       }
> >  
> > Needs to be err = -EINVAL; goto unlock;.
> > 
> > (Or cherry pick guard() handling from newer kernels).
> 
> Thanks Pavel, a good catch!
> 
> A cherry-pick of the commit efea7a57370b for converting to guard()
> doesn't seem to be cleanly applicable on 6.12.y, unfortunately.
> So I guess it'd be easier to have a correction on the top instead,
> something like below.

Yes, works for me, thanks for handling this.

> -- 8< --
> From: Takashi Iwai <tiwai@suse.de>
> Subject: [PATCH v6.12.y] ALSA: usb-audio: Fix missing unlock at error path of
>  maxpacksize check
> 
> The recent backport of the upstream commit 05a1fc5efdd8 ("ALSA:
> usb-audio: Fix potential overflow of PCM transfer buffer") on the
> older stable kernels like 6.12.y was broken since it doesn't consider
> the mutex unlock, where the upstream code manages with guard().
> In the older code, we still need an explicit unlock.
> 
> This is a fix that corrects the error path, applied only on old stable
> trees.
> 
> Reported-by: Pavel Machek <pavel@denx.de>
> Closes: https://lore.kernel.org/aSWtH0AZH5+aeb+a@duo.ucw.cz
> Fixes: 98e9d5e33bda ("ALSA: usb-audio: Fix potential overflow of PCM transfer buffer")
> Signed-off-by: Takashi Iwai <tiwai@suse.de>

Reviewed-by: Pavel Machek <pavel@denx.de>

Best regards,
								Pavel
-- 
In cooperation with DENX Software Engineering GmbH, HRB 165235 Munich,
Office: Kirchenstr.5, D-82194 Groebenzell, Germany

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

Re: [PATCH 6.12 000/185] 6.12.59-rc1 review

[Takashi Iwai]

On Wed, 26 Nov 2025 11:01:19 +0100,
Pavel Machek wrote:
> 
> Hi!
> 
> > > > Takashi Iwai <tiwai@suse.de>
> > > >     ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
> > > 
> > > This one is wrong for at least 6.12 and older.
> > > 
> > > +       if (ep->packsize[1] > ep->maxpacksize) {
> > > +               usb_audio_dbg(chip, "Too small maxpacksize %u for rate %u / pps %u\n",
> > > +                             ep->maxpacksize, ep->cur_rate, ep->pps);
> > > +               return -EINVAL;
> > > +       }
> > >  
> > > Needs to be err = -EINVAL; goto unlock;.
> > > 
> > > (Or cherry pick guard() handling from newer kernels).
> > 
> > Thanks Pavel, a good catch!
> > 
> > A cherry-pick of the commit efea7a57370b for converting to guard()
> > doesn't seem to be cleanly applicable on 6.12.y, unfortunately.
> > So I guess it'd be easier to have a correction on the top instead,
> > something like below.
> 
> Yes, works for me, thanks for handling this.
> 
> > -- 8< --
> > From: Takashi Iwai <tiwai@suse.de>
> > Subject: [PATCH v6.12.y] ALSA: usb-audio: Fix missing unlock at error path of
> >  maxpacksize check
> > 
> > The recent backport of the upstream commit 05a1fc5efdd8 ("ALSA:
> > usb-audio: Fix potential overflow of PCM transfer buffer") on the
> > older stable kernels like 6.12.y was broken since it doesn't consider
> > the mutex unlock, where the upstream code manages with guard().
> > In the older code, we still need an explicit unlock.
> > 
> > This is a fix that corrects the error path, applied only on old stable
> > trees.
> > 
> > Reported-by: Pavel Machek <pavel@denx.de>
> > Closes: https://lore.kernel.org/aSWtH0AZH5+aeb+a@duo.ucw.cz
> > Fixes: 98e9d5e33bda ("ALSA: usb-audio: Fix potential overflow of PCM transfer buffer")
> > Signed-off-by: Takashi Iwai <tiwai@suse.de>
> 
> Reviewed-by: Pavel Machek <pavel@denx.de>

OK, will submit properly.


thanks,

Takashi