Adding the following symbols:
  - blk_mq_quiesce_queue
  - blk_mq_unquiesce_queue
  - cpuset_cpus_allowed
  - lru_cache_disable
  - lru_disable_count
  - sbitmap_weight
  - __task_rq_lock

Bug: 399486531
Change-Id: Id7ea92a966a894954b70eb10d3cc2db429221598
Signed-off-by: John Scheible <johnscheible@google.com>

The checkpoint is the top priority thread which can stop all the filesystem
operations. Let's make it RT priority.

Bug: 390504516
Reviewed-by: Daeho Jeong <daehojeong@google.com>
Reviewed-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
Link: https://lore.kernel.org/linux-f2fs-devel/20250303221730.1284822-1-jaegeuk@kernel.org/T/#u

(cherry picked from commit 8a2d9f00
https: //git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git/ dev)
Change-Id: Ife3b87ecff0ad4b8db805c1b15227f3afcd4fbd1

The size of the buffer used to retrieve the memfd file name is
currently calculated at runtime, making the buffer a variable
length array. However, all of the terms used in the buffer size
calculation are known at compile time, so use compile time constants
for the calculation.

Bug: 399839316
Change-Id: Ie1edf9a28f735ebeffab07f64efc4de45f1f095a
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>

1 function symbol(s) added
  'int __traceiter_android_vh_filemap_map_pages_range(void*, struct file*, unsigned long, unsigned long, vm_fault_t)'

1 variable symbol(s) added
  'struct tracepoint __tracepoint_android_vh_filemap_map_pages_range'

Bug: 398130226
Change-Id: I789a16f5d0bc3d11b9518c548276b2ce19514ead
Signed-off-by: zhanghui <zhanghui31@xiaomi.com>

In the current vendor hook, if next_uptodate_folio returns NULL, the
first_pgoff is set to zero, and the last_pgoff is set to start_pgoff.
Therefore, the collection range is from 0 to the start_pgoff.

|-----------|------------|-------------|------------------|
0      start_pgoff  first_pgoff    last_pgoff         end_pgoff

We want to collect the first_pgoff to last_pgoff, so we have to add a
new vendor hook.

Bug: 398130226
Change-Id: I19d54c601e2ffc5de5ec2dafcd43fbdcdc84b0d2
Signed-off-by: zhanghui <zhanghui31@xiaomi.com>

Enable memfd-ashmem compatibility support.

Bug: 111903542
Change-Id: Ia4685272b2f64db737697a3e3c1640d110060111
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>

Allow the memfd-ashmem-shim ioctl handler to run for any shmem file,
so that memfds can handle ashmem ioctl commands.

While this allows ashmem ioctl commands to be invoked on more than just
memfds, this should be fine, since the ioctl commands don't expose any
additional functionality than what is already achievable via other
system calls.

Bug: 111903542
Change-Id: I0bf57ac5a90dba66e5c2c32beff70bcf9d26db6b
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>

Certain applications treat any shared memory buffer that they obtain
as an ashmem buffer, meaning that they will attempt to invoke ashmem
ioctl commands on that buffer.

Android is transitioning to replacing ashmem with memfd, and memfd
currently does not support ashmem ioctl commands. So, when an
application attempts to invoke an ashmem ioctl command on a memfd,
the invocation will fail and report an error back to the app.

In order to preserve compatibility between these apps and memfds,
add a shim layer which will handle ashmem ioctl commands for memfds.

Bug: 111903542
Change-Id: I268a29ee2805739550d79fd2c21d3cfb5a852642
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>

Memfd does not support preventing a file from being mapped with PROT_EXEC,
as ashmem does. It would be useful to expose a knob to userspace to
change ashmem's behavior to match memfd to see if any issues arise
during tests.

Therefore, expose a tunable that userspace can use to cause ashmem to
ignore requests to deny PROT_EXEC mappings.

Bug: 111903542
Change-Id: I3da63d899c4753aa704092bf8e8a2568500fa833
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>

Memfd does not support preventing a file from being mapped with PROT_READ,
as ashmem does. It would be useful to expose a knob to userspace to
change ashmem's behavior to match memfd to see if any issues arise
during tests.

Therefore, expose a tunable that userspace can use to cause ashmem to
ignore requests to deny PROT_READ mappings.

Bug: 111903542
Change-Id: Id4d1770e93a4fd5a6b3be04fd82c67d0eff0200e
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>

The final version of ashmem will not support unpinning buffers.
Therefore, to be able to have the ashmem driver behave as close as
possible to its final configuration for testing, add a device node
that can be used to disable unpinning.

This node will make it so that the ashmem shrinker stops running,
and that all unpinning requests are ignored.

Bug: 111903542
Change-Id: I99ae9b1a4e56ee8a5224d647a6f2f9eeeb86ef02
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>

Adding the following symbols:
  - page_swap_info

Bug: 397308736

Change-Id: Ica1c945fd0401c0276d0409ff284fe9debc352a3
Signed-off-by: Marcus Ma <maminghui5@xiaomi.corp-partner.google.com>

We present a specific requirement regarding the memory management
and I/O operations.In our project,we're focused on handling scenarios
where I/O delays are triggered by anoymous pages.During this period,we
need to obtain swap_info_struct according to page to obtain the
corresponding block device id.

Bug: 397308736

Change-Id: Ibc11f412964245658cec60af42cf9486adc96e1a
Signed-off-by: Marcus Ma <maminghui5@xiaomi.corp-partner.google.com>

io_req_prep_async() can import provided buffers, commit the ring state
by giving up on that before, it'll be reimported later if needed.

Bug: 397153671
Reported-by: Muhammad Ramdhan <ramdhan@starlabs.sg>
Reported-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>
Reported-by: Jacob Soo <jacob.soo@starlabs.sg>
Fixes: c7fb1942 ("io_uring: add support for ring mapped supplied buffers")
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit a94592ec)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I0887e3efb936c793feb399d29640522215abc36b

INFO: 1 function symbol(s) added
  'bool debugfs_initialized()'

refs #SWANDROID-15097

Bug: 396638083
Change-Id: If9ffa6a61171199b8d87ae2a4b32a8632ba16409
Signed-off-by: Pierre Couillaud <pierre@broadcom.com>
Signed-off-by: Danesh Petigara <danesh.petigara@broadcom.com>

Symbols updated to QCOM abi symbol list for updating DT property:
  of_update_property

Bug: 390562181

Change-Id: I1c19c4aeba3ad3a928d4d90bee06952f70dfc194
Signed-off-by: Srinath Pandey <quic_srinpand@quicinc.com>

Add export symbol for of_update_property for vendor module

Bug: 390562181

Change-Id: Ieaa1074c20334cc58ebeac1a014d9aed5f7bf37a
Signed-off-by: Srinath Pandey <quic_srinpand@quicinc.com>

1 function symbol(s) added
  'void __icmp_send(struct sk_buff *skb_in, int type, int code, __be32 info, const struct ip_options *opt)'

Bug: 395723578
Change-Id: I67bf4c094f8658bc32db05a25afc0a9a8e1d7c1e
Signed-off-by: jiaolifeng <jiaolifeng@oppo.com>

This merges the android14-6.1.128_r00 tag into the android14-6.1 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* 8ae119f6 ANDROID: hrtimers: revert mismerged commit in 6.1.127 LTS merge
*   e6d1ba54 Merge 6.1.128 into android14-6.1-lts
|\
| * 0cbb5f65 Linux 6.1.128
| * a9401cd5 drm/v3d: Assign job pointer to NULL before signaling the fence
| * 7d06d97e ASoC: samsung: midas_wm1811: Fix 'Headphone Switch' control creation
| * 44c49581 smb: client: fix NULL ptr deref in crypto_aead_setkey()
| * 4982cc83 Input: xpad - add support for wooting two he (arm)
| * b336f583 Input: xpad - add unofficial Xbox 360 wireless receiver clone
| * dd000518 Input: atkbd - map F23 key to support default copilot shortcut
| * 4631653d ALSA: usb-audio: Add delay quirk for USB Audio Device
| * 33233b06 Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
| * 4b9b41fa USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
| * bce96653 smb: client: fix UAF in async decryption
| * 49a27ee4 wifi: iwlwifi: add a few rate index validity checks
| * 182a4b7c scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
| * ce114240 ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
| * 13ea9547 ext4: fix access to uninitialised lock in fc replay path
| * 6bcb8a5b vfio/platform: check the bounds of read/write syscalls
| * 1a1b2b8c Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
| * 8476f842 block: fix integer overflow in BLKSECDISCARD
| * 1332c6ed net: sched: fix ets qdisc OOB Indexing
| * 74a37ce6 io_uring: fix waiters missing wake ups
| * 2a40a140 gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
| * 754df8c9 xfs: respect the stable writes flag on the RT device
| * bc4ad699 xfs: clean up FS_XFLAG_REALTIME handling in xfs_ioctl_setattr_xflags
| * 7880b1f0 xfs: dquot recovery does not validate the recovered dquot
| * df716416 xfs: clean up dqblk extraction
| * 318cac2b xfs: inode recovery does not validate the recovered inode
| * 6e782627 xfs: fix internal error from AGFL exhaustion
| * 323a7079 xfs: up(ic_sema) if flushing data device fails
| * 67c362b8 xfs: only remap the written blocks in xfs_reflink_end_cow_extent
| * b655ee7d xfs: abort intent items when recovery intents fail
| * 16cf312b xfs: factor out xfs_defer_pending_abort
| * 6685b885 xfs: allow read IO and FICLONE to run concurrently
| * 4eb3b579 xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space
| * feb30fe4 xfs: introduce protection for drop nlink
| * 4d607041 xfs: make sure maxlen is still congruent with prod when rounding down
| * 34167d02 xfs: fix units conversion error in xfs_bmap_del_extent_delay
| * 91536449 xfs: rt stubs should return negative errnos when rt disabled
| * 9670abd1 xfs: prevent rt growfs when quota is enabled
| * 8ee604ac xfs: hoist freeing of rt data fork extent mappings
| * 79bdab54 xfs: bump max fsgeom struct version
| * f1bc5706 softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
| * d0ec61c9 ipv6: Fix soft lockups in fib6_select_path under high next hop churn
| * 9fdec478 regmap: detach regmap from dev on regmap_exit
| * 87d69690 ASoC: samsung: Add missing depends on I2C
| * 656100f6 ASoC: samsung: midas_wm1811: Map missing jack kcontrols
| * d2b4b39b irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
| * b7d24618 drm/amd/display: Use HW lock mgr for PSR1
| * 2104ad71 scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
| * 18cb5798 seccomp: Stub for !CONFIG_SECCOMP
| * b873c88b ASoC: samsung: Add missing selects for MFD_WM8994
| * 8cf587aa ASoC: wm8994: Add depends on MFD core
* | 979fb1d6 Revert "fs: fix missing declaration of init_files"
* | 42cbb802 Revert "net: add exit_batch_rtnl() method"
* | 5b18fc7e Revert "gtp: use exit_batch_rtnl() method"
* | da69d668 Revert "gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp()."
* | f3dfa826 Revert "gtp: Destroy device along with udp socket's netns dismantle."
* | 79f1b689 Merge 6.1.127 into android14-6.1-lts
|\|
| * 75cefdf1 Linux 6.1.127
| * be7c61ea net: fix data-races around sk->sk_forward_alloc
| * 060de371 x86/xen: fix SLS mitigation in xen_hypercall_iret()
| * 400fb0e9 nfsd: add list_head nf_gc to struct nfsd_file
| * 75a0a6dd erofs: handle NONHEAD !delta[1] lclusters gracefully
| * 6326a3dc erofs: tidy up EROFS on-disk naming
| * 6e5dbd1c wifi: ath10k: avoid NULL pointer error during sdio remove
| * cd862903 Revert "regmap: detach regmap from dev on regmap_exit"
| * 275b8347 scsi: sg: Fix slab-use-after-free read in sg_release()
| * 9e95518e RDMA/rxe: Fix the qp flush warnings in req
| * e7736037 Revert "drm/amdgpu: rework resume handling for display (v2)"
| * 1921fe7d block: fix uaf for flush rq while iterating tags
| * 05b1b339 drm/amdgpu: fix usage slab after free
| * 5bd410c2 drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
| * 64b79afd iio: adc: rockchip_saradc: fix information leak in triggered buffer
| * d3e25180 iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
| * f2e4823b iio: imu: inv_icm42600: fix spi burst write not supported
| * 479a42ee Revert "PCI: Use preserve_config in place of pci_flags"
| * 6603aca9 drm/i915/fb: Relax clear color alignment to 64 bytes
| * 3d41dbf8 hrtimers: Handle CPU state correctly on hotplug
| * d7b0e896 irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
| * e64612f8 irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
| * e1994d0f irqchip: Plug a OF node reference leak in platform_irqchip_probe()
| * 699cc10c pmdomain: imx8mp-blk-ctrl: add missing loop break condition
| * d38c49f7 gpiolib: cdev: Fix use after free in lineinfo_changed_notify
| * 65c367bd fs/proc: fix softlockup in __read_vmcore (part 2)
| * 80fc836f filemap: avoid truncating 64-bit offset to 32 bits
| * b52e50dd vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
| * cc586af3 vsock: reset socket state when de-assigning the transport
| * a3c9390f vsock/virtio: cancel close work in the destructor
| * 88244163 vsock/virtio: discard packets if the transport changes
| * 435349d4 net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
| * 9e1f5094 selftests: mptcp: avoid spurious errors on disconnect
| * 73411e09 mptcp: be sure to send ack when mptcp-level window re-opens
| * fe3de867 zram: fix potential UAF of zram table
| * f9830994 ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
| * 0b30238c x86/asm: Make serialize() always_inline
| * 3375bdf8 poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
| * 7ca4bd6b iomap: avoid avoid truncating 64-bit offset to 32 bits
| * a5045ca6 ACPI: resource: acpi_dev_irq_override(): Check DMI match last
| * bea2a4cf selftests: tc-testing: reduce rshift value
| * 435df80d scsi: ufs: core: Honor runtime/system PM levels if set by host controller drivers
| * f937130b cachefiles: Parse the "secctx" immediately
| * d8680dad kheaders: Ignore silly-rename files
| * bb00b119 fs: fix missing declaration of init_files
| * 19021857 hfs: Sanity check the root record
| * 41e4ca8a mac802154: check local interfaces before deleting sdata list
| * cce9254a nvmet: propagate npwg topology
| * 75505de0 i2c: rcar: fix NACK handling when being a target
| * 53336f33 i2c: mux: demux-pinctrl: check initial mux selection, too
| * 4c833c36 Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
| * 79fe53ed hwmon: (tmp513) Fix division of negative numbers
| * 2a1c88f7 drm/v3d: Ensure job pointer is set to NULL after job completion
| * efc92a26 net/mlx5: Clear port select structure when fail to create
| * edb43b46 net/mlx5: Fix RDMA TX steering prio
| * 207c81e2 net: xilinx: axienet: Fix IRQ coalescing packet count overflow
| * c385389a nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
| * efec287c gtp: Destroy device along with udp socket's netns dismantle.
| * c91e6946 gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
| * a3fdd5f3 gtp: use exit_batch_rtnl() method
| * 760f415e net: add exit_batch_rtnl() method
| * e5d24a70 pktgen: Avoid out-of-bounds access in get_imix_entries
| * ea9e9903 openvswitch: fix lockup on tx to unregistering netdev with carrier
| * d0a3b3d1 bpf: Fix bpf_sk_select_reuseport() memory leak
| * 07524817 net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
* | 766d61c1 Merge branch 'android14-6.1' into android14-6.1-lts
* | 12fe4482 Merge 6.1.126 into android14-6.1-lts
|\|
| * f4f67728 Linux 6.1.126
| * f6247d3e Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals
* | 3ad3cca3 Merge 6.1.125 into android14-6.1-lts
|\|
| * 60ceadf9 Linux 6.1.125
| * 9734fd7a xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals
| * d2085719 drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
| * 90d4d271 drm: bridge: adv7511: use dev_err_probe in probe function
| * 2d431192 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
| * 18a1cd92 ocfs2: correct return value of ocfs2_local_free_info()
| * ad9ec26a of: address: Preserve the flags portion on 1:1 dma-ranges mapping
| * 007662f7 of: address: Store number of bus flag cells rather than bool
| * 7eb954ec of: address: Remove duplicated functions
| * 30eb1123 of: address: Fix address translation when address-size is greater than 2
| * 46dfdb0f of/address: Add support for 3 address cell bus
| * 57e3220c of: unittest: Add bus address range parsing tests
| * 40153aae arm64: dts: rockchip: add hevc power domain clock to rk3328
| * 2550149f block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
| * 64b0aebe ARM: dts: imxrt1050: Fix clocks for mmc
| * 6b63308c io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
| * 3e871c1d iio: adc: ad7124: Disable all channels at probe time
| * 6c92d6f2 iio: inkern: call iio_device_put() only on mapped devices
| * 25ef52f1 iio: adc: at91: call input_free_device() on allocated iio_dev
| * 26016d08 iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
| * 7bc7e9d6 iio: gyro: fxas21002c: Fix missing data update in trigger handler
| * ebe2672b iio: adc: ti-ads8688: fix information leak in triggered buffer
| * 6985ba44 iio: imu: kmx61: fix information leak in triggered buffer
| * 47d245be iio: light: vcnl4035: fix information leak in triggered buffer
| * b0642d9c iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
| * b7849f62 iio: pressure: zpa2326: fix information leak in triggered buffer
| * 82f60f36 usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
| * 9981c33a usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
| * dc51b66e usb: fix reference leak in usb_new_device()
| * c6f763b5 USB: core: Disable LPM only for non-suspended ports
| * 39219c26 USB: usblp: return error when setting unsupported protocol
| * 92a185bf usb: dwc3-am62: Disable autosuspend during remove
| * 3d730e87 usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
| * d26b9f0b misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
| * 79aef618 misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
| * ca47e933 topology: Keep the cpumask unchanged when printing cpumap
| * 20a57256 usb: dwc3: gadget: fix writing NYET threshold
| * 32af3bcc USB: serial: cp210x: add Phoenix Contact UPS Device
| * 65cb57b9 usb-storage: Add max sectors quirk for Nokia 208
| * 78e8abbd staging: iio: ad9832: Correct phase range check
| * 331e6e9f staging: iio: ad9834: Correct phase range check
| * c712fa61 USB: serial: option: add Neoway N723-EA support
| * fb946212 USB: serial: option: add MeiG Smart SRM815
* | afc952d5 Merge 43f4df33 ("bpf: Fix overloading of MEM_UNINIT's meaning") into android14-6.1-lts
|\|
| * 43f4df33 bpf: Fix overloading of MEM_UNINIT's meaning
* | 22d4625e Merge 2a72b2ce ("bpf: Add MEM_WRITE attribute") into android14-6.1-lts
|\|
| * 2a72b2ce bpf: Add MEM_WRITE attribute
* | b3b3e04d Merge 6bc6ee31 ("dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)") into android14-6.1-lts
|\|
| * 6bc6ee31 dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
| * e3ce913a drm/amd/display: increase MAX_SURFACES to the value supported by hw
| * abe587a4 ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
| * 88b9cf8f ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
| * c21df31f riscv: Fix sleeping in invalid context in die()
| * d0645e11 thermal: of: fix OF node leak in of_thermal_zone_find()
| * f3d1e406 drm/amd/display: Add check for granularity in dml ceil/floor helpers
| * 44ee8635 sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
| * e919197f sctp: sysctl: udp_port: avoid using current->nsproxy
| * 1b67030d sctp: sysctl: auth_enable: avoid using current->nsproxy
| * 4059507e sctp: sysctl: rto_min/max: avoid using current->nsproxy
| * 3cd0659d sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
* | c0e24516 Merge c0dde4a5 ("dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY") into android14-6.1-lts
|/
* c0dde4a5 dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
* 12771050 dm thin: make get_first_thin use rcu-safe list first function
* bb87b494 cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu
* 13e41c58 ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
* aabe47cf afs: Fix the maximum cell name length
* ee7e40f7 ksmbd: fix a missing return value check bug
* f05f5ab5 drm/mediatek: Add return value check when reading DPCD
* 4e674923 drm/mediatek: Fix mode valid issue for dp
* e0ad4b01 drm/mediatek: Fix YCbCr422 color format issue for DP
* 21c501e6 drm/mediatek: stop selecting foreign drivers
* f0a28087 net/mlx5: Fix variable not being completed when function returns
* a777e06d sched: sch_cake: add bounds checks to host bulk flow fairness counts
* 5552b4fd netfilter: conntrack: clamp maximum hashtable size to INT_MAX
* d470b925 netfilter: nf_tables: imbalance in flowtable binding
* 636d7b95 tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
* faa8a33e Bluetooth: hci_sync: Fix not setting Random Address when required
* ecb1356a tls: Fix tls_sw_sendmsg error handling
* 657a87c2 ice: fix incorrect PHY settings for 100 GB/s
* 8a7b73f1 cxgb4: Avoid removal of uninserted tid
* b9582838 bnxt_en: Fix possible memory leak when hwrm_req_replace fails
* 2011749c net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
* 2d230410 tcp/dccp: allow a connection when sk_max_ack_backlog is zero
* c0b0d9ae tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
* 0a5026be net: 802: LLC+SNAP OID:PID lookup on start of skb data
* 4589abf8 ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
* f6dce4dc ASoC: mediatek: disable buffer pre-allocation
* 939d239f scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
* d23f2621 exfat: fix the infinite loop in __exfat_free_cluster()
* 31beabd0 exfat: fix the infinite loop in exfat_readdir()
* 43c38c3b dm array: fix cursor index when skipping across block boundaries
* 956a74b2 dm array: fix unreleased btree blocks on closing a faulty array cursor
* e477021d dm array: fix releasing a faulty array block twice in dm_array_cursor_end
* 5af095cb jbd2: flush filesystem device before updating tail sequence
* 62834f5b jbd2: increase IO priority for writing revoke records
* 397383db sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
* b79a0d1e bpf, sockmap: Fix race between element replace and close()
* e4b168c6 ceph: give up on paths longer than PATH_MAX

Change-Id: Ia18514bdd4d67e9850b55a4637d0fbe4a138658f
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

The change Ifdb1ba19f7147da286ea5e044e84dfb679050a94 ("FROMGIT: usb:
typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR
PPS") breaks the KMI. Prevent the breakage by combining the parameters
"requested_vbus_voltage" and "pps_apdo_min_voltage" to a single u32
variable whose value is selected according to the values of parameter
"mode" and parameter "pps_active".

Bug: 388029777
Change-Id: I85872b9490561d248169bc8e008f3d907cc6c3c0
Signed-off-by: Kyle Tso <kyletso@google.com>

The Source can drop its output voltage to the minimum of the requested
PPS APDO voltage range when it is in Current Limit Mode. If this voltage
falls within the range of vPpsShutdown, the Source initiates a Hard
Reset and discharges Vbus. However, currently the Sink may disconnect
before the voltage reaches vPpsShutdown, leading to unexpected behavior.

Prevent premature disconnection by setting the Sink's disconnect
threshold to the minimum vPpsShutdown value. Additionally, consider the
voltage drop due to IR drop when calculating the appropriate threshold.
This ensures a robust and reliable interaction between the Source and
Sink during SPR PPS Current Limit Mode operation.

Fixes: 4288debe ("usb: typec: tcpci: Fix up sink disconnect thresholds for PD")
Cc: stable <stable@kernel.org>
Signed-off-by: Kyle Tso <kyletso@google.com>
Reviewed-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Reviewed-by: Badhri Jagan Sridharan <badhri@google.com>
Link: https://lore.kernel.org/r/20250114142435.2093857-1-kyletso@google.com


Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Bug: 388029777
(cherry picked from commit 4d27afbf
 https: //git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git/
 usb-next)
Change-Id: Ifdb1ba19f7147da286ea5e044e84dfb679050a94
Signed-off-by: Kyle Tso <kyletso@google.com>

Function f2fs_invalidate_blocks() can process consecutive
blocks at a time, so f2fs_truncate_data_blocks_range() is
optimized to use the new functionality of
f2fs_invalidate_blocks().

Add two variables @blkstart and @blklen, @blkstart records
the first address of the consecutive blocks, and @blkstart
records the number of consecutive blocks.

Bug: 394006856
Change-Id: I219866b6c60a8f23f92aee64429064a04e7282d2
Signed-off-by: Yi Sun <yi.sun@unisoc.com>
Reviewed-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 120ac1dc)

New function can process some consecutive blocks at a time.

Function f2fs_invalidate_blocks()->down_write() and up_write()
are very time-consuming, so if f2fs_invalidate_blocks() can
process consecutive blocks at one time, it will save a lot of time.

Bug: 394006856
Change-Id: I6600c5be55f0261b142285fc45212921da8121fb
Signed-off-by: Yi Sun <yi.sun@unisoc.com>
Reviewed-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit e53c568f)

This function can process some consecutive blocks at a time.

When using update_sit_entry() to release consecutive blocks,
ensure that the consecutive blocks belong to the same segment.
Because after update_sit_entry_for_realese(), @segno is still
in use in update_sit_entry().

Bug: 394006856
Change-Id: Ia6be213c3838351292d1000a52bd54a1090f1137
Signed-off-by: Yi Sun <yi.sun@unisoc.com>
Reviewed-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 81ffbd22)

No logical changes, just for cleanliness.

Bug: 394006856
Change-Id: I4dddab6be974476879af46cda814dee2223ed21d
Signed-off-by: Yi Sun <yi.sun@unisoc.com>
Reviewed-by: Chao Yu <chao@kernel.org>
[Dylan: Resolved minor conflict in fs/f2fs/segment.c ]
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 66baee2b)

New function can process some consecutive blocks at a time.

Bug: 394006856
Change-Id: I6741915ec3fba137ae6295688b6c4f8474411177
Signed-off-by: Yi Sun <yi.sun@unisoc.com>
Reviewed-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit d217b5ce)

New function f2fs_invalidate_compress_pages_range() adds the @len
parameter. So it can process some consecutive blocks at a time.

Bug: 394006856
Change-Id: I3b30396567771e1d3608395fa0b7e5e379ddc805
Signed-off-by: Yi Sun <yi.sun@unisoc.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 3d56fbb1)

Below race case can cause data corruption:

Thread A				GC thread
					- gc_data_segment
					 - ra_data_block
					  - locked meta_inode page
- f2fs_inplace_write_data
 - invalidate_mapping_pages
 : fail to invalidate meta_inode page
   due to lock failure or dirty|writeback
   status
 - f2fs_submit_page_bio
 : write last dirty data to old blkaddr
					 - move_data_block
					  - load old data from meta_inode page
					  - f2fs_submit_page_write
					  : write old data to new blkaddr

Because invalidate_mapping_pages() will skip invalidating page which
has unclear status including locked, dirty, writeback and so on, so
we need to use truncate_inode_pages_range() instead of
invalidate_mapping_pages() to make sure meta_inode page will be dropped.

Fixes: 6aa58d8a ("f2fs: readahead encrypted block during GC")
Fixes: e3b49ea3 ("f2fs: invalidate META_MAPPING before IPU/DIO write")

Bug: 394006856
Signed-off-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 7bb861b0)
Change-Id: I4ba1f509a7257dd5a6636d22a0908edd91318dd8

Just cleanup, no logic changes.

Bug: 394006856
Signed-off-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 4e4f1eb9)
Change-Id: I66352c13dcdcd7f145cfd0e54464feac882009be

Commit "mm,page_alloc,cma: conditionally prefer cma pageblocks for
movable allocations" (16867664) introduced balancing of movable
allocations between CMA and normal areas.

Commit "ANDROID: cma: redirect page allocation to CMA" (f60c5572)
removes it, making allocations go in CMA area first.

1. Reintroduce the condition, so that CMA and normal area are used
in a balanced way(as it used to be), so it prevents depleting of CMA
region;

2. Back-port a command line option(from 6.6), "restrict_cma_redirect",
that can be used if only MOVABLE allocations marked as __GFP_CMA are
eligible to be redirected to CMA region. By default it is true.

The purpose of this change is to keep using CMA for movable allocations,
but at the same time, to have enough free CMA pages for critical system
areas such as modem initialization, GPU initialization and so on.

Bug: 381168812
Signed-off-by: Sebastian Achim <sebastian.1.achim@sony.com>
Signed-off-by: Uladzislau Rezki <uladzislau.rezki@sony.com>
Signed-off-by: Oleksiy Avramchenko <oleksiy.avramchenko@sony.com>
Change-Id: I5fd6d022340715e27754c687189c5ea0e56d9ee6

When allocating guest stage-2 page-table pages at EL2, pKVM can consume
pages from the host-provided kvm_hyp_memcache. As pgtable.c expects
zeroed pages, guest_s2_zalloc_page() actively implements this zeroing
with a PAGE_SIZE memset. Unfortunately, we don't check the page
alignment of the host-provided address before doing so, which could
lead to the memset overrunning the page if the host was malicious.

Fix this by simply force-aligning all kvm_hyp_memcache allocations to
page boundaries.

Bug: 396116221
Fixes: 60dfe093 ("KVM: arm64: Instantiate guest stage-2 page-tables at EL2")
Reported-by: Ben Simner <ben.simner@cl.cam.ac.uk>
Link: https://lore.kernel.org/r/20250213153615.3642515-1-qperret@google.com


Change-Id: Icd8c79495a28c014aa3b320ca44a03ee46ede2ce
Signed-off-by: Quentin Perret <qperret@google.com>

When a transaction fails, log the 'tr->code' to help indentify the
problematic userspace call path. This additional information will
simplify debugging efforts.

Cc: Steven Moreland <smoreland@google.com>
Signed-off-by: Carlos Llamas <cmllamas@google.com>
Reviewed-by: Alice Ryhl <aliceryhl@google.com>
Link: https://lore.kernel.org/r/20250110175051.2656975-1-cmllamas@google.com


Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Bug: 388902813
(cherry picked from commit 48dc1c36)
Change-Id: Icd0364386e28b28fe6b32d1cf4f3c76a66215853
Signed-off-by: Carlos Llamas <cmllamas@google.com>

INFO: 1 function symbol(s) added
  'int snd_ctl_remove_id(struct snd_card*, struct snd_ctl_elem_id*)'

snd_ctl_remove_id: remove the control of the given id and release it
audio amp driver need to remove kcontrol when reload dapm control.

Bug: 391517506

Change-Id: Ic8641be7a06d2dfcacd93e1c065f71704690a5bb
Signed-off-by: Injune Choi <injune.choi@samsung.com>

6.1.127 includes commit "hrtimers: Handle CPU state correctly on
hotplug".  This commit is supposed to fix "hrtimers: Push pending
hrtimers away from outgoing CPU earlier".  However commit "hrtimers:
Push pending hrtimers away from outgoing CPU earlier" was reverted
earlier on 6.1-lts.  6.1.127 incorrectly merged parts of "hrtimers:
Handle CPU state correctly on hotplug", which leads to random reboots.
Let´s revert those parts.

Fixes: 79f1b689 ("Merge 6.1.127 into android14-6.1-lts")
Change-Id: Ieb5e3910d631034eb8d4376c6f5a8e9751cae936
Signed-off-by: Micha Lechner <michalechner92@googlemail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

These symbols are missing from the symbol list and are not available at runtime for unsigned modules:
  iio_get_channel_type

Bug: 386822958
Change-Id: I188d191a5a23451f155584e86d66ae56c235ad64
Signed-off-by: Rishi Sikka <rishisikka@google.com>

Bug: 195565510
Signed-off-by: Lee Jones <lee.jones@linaro.org>
(cherry picked from commit 98c15b2b)
Signed-off-by: Lee Jones <joneslee@google.com>
(cherry picked from https://android-review.googlesource.com/q/commit:5188b662614e86d094e09571e5853f910e9c9404)
Merged-In: Ic8134eb902aa7d929e3121b2f69b1d258f570652
Change-Id: Ic8134eb902aa7d929e3121b2f69b1d258f570652

Adding the following symbols:
  - __traceiter_android_trigger_vendor_lmk_kill
  - __tracepoint_android_trigger_vendor_lmk_kill

Bug: 385050909
Change-Id: I82e202177d870fe0a55c69172817c260ece41ff6
Signed-off-by: Martin Liu <liumartin@google.com>

This change adds an android_trigger_vendor_lmk_kill() trace event
which can be used by vendor modules to send LMKD kill requests.

LMKD attaches a BPF program to this trace event if it exists and
expects it to be in a particular format. To provide a standardized
definition for this event, we define and export it inside the GKI
even though there are no users. Android vendors can use this event
to emit this trace event inside their modules and experiment with
different kill strategies before upstreaming them into LMKD.

Bug: 385050909
Test: build and check the ftrace event
Change-Id: Ida4d9202675a90d6cc891e242c0621c5386df8cc
Signed-off-by: Martin Liu <liumartin@google.com>

Changes in 6.1.128
	ASoC: wm8994: Add depends on MFD core
	ASoC: samsung: Add missing selects for MFD_WM8994
	seccomp: Stub for !CONFIG_SECCOMP
	scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
	drm/amd/display: Use HW lock mgr for PSR1
	irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
	ASoC: samsung: midas_wm1811: Map missing jack kcontrols
	ASoC: samsung: Add missing depends on I2C
	regmap: detach regmap from dev on regmap_exit
	ipv6: Fix soft lockups in fib6_select_path under high next hop churn
	softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
	xfs: bump max fsgeom struct version
	xfs: hoist freeing of rt data fork extent mappings
	xfs: prevent rt growfs when quota is enabled
	xfs: rt stubs should return negative errnos when rt disabled
	xfs: fix units conversion error in xfs_bmap_del_extent_delay
	xfs: make sure maxlen is still congruent with prod when rounding down
	xfs: introduce protection for drop nlink
	xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space
	xfs: allow read IO and FICLONE to run concurrently
	xfs: factor out xfs_defer_pending_abort
	xfs: abort intent items when recovery intents fail
	xfs: only remap the written blocks in xfs_reflink_end_cow_extent
	xfs: up(ic_sema) if flushing data device fails
	xfs: fix internal error from AGFL exhaustion
	xfs: inode recovery does not validate the recovered inode
	xfs: clean up dqblk extraction
	xfs: dquot recovery does not validate the recovered dquot
	xfs: clean up FS_XFLAG_REALTIME handling in xfs_ioctl_setattr_xflags
	xfs: respect the stable writes flag on the RT device
	gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
	io_uring: fix waiters missing wake ups
	net: sched: fix ets qdisc OOB Indexing
	block: fix integer overflow in BLKSECDISCARD
	Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
	vfio/platform: check the bounds of read/write syscalls
	ext4: fix access to uninitialised lock in fc replay path
	ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
	scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
	wifi: iwlwifi: add a few rate index validity checks
	smb: client: fix UAF in async decryption
	USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
	Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
	ALSA: usb-audio: Add delay quirk for USB Audio Device
	Input: atkbd - map F23 key to support default copilot shortcut
	Input: xpad - add unofficial Xbox 360 wireless receiver clone
	Input: xpad - add support for wooting two he (arm)
	smb: client: fix NULL ptr deref in crypto_aead_setkey()
	ASoC: samsung: midas_wm1811: Fix 'Headphone Switch' control creation
	drm/v3d: Assign job pointer to NULL before signaling the fence
	Linux 6.1.128

Change-Id: Ia1ddc5824b498862a5eb730dd99bd3a76dd16015
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit bb00b119 which is
commit 2b2fc0be upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Ib6926beda39531de3e1a1025b981b560535347a4
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>