We are adding these hooks to customize the mthp functionality.
1.android_vh_alloc_swap_folio_gfp ----We use this vendor hook
to update the allocation flags for swapping in large pages.

2.android_vh_get_swap_pages_bypass ----We use dual zram to avoid
swap fragmentation, as Chris’s swap reservation has not yet been
merged. This vendor hook is used to select different swap devices.

3.android_vh_should_split_folio_to_list ----This vendor hook is
used to split shared mapped anonymous mTHP during swap-out.

4.android_vh_should_skip_zone ----This vendor hook is used to
prevent mTHP from occupying too much non-virtzone.

5.android_vh_update_unmapped_area_info ----This is used to
update vm_unmapped_area_info.

6.android_vh_replace_anon_vma_name ----This is used to mark
anon_vma_name for mthp.

Bug: 313807618
Change-Id: Ibadb440f89dacad91be17ada9bbff8424e9244d3
Signed-off-by: Tangquan Zheng <zhengtangquan@oppo.com>

1 function symbol(s) added
  'void* devm_pci_remap_cfgspace(struct device*, resource_size_t, resource_size_t)'

Bug: 400289337
Change-Id: Ie641be053339715e699f95829c0a17aa4927242c
Signed-off-by: Aran Dalton <arda@allwinnertech.com>

A maple tree might need memory allocation during insertion. This is not
possible under the rwlock. Therefore, we need to preallocate memory
before that lock is taken. This is done with the KVM_DUMMY_PPAGE
insert_range. However, to do so, we need to enable the maple tree RCU
locking that'll ensure the tree is stable between this lock-less
insertion and concurrent tree walks. RCU protection must be
manually.

The sole limitation to the RCU protection is the mt_find() returned
entry might not be valid. This is however not a problem as all the
readers are protected from modifiers by the mmu_lock.

On the VM destroy path, we can relax the RCU protection. No vCPU can run
and as a consequence no concurrent tree access will occur.

Bug: 278749606
Bug: 395429108
Change-Id: I8400f3b7bdda76d2a60ddcaeb3ea027607898eb2
Signed-off-by: Vincent Donnefort <vdonnefort@google.com>

[ Upstream commit 399a45e5 ]

device_del() can lead to new work being scheduled in gadget->work
workqueue. This is observed, for example, with the dwc3 driver with the
following call stack:
  device_del()
    gadget_unbind_driver()
      usb_gadget_disconnect_locked()
        dwc3_gadget_pullup()
	  dwc3_gadget_soft_disconnect()
	    usb_gadget_set_state()
	      schedule_work(&gadget->work)

Move flush_work() after device_del() to ensure the workqueue is cleaned
up.

Fixes: 5702f753 ("usb: gadget: udc-core: move sysfs_notify() to a workqueue")
Cc: stable <stable@kernel.org>

Bug: 400301689
Change-Id: Icf64956f8a17b1876388546b679cfd203d9701dc
Signed-off-by: Roy Luo <royluo@google.com>
Reviewed-by: Alan Stern <stern@rowland.harvard.edu>
Reviewed-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/20250204233642.666991-1-royluo@google.com


Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 859cb45a)
Signed-off-by: wei li <sirius.liwei@honor.corp-partner.google.com>

Adding the following symbols:
  - xhci_create_secondary_interrupter
  - xhci_disable_interrupter
  - xhci_enable_interrupter
  - xhci_initialize_ring_info
  - xhci_remove_secondary_interrupter
  - xhci_set_interrupter_moderation
  - xhci_stop_endpoint_sync

Bug: 391779198
Change-Id: I932747120c850b93468328900db99a1eb7821f47
Signed-off-by: Carlos Llamas <cmllamas@google.com>
[Lee: Rebased to avoid merge conflict - no changes required]
Signed-off-by: Lee Jones <joneslee@google.com>

The current implementation sets the wMaxPacketSize of bulk in/out
endpoints to 1024 bytes at the end of the f_midi_bind function. However,
in cases where there is a failure in the first midi bind attempt,
consider rebinding. This scenario may encounter an f_midi_bind issue due
to the previous bind setting the bulk endpoint's wMaxPacketSize to 1024
bytes, which exceeds the ep->maxpacket_limit where configured dwc3 TX/RX
FIFO's maxpacket size of 512 bytes for IN/OUT endpoints in support HS
speed only.

Here the term "rebind" in this context refers to attempting to bind the
MIDI function a second time in certain scenarios. The situations where
rebinding is considered include:

 * When there is a failure in the first UDC write attempt, which may be
   caused by other functions bind along with MIDI.
 * Runtime composition change : Example : MIDI,ADB to MIDI. Or MIDI to
   MIDI,ADB.

This commit addresses this issue by resetting the wMaxPacketSize before
endpoint claim. And here there is no need to reset all values in the usb
endpoint descriptor structure, as all members except wMaxPacketSize and
bEndpointAddress have predefined values.

This ensures that restores the endpoint to its expected configuration,
and preventing conflicts with value of ep->maxpacket_limit. It also
aligns with the approach used in other function drivers, which treat
endpoint descriptors as if they were full speed before endpoint claim.

Fixes: 46decc82 ("usb: gadget: unconditionally allocate hs/ss descriptor in bind operation")
Cc: stable@vger.kernel.org
Signed-off-by: Selvarasu Ganesan <selvarasu.g@samsung.com>
Link: https://lore.kernel.org/r/20250118060134.927-1-selvarasu.g@samsung.com


Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Bug: 399689221
Change-Id: Ib90cffc2a0b1a8b25042b4fa7fcad7947bdf0995
(cherry picked from commit 9e8b2141)
Signed-off-by: Meitao Gao <meitaogao@asrmicro.com>

This reverts commit ef1134dd.

Sometimes back commit cfb00a35 ("arm64: jump_label: Ensure patched
jump_labels are visible to all CPUs") got merged into all stable
branches wherever applicable with citing a bug in static key which
does not synchronizes among the cpus and adds IPI to all cores to
fix this.

Kfence is one of the user of static key and recently, it has been
observed that after above commit during toggling kfence_allocation_key
IPI is being sent to the core which are there low power mode which
has regressed power numbers and after disabling CONFIG_KFENCE_STATIC_KEYS
we see workload improved in the range of 1% - 10% resulting in 1% - 4%
power savings for few audio playback, video decode & display cases and
with no regression on benchmarks.

Bug: 394509835
Change-Id: I8efa3280bf115c33cc957f83ccb8e578730aa5f5
Signed-off-by: Mukesh Ojha <mukesh.ojha@oss.qualcomm.com>

Adding the following symbols:
  - dev_pm_clear_wake_irq
  - dev_pm_set_wake_irq
  - dma_buf_vmap_unlocked
  - dma_buf_vunmap_unlocked
  - kvm_iommu_cma_alloc
  - kvm_iommu_cma_release
  - lru_cache_disable
  - lru_disable_count
  - __traceiter_android_vh_typec_store_partner_src_caps
  - __traceiter_android_vh_typec_tcpm_log
  - __traceiter_android_vh_typec_tcpm_modify_src_caps
  - __tracepoint_android_vh_typec_store_partner_src_caps
  - __tracepoint_android_vh_typec_tcpm_log
  - __tracepoint_android_vh_typec_tcpm_modify_src_caps
  - ufshcd_populate_vreg
  - ufshcd_resume_complete
  - ufshcd_runtime_resume
  - ufshcd_runtime_suspend
  - ufshcd_suspend_prepare

Bug: 399486531
Change-Id: Idf6a99e32cb9330968310ee0e364985cdcd0e087
Signed-off-by: John Scheible <johnscheible@google.com>

Due to 72d04bdc ("sbitmap: fix io hung due to race on sbitmap_word
::cleared") directly adding spinlock_t swap_1ock to struct sbitmap_word
in sbitmap.h, KMI was damaged. In order to achieve functionality without
damaging KMI, we can only apply for a block of memory with a size of
map_nr * (sizeof (* sb ->map)+sizeof(spinlock_t)) to ensure that each
struct sbitmap-word receives protection from spinlock.
The actual memory distribution used is as follows:
----------------------
struct sbitmap_word[0]
......................
struct sbitmap_word[n]
-----------------------
spinlock_t swap_lock[0]
.......................
spinlock_t swap_lock[n]
----------------------
sbitmap_word[0] corresponds to swap_lock[0], and sbitmap_word[n]
corresponds to swap_lock[n], and so on.

Fixes: ea86ea2c ("sbitmap: ammortize cost of clearing bits")
Signed-off-by: Yang Yang <yang.yang@vivo.com>
Reviewed-by: Ming Lei <ming.lei@redhat.com>
Reviewed-by: Bart Van Assche <bvanassche@acm.org>

Bug: 382398521
Link: https://lore.kernel.org/r/20240716082644.659566-1-yang.yang@vivo.com


Change-Id: Idcab0dd5fd7c3147efd05dd6cc51757c2b0464f6
Signed-off-by: liuyu <liuyu@allwinnertech.com>

Configuration for sbq:
  depth=64, wake_batch=6, shift=6, map_nr=1

1. There are 64 requests in progress:
  map->word = 0xFFFFFFFFFFFFFFFF
2. After all the 64 requests complete, and no more requests come:
  map->word = 0xFFFFFFFFFFFFFFFF, map->cleared = 0xFFFFFFFFFFFFFFFF
3. Now two tasks try to allocate requests:
  T1:                                       T2:
  __blk_mq_get_tag                          .
  __sbitmap_queue_get                       .
  sbitmap_get                               .
  sbitmap_find_bit                          .
  sbitmap_find_bit_in_word                  .
  __sbitmap_get_word  -> nr=-1              __blk_mq_get_tag
  sbitmap_deferred_clear                    __sbitmap_queue_get
  /* map->cleared=0xFFFFFFFFFFFFFFFF */     sbitmap_find_bit
    if (!READ_ONCE(map->cleared))           sbitmap_find_bit_in_word
      return false;                         __sbitmap_get_word -> nr=-1
    mask = xchg(&map->cleared, 0)           sbitmap_deferred_clear
    atomic_long_andnot()                    /* map->cleared=0 */
                                              if (!(map->cleared))
                                                return false;
                                     /*
                                      * map->cleared is cleared by T1
                                      * T2 fail to acquire the tag
                                      */

4. T2 is the sole tag waiter. When T1 puts the tag, T2 cannot be woken
up due to the wake_batch being set at 6. If no more requests come, T1
will wait here indefinitely.

This patch achieves two purposes:
1. Check on ->cleared and update on both ->cleared and ->word need to
be done atomically, and using spinlock could be the simplest solution.
2. Add extra check in sbitmap_deferred_clear(), to identify whether
->word has free bits.

Fixes: ea86ea2c ("sbitmap: ammortize cost of clearing bits")
Signed-off-by: Yang Yang <yang.yang@vivo.com>
Reviewed-by: Ming Lei <ming.lei@redhat.com>
Reviewed-by: Bart Van Assche <bvanassche@acm.org>
Link: https://lore.kernel.org/r/20240716082644.659566-1-yang.yang@vivo.com


Signed-off-by: Jens Axboe <axboe@kernel.dk>
(cherry picked from commit 72d04bdc)
Signed-off-by: liuyu <liuyu@allwinnertech.com>
Change-Id: Ibab11ef6a94d4db33fae5c4b314b119abc1cabc8

2 function symbol(s) added
  'struct backlight_device* devm_of_find_backlight(struct device*)'
  'void sdhci_reset_tuning(struct sdhci_host*)'

Bug: 399689222
Change-Id: I1746ed7c4b0eef2e8f5363681b556af4eb5e7dcb
Signed-off-by: meitaogao <meitaogao@asrmicro.com>

The try_to_unmap_one() function currently handles PMD-mapped THPs
inefficiently.  It first splits the PMD into PTEs, copies the dirty state
from the PMD to the PTEs, iterates over the PTEs to locate the dirty
state, and then marks the THP as swap-backed.  This process involves
unnecessary PMD splitting and redundant iteration.  Instead, this
functionality can be efficiently managed in
__discard_anon_folio_pmd_locked(), avoiding the extra steps and improving
performance.

The following microbenchmark redirties folios after invoking MADV_FREE,
then measures the time taken to perform memory reclamation (actually set
those folios swapbacked again) on the redirtied folios.

 #include <stdio.h>
 #include <sys/mman.h>
 #include <string.h>
 #include <time.h>

 #define SIZE 128*1024*1024  // 128 MB

 int main(int argc, char *argv[])
 {
 	while(1) {
 		volatile int *p = mmap(0, SIZE, PROT_READ | PROT_WRITE,
 				MAP_PRIVATE | MAP_ANONYMOUS, -1, 0);

 		memset((void *)p, 1, SIZE);
 		madvise((void *)p, SIZE, MADV_FREE);
 		/* redirty after MADV_FREE */
 		memset((void *)p, 1, SIZE);

		clock_t start_time = clock();
 		madvise((void *)p, SIZE, MADV_PAGEOUT);
 		clock_t end_time = clock();

 		double elapsed_time = (double)(end_time - start_time) / CLOCKS_PER_SEC;
 		printf("Time taken by reclamation: %f seconds\n", elapsed_time);

 		munmap((void *)p, SIZE);
 	}
 	return 0;
 }

Testing results are as below,
w/o patch:
~ # ./a.out
Time taken by reclamation: 0.007300 seconds
Time taken by reclamation: 0.007226 seconds
Time taken by reclamation: 0.007295 seconds
Time taken by reclamation: 0.007731 seconds
Time taken by reclamation: 0.007134 seconds
Time taken by reclamation: 0.007285 seconds
Time taken by reclamation: 0.007720 seconds
Time taken by reclamation: 0.007128 seconds
Time taken by reclamation: 0.007710 seconds
Time taken by reclamation: 0.007712 seconds
Time taken by reclamation: 0.007236 seconds
Time taken by reclamation: 0.007690 seconds
Time taken by reclamation: 0.007174 seconds
Time taken by reclamation: 0.007670 seconds
Time taken by reclamation: 0.007169 seconds
Time taken by reclamation: 0.007305 seconds
Time taken by reclamation: 0.007432 seconds
Time taken by reclamation: 0.007158 seconds
Time taken by reclamation: 0.007133 seconds
…

w/ patch

~ # ./a.out
Time taken by reclamation: 0.002124 seconds
Time taken by reclamation: 0.002116 seconds
Time taken by reclamation: 0.002150 seconds
Time taken by reclamation: 0.002261 seconds
Time taken by reclamation: 0.002137 seconds
Time taken by reclamation: 0.002173 seconds
Time taken by reclamation: 0.002063 seconds
Time taken by reclamation: 0.002088 seconds
Time taken by reclamation: 0.002169 seconds
Time taken by reclamation: 0.002124 seconds
Time taken by reclamation: 0.002111 seconds
Time taken by reclamation: 0.002224 seconds
Time taken by reclamation: 0.002297 seconds
Time taken by reclamation: 0.002260 seconds
Time taken by reclamation: 0.002246 seconds
Time taken by reclamation: 0.002272 seconds
Time taken by reclamation: 0.002277 seconds
Time taken by reclamation: 0.002462 seconds
…

This patch significantly speeds up try_to_unmap_one() by allowing it
to skip redirtied THPs without splitting the PMD.

Link: https://lkml.kernel.org/r/20250214093015.51024-5-21cnbao@gmail.com


Change-Id: Ifaca70178abd5b22e00d6e59ed4dcff0fc5cb0b6
Signed-off-by: Barry Song <v-songbaohua@oppo.com>
Suggested-by: Baolin Wang <baolin.wang@linux.alibaba.com>
Suggested-by: Lance Yang <ioworker0@gmail.com>
Reviewed-by: Baolin Wang <baolin.wang@linux.alibaba.com>
Reviewed-by: Lance Yang <ioworker0@gmail.com>
Cc: Albert Ou <aou@eecs.berkeley.edu>
Cc: Anshuman Khandual <anshuman.khandual@arm.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: Chis Li <chrisl@kernel.org>
Cc: Dave Hansen <dave.hansen@linux.intel.com>
Cc: David Hildenbrand <david@redhat.com>
Cc: Gavin Shan <gshan@redhat.com>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: "Huang, Ying" <ying.huang@intel.com>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: Kairui Song <kasong@tencent.com>
Cc: Kefeng Wang <wangkefeng.wang@huawei.com>
Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
Cc: Lorenzo Stoakes <lorenzo.stoakes@oracle.com>
Cc: Mark Rutland <mark.rutland@arm.com>
Cc: Mauricio Faria de Oliveira <mfo@canonical.com>
Cc: Palmer Dabbelt <palmer@dabbelt.com>
Cc: Paul Walmsley <paul.walmsley@sifive.com>
Cc: Ryan Roberts <ryan.roberts@arm.com>
Cc: Shaoqin Huang <shahuang@redhat.com>
Cc: Tangquan Zheng <zhengtangquan@oppo.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Will Deacon <will@kernel.org>
Cc: Yicong Yang <yangyicong@hisilicon.com>
Cc: Yosry Ahmed <yosryahmed@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
(cherry picked from commit 76a230cb https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git

 mm-unstable)
Bug: 313807618
[ Fix trivial conflicts in unmap_huge_pmd_locked() - Kalesh Singh ]
[ __discard_anon_folio_pmd_locked() drop changes related
  to VM_DROPPABLE which doesnt' exist on 6.6 - Kalesh Singh ]
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>

Currently, the PTEs and rmap of a large folio are removed one at a time.
This is not only slow but also causes the large folio to be unnecessarily
added to deferred_split, which can lead to races between the
deferred_split shrinker callback and memory reclamation.  This patch
releases all PTEs and rmap entries in a batch.  Currently, it only handles
lazyfree large folios.

The below microbench tries to reclaim 128MB lazyfree large folios
whose sizes are 64KiB:

 #include <stdio.h>
 #include <sys/mman.h>
 #include <string.h>
 #include <time.h>

 #define SIZE 128*1024*1024  // 128 MB

 unsigned long read_split_deferred()
 {
 	FILE *file = fopen("/sys/kernel/mm/transparent_hugepage"
			"/hugepages-64kB/stats/split_deferred", "r");
 	if (!file) {
 		perror("Error opening file");
 		return 0;
 	}

 	unsigned long value;
 	if (fscanf(file, "%lu", &value) != 1) {
 		perror("Error reading value");
 		fclose(file);
 		return 0;
 	}

 	fclose(file);
 	return value;
 }

 int main(int argc, char *argv[])
 {
 	while(1) {
 		volatile int *p = mmap(0, SIZE, PROT_READ | PROT_WRITE,
 				MAP_PRIVATE | MAP_ANONYMOUS, -1, 0);

 		memset((void *)p, 1, SIZE);

 		madvise((void *)p, SIZE, MADV_FREE);

 		clock_t start_time = clock();
 		unsigned long start_split = read_split_deferred();
 		madvise((void *)p, SIZE, MADV_PAGEOUT);
 		clock_t end_time = clock();
 		unsigned long end_split = read_split_deferred();

 		double elapsed_time = (double)(end_time - start_time) / CLOCKS_PER_SEC;
 		printf("Time taken by reclamation: %f seconds, split_deferred: %ld\n",
 			elapsed_time, end_split - start_split);

 		munmap((void *)p, SIZE);
 	}
 	return 0;
 }

w/o patch:
~ # ./a.out
Time taken by reclamation: 0.177418 seconds, split_deferred: 2048
Time taken by reclamation: 0.178348 seconds, split_deferred: 2048
Time taken by reclamation: 0.174525 seconds, split_deferred: 2048
Time taken by reclamation: 0.171620 seconds, split_deferred: 2048
Time taken by reclamation: 0.172241 seconds, split_deferred: 2048
Time taken by reclamation: 0.174003 seconds, split_deferred: 2048
Time taken by reclamation: 0.171058 seconds, split_deferred: 2048
Time taken by reclamation: 0.171993 seconds, split_deferred: 2048
Time taken by reclamation: 0.169829 seconds, split_deferred: 2048
Time taken by reclamation: 0.172895 seconds, split_deferred: 2048
Time taken by reclamation: 0.176063 seconds, split_deferred: 2048
Time taken by reclamation: 0.172568 seconds, split_deferred: 2048
Time taken by reclamation: 0.171185 seconds, split_deferred: 2048
Time taken by reclamation: 0.170632 seconds, split_deferred: 2048
Time taken by reclamation: 0.170208 seconds, split_deferred: 2048
Time taken by reclamation: 0.174192 seconds, split_deferred: 2048
...

w/ patch:
~ # ./a.out
Time taken by reclamation: 0.074231 seconds, split_deferred: 0
Time taken by reclamation: 0.071026 seconds, split_deferred: 0
Time taken by reclamation: 0.072029 seconds, split_deferred: 0
Time taken by reclamation: 0.071873 seconds, split_deferred: 0
Time taken by reclamation: 0.073573 seconds, split_deferred: 0
Time taken by reclamation: 0.071906 seconds, split_deferred: 0
Time taken by reclamation: 0.073604 seconds, split_deferred: 0
Time taken by reclamation: 0.075903 seconds, split_deferred: 0
Time taken by reclamation: 0.073191 seconds, split_deferred: 0
Time taken by reclamation: 0.071228 seconds, split_deferred: 0
Time taken by reclamation: 0.071391 seconds, split_deferred: 0
Time taken by reclamation: 0.071468 seconds, split_deferred: 0
Time taken by reclamation: 0.071896 seconds, split_deferred: 0
Time taken by reclamation: 0.072508 seconds, split_deferred: 0
Time taken by reclamation: 0.071884 seconds, split_deferred: 0
Time taken by reclamation: 0.072433 seconds, split_deferred: 0
Time taken by reclamation: 0.071939 seconds, split_deferred: 0
...

Link: https://lkml.kernel.org/r/20250214093015.51024-4-21cnbao@gmail.com


Change-Id: If4df73981837946621ec25247aa426c06ab7dd28
Signed-off-by: Barry Song <v-songbaohua@oppo.com>
Cc: Albert Ou <aou@eecs.berkeley.edu>
Cc: Anshuman Khandual <anshuman.khandual@arm.com>
Cc: Baolin Wang <baolin.wang@linux.alibaba.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: Chis Li <chrisl@kernel.org>
Cc: Dave Hansen <dave.hansen@linux.intel.com>
Cc: David Hildenbrand <david@redhat.com>
Cc: Gavin Shan <gshan@redhat.com>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: "Huang, Ying" <ying.huang@intel.com>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: Kairui Song <kasong@tencent.com>
Cc: Kefeng Wang <wangkefeng.wang@huawei.com>
Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
Cc: Lance Yang <ioworker0@gmail.com>
Cc: Lorenzo Stoakes <lorenzo.stoakes@oracle.com>
Cc: Mark Rutland <mark.rutland@arm.com>
Cc: Mauricio Faria de Oliveira <mfo@canonical.com>
Cc: Palmer Dabbelt <palmer@dabbelt.com>
Cc: Paul Walmsley <paul.walmsley@sifive.com>
Cc: Ryan Roberts <ryan.roberts@arm.com>
Cc: Shaoqin Huang <shahuang@redhat.com>
Cc: Tangquan Zheng <zhengtangquan@oppo.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Will Deacon <will@kernel.org>
Cc: Yicong Yang <yangyicong@hisilicon.com>
Cc: Yosry Ahmed <yosryahmed@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
(cherry picked from commit a0188db7 https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git

 mm-unstable)
Bug: 313807618
[ Fix conflicts in try_to_unmap_one() - Kalesh Singh ]
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>

This patch lays the groundwork for supporting batch PTE unmapping in
try_to_unmap_one().  It introduces range handling for TLB batch flushing,
with the range currently set to the size of PAGE_SIZE.

The function __flush_tlb_range_nosync() is architecture-specific and is
only used within arch/arm64.  This function requires the mm structure
instead of the vma structure.  To allow its reuse by
arch_tlbbatch_add_pending(), which operates with mm but not vma, this
patch modifies the argument of __flush_tlb_range_nosync() to take mm as
its parameter.

Link: https://lkml.kernel.org/r/20250214093015.51024-3-21cnbao@gmail.com


Change-Id: Icfca8715feda7e6298a7e2ff76be8ca9a646d8b2
Signed-off-by: Barry Song <v-songbaohua@oppo.com>
Acked-by: Will Deacon <will@kernel.org>
Reviewed-by: Kefeng Wang <wangkefeng.wang@huawei.com>
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Dave Hansen <dave.hansen@linux.intel.com>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: Anshuman Khandual <anshuman.khandual@arm.com>
Cc: Ryan Roberts <ryan.roberts@arm.com>
Cc: Shaoqin Huang <shahuang@redhat.com>
Cc: Gavin Shan <gshan@redhat.com>
Cc: Mark Rutland <mark.rutland@arm.com>
Cc: David Hildenbrand <david@redhat.com>
Cc: Lance Yang <ioworker0@gmail.com>
Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
Cc: Yosry Ahmed <yosryahmed@google.com>
Cc: Paul Walmsley <paul.walmsley@sifive.com>
Cc: Palmer Dabbelt <palmer@dabbelt.com>
Cc: Albert Ou <aou@eecs.berkeley.edu>
Cc: Yicong Yang <yangyicong@hisilicon.com>
Cc: Baolin Wang <baolin.wang@linux.alibaba.com>
Cc: Chis Li <chrisl@kernel.org>
Cc: "Huang, Ying" <ying.huang@intel.com>
Cc: Kairui Song <kasong@tencent.com>
Cc: Lorenzo Stoakes <lorenzo.stoakes@oracle.com>
Cc: Mauricio Faria de Oliveira <mfo@canonical.com>
Cc: Tangquan Zheng <zhengtangquan@oppo.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Bug: 313807618
(cherry picked from commit e00a2e56 https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git

 mm-unstable)
[ Drop changes to riscv which don't exist in 6.6.
  Fix trivial conflicts in arm64 tlbflush.h
    - Kalesh Singh ]
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>

Patch series "mm: batched unmap lazyfree large folios during reclamation",
v4.

Commit 735ecdfa ("mm/vmscan: avoid split lazyfree THP during
shrink_folio_list()") prevents the splitting of MADV_FREE'd THP in
madvise.c.

However, those folios are still added to the deferred_split list in
try_to_unmap_one() because we are unmapping PTEs and removing rmap entries
one by one.

Firstly, this has rendered the following counter somewhat confusing,
/sys/kernel/mm/transparent_hugepage/hugepages-size/stats/split_deferred
The split_deferred counter was originally designed to track operations
such as partial unmap or madvise of large folios.  However, in practice,
most split_deferred cases arise from memory reclamation of aligned
lazyfree mTHPs as observed by Tangquan.  This discrepancy has made the
split_deferred counter highly misleading.

Secondly, this approach is slow because it requires iterating through each
PTE and removing the rmap one by one for a large folio.  In fact, all PTEs
of a pte-mapped large folio should be unmapped at once, and the entire
folio should be removed from the rmap as a whole.

Thirdly, it also increases the risk of a race condition where lazyfree
folios are incorrectly set back to swapbacked, as a speculative folio_get
may occur in the shrinker's callback.

deferred_split_scan() might call folio_try_get(folio) since we have added
the folio to split_deferred list while removing rmap for the 1st subpage,
and while we are scanning the 2nd to nr_pages PTEs of this folio in
try_to_unmap_one(), the entire mTHP could be transitioned back to
swap-backed because the reference count is incremented, which can make
"ref_count == 1 + map_count" within try_to_unmap_one() false.

   /*
    * The only page refs must be one from isolation
    * plus the rmap(s) (dropped by discard:).
    */
   if (ref_count == 1 + map_count &&
       (!folio_test_dirty(folio) ||
        ...
        (vma->vm_flags & VM_DROPPABLE))) {
           dec_mm_counter(mm, MM_ANONPAGES);
           goto discard;
   }

This patchset resolves the issue by marking only genuinely dirty folios as
swap-backed, as suggested by David, and transitioning to batched unmapping
of entire folios in try_to_unmap_one().  Consequently, the deferred_split
count drops to zero, and memory reclamation performance improves
significantly — reclaiming 64KiB lazyfree large folios is now 2.5x
faster(The specific data is embedded in the changelog of patch 3/4).

By the way, while the patchset is primarily aimed at PTE-mapped large
folios, Baolin and Lance also found that try_to_unmap_one() handles
lazyfree redirtied PMD-mapped large folios inefficiently — it splits the
PMD into PTEs and iterates over them.  This patchset removes the
unnecessary splitting, enabling us to skip redirtied PMD-mapped large
folios 3.5X faster during memory reclamation.  (The specific data can be
found in the changelog of patch 4/4).

This patch (of 4):

The refcount may be temporarily or long-term increased, but this does not
change the fundamental nature of the folio already being lazy- freed.
Therefore, we only reset 'swapbacked' when we are certain the folio is
dirty and not droppable.

Link: https://lkml.kernel.org/r/20250214093015.51024-1-21cnbao@gmail.com
Link: https://lkml.kernel.org/r/20250214093015.51024-2-21cnbao@gmail.com


Fixes: 6c8e2a25 ("mm: fix race between MADV_FREE reclaim and blkdev direct IO read")
Change-Id: Ifb1d1851924ad6264caab7e0178b0f910f4b62a1
Signed-off-by: Barry Song <v-songbaohua@oppo.com>
Suggested-by: David Hildenbrand <david@redhat.com>
Acked-by: David Hildenbrand <david@redhat.com>
Reviewed-by: Baolin Wang <baolin.wang@linux.alibaba.com>
Reviewed-by: Lance Yang <ioworker0@gmail.com>
Cc: Mauricio Faria de Oliveira <mfo@canonical.com>
Cc: Chis Li <chrisl@kernel.org> (Google)
Cc: "Huang, Ying" <ying.huang@intel.com>
Cc: Kairui Song <kasong@tencent.com>
Cc: Lorenzo Stoakes <lorenzo.stoakes@oracle.com>
Cc: Ryan Roberts <ryan.roberts@arm.com>
Cc: Tangquan Zheng <zhengtangquan@oppo.com>
Cc: Albert Ou <aou@eecs.berkeley.edu>
Cc: Anshuman Khandual <anshuman.khandual@arm.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: Dave Hansen <dave.hansen@linux.intel.com>
Cc: Gavin Shan <gshan@redhat.com>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: Kefeng Wang <wangkefeng.wang@huawei.com>
Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
Cc: Mark Rutland <mark.rutland@arm.com>
Cc: Palmer Dabbelt <palmer@dabbelt.com>
Cc: Paul Walmsley <paul.walmsley@sifive.com>
Cc: Shaoqin Huang <shahuang@redhat.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Will Deacon <will@kernel.org>
Cc: Yicong Yang <yangyicong@hisilicon.com>
Cc: Yosry Ahmed <yosryahmed@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Bug: 313807618
(cherry picked from commit 2e595b90 https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git

 mm-unstable)
[ Fix conflicts in try_to_unmap_one() and drop changes for VM_DROPPABLE
  - Kalesh Singh ]
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>

Fix used-uninitialized of `page'.

Fixes: dce7d10b ("mm/madvise: optimize lazyfreeing with mTHP in madvise_free")
Reported-by: kernel test robot <lkp@intel.com>
Closes: https://lore.kernel.org/oe-kbuild-all/202406260514.SLhNM9kQ-lkp@intel.com


Cc: Lance Yang <ioworker0@gmail.com>
Change-Id: I35d79caf4fc6b2cabdcc435b6fa259681d3ee10f
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
(cherry picked from commit d40f74ab)
Bug: 313807618
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>

When the user no longer requires the pages, they would use
madvise(MADV_FREE) to mark the pages as lazy free.  Subsequently, they
typically would not re-write to that memory again.

During memory reclaim, if we detect that the large folio and its PMD are
both still marked as clean and there are no unexpected references (such as
GUP), so we can just discard the memory lazily, improving the efficiency
of memory reclamation in this case.

On an Intel i5 CPU, reclaiming 1GiB of lazyfree THPs using
mem_cgroup_force_empty() results in the following runtimes in seconds
(shorter is better):

--------------------------------------------
|     Old       |      New       |  Change  |
--------------------------------------------
|   0.683426    |    0.049197    |  -92.80% |
--------------------------------------------

[ioworker0@gmail.com: minor changes per David]
  Link: https://lkml.kernel.org/r/20240622100057.3352-1-ioworker0@gmail.com
Link: https://lkml.kernel.org/r/20240614015138.31461-4-ioworker0@gmail.com


Change-Id: I716b3f00627134eb58fbaa44a8cc81fd11f52f8c
Signed-off-by: Lance Yang <ioworker0@gmail.com>
Suggested-by: Zi Yan <ziy@nvidia.com>
Suggested-by: David Hildenbrand <david@redhat.com>
Cc: Bang Li <libang.li@antgroup.com>
Cc: Baolin Wang <baolin.wang@linux.alibaba.com>
Cc: Barry Song <baohua@kernel.org>
Cc: Fangrui Song <maskray@google.com>
Cc: Jeff Xie <xiehuan09@gmail.com>
Cc: Kefeng Wang <wangkefeng.wang@huawei.com>
Cc: Matthew Wilcox (Oracle) <willy@infradead.org>
Cc: Michal Hocko <mhocko@suse.com>
Cc: Minchan Kim <minchan@kernel.org>
Cc: Muchun Song <songmuchun@bytedance.com>
Cc: Peter Xu <peterx@redhat.com>
Cc: Ryan Roberts <ryan.roberts@arm.com>
Cc: SeongJae Park <sj@kernel.org>
Cc: Yang Shi <shy828301@gmail.com>
Cc: Yin Fengwei <fengwei.yin@intel.com>
Cc: Zach O'Keefe <zokeefe@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
(cherry picked from commit 735ecdfa)
Bug: 313807618
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>

In preparation for supporting try_to_unmap_one() to unmap PMD-mapped
folios, start the pagewalk first, then call split_huge_pmd_address() to
split the folio.

Link: https://lkml.kernel.org/r/20240614015138.31461-3-ioworker0@gmail.com


Change-Id: I43f84f3e1d528bbacb239ad61e75e7c76487bc0d
Signed-off-by: Lance Yang <ioworker0@gmail.com>
Suggested-by: David Hildenbrand <david@redhat.com>
Acked-by: David Hildenbrand <david@redhat.com>
Suggested-by: Baolin Wang <baolin.wang@linux.alibaba.com>
Acked-by: Zi Yan <ziy@nvidia.com>
Cc: Bang Li <libang.li@antgroup.com>
Cc: Barry Song <baohua@kernel.org>
Cc: Fangrui Song <maskray@google.com>
Cc: Jeff Xie <xiehuan09@gmail.com>
Cc: Kefeng Wang <wangkefeng.wang@huawei.com>
Cc: Matthew Wilcox (Oracle) <willy@infradead.org>
Cc: Michal Hocko <mhocko@suse.com>
Cc: Minchan Kim <minchan@kernel.org>
Cc: Muchun Song <songmuchun@bytedance.com>
Cc: Peter Xu <peterx@redhat.com>
Cc: Ryan Roberts <ryan.roberts@arm.com>
Cc: SeongJae Park <sj@kernel.org>
Cc: Yang Shi <shy828301@gmail.com>
Cc: Yin Fengwei <fengwei.yin@intel.com>
Cc: Zach O'Keefe <zokeefe@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
(cherry picked from commit 29e847d2)
Bug: 313807618
[ Fix trivial conflict in __split_huge_pmd();
  due to pmd_folio() not present in 6.6. instead use
  the equivalent page_folio(pmd_page(pmd))
    - Kalesh Singh ]
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>

Patch series "Reclaim lazyfree THP without splitting", v8.

This series adds support for reclaiming PMD-mapped THP marked as lazyfree
without needing to first split the large folio via
split_huge_pmd_address().

When the user no longer requires the pages, they would use
madvise(MADV_FREE) to mark the pages as lazy free.  Subsequently, they
typically would not re-write to that memory again.

During memory reclaim, if we detect that the large folio and its PMD are
both still marked as clean and there are no unexpected references(such as
GUP), so we can just discard the memory lazily, improving the efficiency
of memory reclamation in this case.

Performance Testing
===================

On an Intel i5 CPU, reclaiming 1GiB of lazyfree THPs using
mem_cgroup_force_empty() results in the following runtimes in seconds
(shorter is better):

--------------------------------------------
|     Old       |      New       |  Change  |
--------------------------------------------
|   0.683426    |    0.049197    |  -92.80% |
--------------------------------------------

This patch (of 8):

Introduce the labels walk_done and walk_abort as exit points to eliminate
duplicated exit code in the pagewalk loop.

Link: https://lkml.kernel.org/r/20240614015138.31461-1-ioworker0@gmail.com
Link: https://lkml.kernel.org/r/20240614015138.31461-2-ioworker0@gmail.com


Change-Id: I82a14587672d6cbfb977795ffb6c5b06841adcd9
Signed-off-by: Lance Yang <ioworker0@gmail.com>
Reviewed-by: Zi Yan <ziy@nvidia.com>
Reviewed-by: Baolin Wang <baolin.wang@linux.alibaba.com>
Reviewed-by: David Hildenbrand <david@redhat.com>
Reviewed-by: Barry Song <baohua@kernel.org>
Cc: Bang Li <libang.li@antgroup.com>
Cc: Fangrui Song <maskray@google.com>
Cc: Jeff Xie <xiehuan09@gmail.com>
Cc: Kefeng Wang <wangkefeng.wang@huawei.com>
Cc: Matthew Wilcox (Oracle) <willy@infradead.org>
Cc: Michal Hocko <mhocko@suse.com>
Cc: Minchan Kim <minchan@kernel.org>
Cc: Muchun Song <songmuchun@bytedance.com>
Cc: Peter Xu <peterx@redhat.com>
Cc: Ryan Roberts <ryan.roberts@arm.com>
Cc: SeongJae Park <sj@kernel.org>
Cc: Yang Shi <shy828301@gmail.com>
Cc: Yin Fengwei <fengwei.yin@intel.com>
Cc: Zach O'Keefe <zokeefe@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
(cherry picked from commit 26d21b18)
Bug: 313807618
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>

This reverts commit cf57490a.

The USB_XHCI_SIDEBAND driver is currently under development in the
upstream kernel. Enabling it in the Generic Kernel Image (GKI) at this
stage poses potential risks. The snapshot of the driver included in
android15-6.6 is an early revision and lacks several critical fixes
present in the latest upstream revisions.

Bug: 391779198
Change-Id: Ifc0106e3773064b0e1ec5f770f22cb6ba68c4cad
Signed-off-by: Udipto Goswami <quic_ugoswami@quicinc.com>
Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>
Signed-off-by: Carlos Llamas <cmllamas@google.com>

Users of such symbols have been notified and are in agreement.

7 function symbol(s) removed
  'int xhci_sideband_add_endpoint(struct xhci_sideband*, struct usb_host_endpoint*)'
  'int xhci_sideband_create_interrupter(struct xhci_sideband*, int, int, bool)'
  'int xhci_sideband_enable_interrupt(struct xhci_sideband*, u32)'
  'struct xhci_sideband* xhci_sideband_register(struct usb_device*)'
  'int xhci_sideband_remove_endpoint(struct xhci_sideband*, struct usb_host_endpoint*)'
  'void xhci_sideband_remove_interrupter(struct xhci_sideband*)'
  'void xhci_sideband_unregister(struct xhci_sideband*)'

Bug: 394470945
Change-Id: Ie553e3ccf96def4f2e9f3deffbf498296b082325
Signed-off-by: Carlos Llamas <cmllamas@google.com>

This reverts commit 7c12a8c0.

Reason for revert: Disabling CONFIG_USB_XHCI_SIDEBAND in gerrit
https://r.android.com/3464443

, so revert symbol change also.

Bug: 391779198
Change-Id: I29eeee78d8e5a8495032b587d4268766d24bebe8
Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>
Signed-off-by: Carlos Llamas <cmllamas@google.com>

This reverts commit 812c7d0e.

Reason for revert: Disabling CONFIG_USB_XHCI_SIDEBAND in change
https://r.android.com/3464443

, so revert symbol change also.

Bug: 394470945
Change-Id: I8ab255f00790c7a4731fbd171a44d8b804019e3d
Signed-off-by: JaeHun Jung <jh0801.jung@samsung.com>
Signed-off-by: Carlos Llamas <cmllamas@google.com>

White list the __tracepoint_android_vh_add_lazyfree_bypass.

1 function symbol(s) added
  'int __traceiter_android_vh_add_lazyfree_bypass(void*, struct lruvec*, struct folio*, bool*)'

1 variable symbol(s) added
  'struct tracepoint __tracepoint_android_vh_add_lazyfree_bypass'

Bug: 396330858
Change-Id: I89936604aa9ae5b82f7adef55df469620759b659
Signed-off-by: yipeng xiang <yipengxiang@honor.corp-partner.google.com>

Add vendor hook to add lazyfree to lru tail in lru_lazyfree

Bug: 396330858
Change-Id: I3d421992811fa87cf1c5c45cfe2a08e06004da83
Signed-off-by: yipeng xiang <yipengxiang@honor.corp-partner.google.com>

1. fadvise(fd1, POSIX_FADV_NOREUSE, {0,3});
2. fadvise(fd2, POSIX_FADV_NOREUSE, {1,2});
3. fadvise(fd3, POSIX_FADV_NOREUSE, {3,1});
4. echo 1024 > /sys/fs/f2fs/tuning/reclaim_caches_kb

This gives a way to reclaim file-backed pages by iterating all f2fs mounts until
reclaiming 1MB page cache ranges, registered by #1, #2, and #3.

5. cat /sys/fs/f2fs/tuning/reclaim_caches_kb
-> gives total number of registered file ranges.

Bug: 390229090
Reviewed-by: Chao Yu <chao@kernel.org>
Change-Id: I58f09afe4533a1814f3646dd21f883048f891f86
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit a907f3a6
https: //git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git/ dev)

This patch records POSIX_FADV_NOREUSE ranges for users to reclaim the caches
instantly off from LRU.

Bug: 390229090
Reviewed-by: Chao Yu <chao@kernel.org>
Change-Id: If83a0b97df99c45464645499ed81979dacd0ac28
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit ef0c333c
https: //git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git/ dev)

This patch adds an ioctl to give a per-file priority hint to attach
REQ_PRIO.

Bug: 325443469
Reviewed-by: Chao Yu <chao@kernel.org>
Change-Id: I5110e1fc295e4e1bc3a302b75b92050bfc17059b
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 5f95c181
https: //git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git/ dev)

In /sys/fs/f2fs/features, there's no f2fs_sb_info, so let's avoid to get
the pointer.

Bug: 390229090
Reviewed-by: Chao Yu <chao@kernel.org>
Change-Id: I1a3575018046187b239daa4061d05520f3c7f1b2
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 21925ede
https: //git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git/ dev)

Buffer allocated in sequential files are used by firmware loader,
when no vendor firmware path is used, firmware uploader is modifying
the memory in the redzone.

=============================================================================
BUG kmalloc-4k (Tainted: G        W  OE     ): Left Redzone overwritten
-----------------------------------------------------------------------------
0xffffff8854ae0fff-0xffffff8854ae0fff @offset=4095. First byte 0x0
instead of 0xcc
Allocated in kvmalloc_node+0x194/0x2b4 age=10 cpu=2 pid=4758
__kmem_cache_alloc_node+0x2a8/0x388
__kmalloc_node+0x60/0x1e0
kvmalloc_node+0x194/0x2b4
seq_read_iter+0x8c/0x4f0
kernfs_fop_read_iter+0x70/0x1ec
vfs_read+0x238/0x2d8
ksys_read+0x78/0xe8
__arm64_sys_read+0x1c/0x2c
invoke_syscall+0x58/0x114
el0_svc_common+0xac/0xe0
do_el0_svc+0x1c/0x28
el0_svc+0x3c/0x74
el0t_64_sync_handler+0x68/0xbc
el0t_64_sync+0x1a8/0x1ac

Freed in kfree_link+0x10/0x20 age=46 cpu=1 pid=4786
__kmem_cache_free+0x268/0x358
kfree+0xa0/0x168
kfree_link+0x10/0x20
walk_component+0x90/0x128
link_path_walk+0x27c/0x3cc
path_openat+0x94/0xc7c
do_filp_open+0xb8/0x164
do_sys_openat2+0x84/0xf0
__arm64_sys_openat+0x70/0x9c
invoke_syscall+0x58/0x114
el0_svc_common+0xac/0xe0
do_el0_svc+0x1c/0x28
el0_svc+0x3c/0x74
el0t_64_sync_handler+0x68/0xbc
el0t_64_sync+0x1a8/0x1ac

Redzone  ffffff8854ae0ff0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 00
                                                       redzone modified ^^
Object   ffffff8854ae1000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Add check to avoid memory update in redzone when no vendor firmware path
is used.

Fixes: 2a46f357 ("ANDROID: firmware_loader: Add support for customer firmware paths")
Bug: 395517985
Change-Id: If58a44c0c8a26f3fe58b0e37b0fcc1f0e88e28cb
Signed-off-by: Ram Prakash Gupta <quic_rampraka@quicinc.com>
Signed-off-by: Souradeep Chowdhury <quic_schowdhu@quicinc.com>

When populating a Level 1 Stream Table Descriptor, perform the required
Cache Maintenance Operations for this change to become visible to SMMU.
This is only required for non-coherent SMMUs.

Bug: 397554239
Fixes: 6a072b18 ("ANDROID: drivers/arm-smmu-v3-kvm: Support non-coherent SMMUs")
Change-Id: I5c8391f487c14389698bdcc84e09c87c21270b95
Signed-off-by: Daniel Mentz <danielmentz@google.com>

io_req_prep_async() can import provided buffers, commit the ring state
by giving up on that before, it'll be reimported later if needed.

Bug: 397153671
Reported-by: Muhammad Ramdhan <ramdhan@starlabs.sg>
Reported-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>
Reported-by: Jacob Soo <jacob.soo@starlabs.sg>
Fixes: c7fb1942 ("io_uring: add support for ring mapped supplied buffers")
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit a94592ec)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I0887e3efb936c793feb399d29640522215abc36b

1 function symbol(s) added
  'void vma_set_file(struct vm_area_struct*, struct file*)'

Bug: 342306000

Change-Id: I33421ad327ce20e78c5ad45c3b200ced96f5a034
Signed-off-by: LongPing Wei <weilongping@oppo.com>

9 function symbol(s) added
  'void serial8250_clear_and_reinit_fifos(struct uart_8250_port*)'
  'void serial8250_do_set_divisor(struct uart_port*, unsigned int, unsigned int, unsigned int)'
  'void serial8250_do_set_ldisc(struct uart_port*, struct ktermios*)'
  'int serial8250_em485_config(struct uart_port*, struct ktermios*, struct serial_rs485*)'
  'void serial8250_em485_start_tx(struct uart_8250_port*)'
  'void serial8250_em485_stop_tx(struct uart_8250_port*)'
  'int serial8250_handle_irq(struct uart_port*, unsigned int)'
  'void serial8250_update_uartclk(struct uart_port*, unsigned int)'
  'int uart_read_port_properties(struct uart_port*)'

1 variable symbol(s) added
  'struct serial_rs485 serial8250_em485_supported'

Bug: 397733295
Change-Id: I1e521c498f0f3662b0d4966061ff87e81ff21b0f
Signed-off-by: liuyb20 <liuyb20@lenovo.com>

This reverts commit 20a7858a.

Test: Verified that Android Backup functionality works
Bug: 394501642
Change-Id: Ibdf6d9360aa65480831127bee1cc6554f4a5beb9
Signed-off-by: Chien Kun Niu <rickyniu@google.com>

This reverts commit 914ef7d1 which is
commit 9722c3b6 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Id4885681491f4d5903910a620c0d4287a45e6241
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 1ffbe3a0 which is
commit 28fa3291 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Idc2dfec7105fe79ef1632d47f944cd3a38993816
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This merges the android15-6.6.77_r00 tag into the android15-6.6 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   f7ebe251035c Merge 6.6.77 into android15-6.6-lts
|\
| * c719455843a8 Linux 6.6.77
| * c903f4959a59 Revert "hostfs: convert hostfs to use the new mount API"
| * f55d1ee3a43c Revert "hostfs: fix string handling in __dentry_name()"
| * dd942aca6445 Revert "hostfs: Add const qualifier to host_root in hostfs_fill_super()"
| * fd5799f2ddd4 Revert "hostfs: fix the host directory parse when mounting."
* | a34a523442dc Revert "sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat"
* | 4c707463990e Revert "usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS"
* | aa72893bb576 Revert "pps: Fix a use-after-free"
* | 448098bcbce4 Revert "i3c: dw: Add hot-join support."
* | acc0c9b031d1 Revert "i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition"
* | 86b59317ebbf Revert "bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write"
* | b79ec624fe66 Merge 6.6.76 into android15-6.6-lts
|\|
| * ef3ce4bf49dc Linux 6.6.76
| * 9b7f5ef4bace LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
| * cefbf9f892ce s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
| * 49b8241c5aaf btrfs: output the reason for open_ctree() failure
| * 1b2af918bb71 media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
| * dfde3d63afba staging: media: max96712: fix kernel oops when removing module
| * 16907219ad67 usb: gadget: f_tcm: Don't free command immediately
| * cd3bbcb6b3a7 pps: Fix a use-after-free
| * 6c36dcd662ec media: uvcvideo: Fix double free in error path
| * b32d60a852bb remoteproc: core: Fix ida_free call while not allocated
| * 0263fb2e7b7b mptcp: handle fastopen disconnect correctly
| * 7f6c72b8ef81 mptcp: consolidate suboption status
| * 6f10f641b489 usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
| * 76bae35d44f3 usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
| * 876b1bf63b6f usb: dwc3: core: Defer the probe until USB power supply ready
| * 0962220d7a98 usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
| * 0e7fc92a0572 usb: gadget: f_tcm: Fix Get/SetInterface return value
| * 9e490b665ca3 drivers/card_reader/rtsx_usb: Restore interrupt based detection
| * b649f0d5bc25 usb: xhci: Fix NULL pointer dereference on certain command aborts
| * 3c706829ceb6 net: usb: rtl8150: enable basic endpoint checking
| * 5e75091a93b9 ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
| * fe215b8dd76c ktest.pl: Check kernelrelease return in get_version
| * bab3e9f342e0 selftests/rseq: Fix handling of glibc without rseq support
| * 82e491e08571 netfilter: nf_tables: reject mismatching sum of field_len with set key length
| * cbfb30ae17d4 kbuild: switch from lz4c to lz4 for compression
| * 225b88642aef Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages"
| * 18edc1d03ca0 NFSD: Reset cb_seq_status after NFS4ERR_DELAY
| * 0bf2adad03e1 f2fs: Introduce linear search for dentries
| * aa420dee3392 hexagon: Fix unbalanced spinlock in die()
| * 97517cba7671 hexagon: fix using plain integer as NULL pointer warning in cmpxchg
| * 29f5ee6c9774 kconfig: fix memory leak in sym_warn_unmet_dep()
| * 582e70f1eddf kconfig: WERROR unmet symbol dependency
| * 487852a55a48 kconfig: deduplicate code in conf_read_simple()
| * 94d9ee3b85d2 kconfig: remove unused code for S_DEF_AUTO in conf_read_simple()
| * 26341c1bb766 kconfig: require a space after '#' for valid input
| * 13dc6f1692e0 kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
| * 089d1c188a5a cifs: Fix getting and setting SACLs over SMB1
| * 32cc06a68d3a cifs: Validate EAs for WSL reparse points
| * 563ba1701bc1 io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
| * 730071ea1ea7 ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
| * b730c68ea282 RISC-V: Mark riscv_v_init() as __init
| * be80de30b347 hostfs: fix the host directory parse when mounting.
| * 1fbe93dd7e6a hostfs: Add const qualifier to host_root in hostfs_fill_super()
| * 86ec56b25476 hostfs: fix string handling in __dentry_name()
| * d073828fe0f5 hostfs: convert hostfs to use the new mount API
| * 4517f37bf54e genksyms: fix memory leak when the same symbol is read from *.symref file
| * 9dc841e89ae0 genksyms: fix memory leak when the same symbol is added from source
| * 62289ebb2554 net: hsr: fix fill_frame_info() regression vs VLAN packets
| * f59acc3f9441 net: sh_eth: Fix missing rtnl lock in suspend/resume path
| * b1bc4a35a04c net: xdp: Disallow attaching device-bound programs in generic mode
| * b01e7ceb35dc tcp: correct handling of extreme memory squeeze
| * 5e6e723675e5 bgmac: reduce max frame size to support just MTU 1500
| * 77ad90dd18ae vsock: Allow retrying on connect() failure
| * 3924c153761c Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
| * d2cd915aea83 perf trace: Fix runtime error of index out of bounds
| * 6d3693d402a8 net: stmmac: Limit FIFO size by hardware capability
| * 80083bd4c214 net: stmmac: Limit the number of MTL queues to hardware capability
| * 2a6d1e1d022b ptp: Properly handle compat ioctls
| * c411f9a5fdc9 net: davicom: fix UAF in dm9000_drv_remove
| * a84d511165d6 vxlan: Fix uninit-value in vxlan_vnifilter_dump()
| * b91034314ad2 net: netdevsim: try to close UDP port harness races
| * 51c128ba038c net: rose: fix timer races against user threads
| * 5385c1d1c08f iavf: allow changing VLAN state without calling PF
| * 02794e35ab0d PM: hibernate: Add error handling for syscore_suspend()
| * b379b3162ff5 ipmr: do not call mr_mfc_uses_dev() for unres entries
| * d063bec046a0 net: fec: implement TSO descriptor cleanup
| * d5a17441bb38 gpio: mxc: remove dead code after switch to DT-only
| * b5a8bc47aa0a net: hns3: fix oops when unload drivers paralleling
| * c0f6111bb525 regulator: core: Add missing newline character
| * 40e25a3c0063 ubifs: skip dumping tnc tree when zroot is null
| * 20f0f55e6d68 rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
| * 9adefa7b9559 rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
| * c6e1b2cac24b xfrm: delete intermediate secpath entry in packet offload mode
| * b0f47b08786d dmaengine: ti: edma: fix OF node reference leaks in edma_driver
| * 68a5e8b9125b xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
| * 9e0f793ee961 tools/bootconfig: Fix the wrong format specifier
| * d49ab6857d98 LoongArch: Fix warnings during S3 suspend
| * 34c3ea55d1a7 NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
| * cedab4047828 NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
| * fe616b82bc46 serial: 8250: Adjust the timeout for FIFO mode
| * f4b9bc823b0c driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
| * 91c9ec5a208d module: Extend the preempt disabled section in dereference_symbol_descriptor().
| * 8e1b9201c9a2 nilfs2: protect access to buffers with no active references
| * 61a8a1917a4b nilfs2: convert nilfs_lookup_dirty_data_buffers to use folio_create_empty_buffers
| * 724dc6daebb1 buffer: make folio_create_empty_buffers() return a buffer_head
| * 3e6e5acf4c7d ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
| * e5565240c648 scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
| * 495dcb00d4fe scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
| * c994716d3391 PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
| * 48349476ae13 PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
| * 2a12efc567a2 PCI: imx6: Skip controller_id generation logic for i.MX7D
| * c64da8e0ad76 PCI: imx6: Simplify clock handling by using clk_bulk*() function
| * 2c54b9fca175 PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
| * 0d3f69add24e media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer
| * aba54e4583f6 staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
| * 09ab93b4b6b2 watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
| * 7f6802ca6d13 media: nxp: imx8-isi: fix v4l2-compliance test errors
| * 4ca60562c0d2 mtd: hyperbus: hbmc-am654: fix an OF node reference leak
| * 3ec44b69e48f mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void
| * 2d95397b1792 mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
| * ada9f380e799 media: uvcvideo: Propagate buf->error to userspace
| * 6981619d56a6 media: camif-core: Add check for clk_enable()
| * 79bf1c4773ba media: mipi-csis: Add check for clk_enable()
| * 11c7649c9ec3 media: i2c: ov9282: Correct the exposure offset
| * c4c35f6958de media: i2c: imx412: Add missing newline to prints
| * 0e4300717701 media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
| * 88d08ca77266 media: marvell: Add check for clk_enable()
| * c0f94441a1de PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
| * dfccddd5874f media: lmedm04: Handle errors for lme2510_int_read
| * eb06c7bbf172 media: rc: iguanair: handle timeouts
| * e2d565d93d07 spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
| * 38ac76fc06bc iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
| * 45e567800492 RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
| * 07f8ce734df7 efi: sysfb_efi: fix W=1 warnings when EFI is not set
| * c14c6d0a6aa4 of: reserved-memory: Do not make kmemleak ignore freed address
| * 6ea9e3895f8c RDMA/mlx5: Fix indirect mkey ODP page count
| * 60d2fb033a99 i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
| * c30508bb0b4b i3c: dw: Add hot-join support.
| * e713ca2e6526 arm64: tegra: Fix DMA ID for SPI2
| * 35f444b3104a fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
| * b2c5d45b05d2 ARM: dts: mediatek: mt7623: fix IR nodename
| * fb6f0553f8dc arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
| * ad28a017b542 arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
| * c7e2f0ee4301 arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
| * 64f51b68e296 dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
| * 30fb7a297f16 arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
| * df5c93e0c0a0 arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
| * e3ec2298c34e arm64: dts: qcom: sc7180: fix psci power domain node names
| * 1f11e59d464c arm64: dts: qcom: sc7180: change labels to lower-case
| * 78e69e507f89 arm64: dts: qcom: Add SM7125 device tree
| * 0789f1224758 arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
| * 0da37d987580 arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
| * d92cbcfb10cf arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
| * 4d1dccadf21b arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251 camera
| * 4fa6d6e521ed arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine riser to dtso
| * 6c59ba194002 ARM: omap1: Fix up the Retu IRQ on Nokia 770
| * e746da4b0cd6 RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
| * 94526fbf58c4 arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
| * a5e386065e5a arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
| * 64100cdc3df3 arm64: dts: ti: k3-am62: Remove duplicate GICR reg
| * b3b30a524c46 ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0 node
| * 7e16a59c7672 ARM: dts: microchip: sama5d27_wlsom1_ek: Remove mmc-ddr-3_3v property from sdmmc0 node
| * 6919d6d65c71 arm64: dts: qcom: sm8450: correct sleep clock frequency
| * a3bc622b2046 arm64: dts: qcom: sm8350: correct sleep clock frequency
| * c1574f607d83 arm64: dts: qcom: sm8250: correct sleep clock frequency
| * 4fed5d47fe8d arm64: dts: qcom: sm6375: correct sleep clock frequency
| * 78b611083305 arm64: dts: qcom: sm6125: correct sleep clock frequency
| * dd951e7b04bc arm64: dts: qcom: sm4450: correct sleep clock frequency
| * 36cded5e139d arm64: dts: qcom: sdx75: correct sleep clock frequency
| * 4ba4d5c19ea9 arm64: dts: qcom: sc7280: correct sleep clock frequency
| * c38070e3b8a3 arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
| * 29bb336761ed arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
| * a2e31fadc52e arm64: dts: qcom: qcs404: correct sleep clock frequency
| * d68ef84ca10d arm64: dts: qcom: msm8994: correct sleep clock frequency
| * b7c8c08640d1 arm64: dts: qcom: msm8939: correct sleep clock frequency
| * db975f5e7cb2 arm64: dts: qcom: msm8916: correct sleep clock frequency
| * f23f69f0f224 arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
| * 7e466bb7f544 arm64: dts: qcom: msm8994: Describe USB interrupts
| * 585081791387 arm64: dts: qcom: msm8996: Fix up USB3 interrupts
| * a0753f8993cf arm64: dts: qcom: sa8775p: Update sleep_clk frequency
| * 74f3061e0330 arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi
| * 823536e1128b arm64: dts: qcom: sa8775p-ride: enable pmm8654au_0_pon_resin
| * 9316d15e7d4e arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy1 irq
| * 0aff49ed0d2a arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy0 irq
| * 367e43d89b91 arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
| * d13b39e072f8 arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
| * c144423cb07e memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
| * 5607d1e7944f ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
| * cac3340a2fe4 ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx DHCOM SoM
| * 2fbfacbbf6ee arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
| * eb9a5a953b64 RDMA/srp: Fix error handling in srp_add_port
| * 3013bcfc0c2b arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
| * 90cc73be437c arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
| * 3a01e2dc9f01 RDMA/rxe: Fix mismatched max_msg_sz
| * 5dfd5a88823c RDMA/rxe: Improve newline in printing messages
| * a332e101fcbf arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
| * c62ceade98a0 ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
| * 4064a22702d3 ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
| * b94b27e715cb ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
| * 4b14695a7bda arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
| * 08f2d1bcc022 arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
| * 2495b1f85dd9 arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
| * 8fad7737a92e arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
| * a4a7aea0c4fb arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
| * 32ddffac4201 arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
| * 206d385b1237 arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
| * de8d88b68d0c rdma/cxgb4: Prevent potential integer overflow on 32bit
| * 47b3acbf31e0 RDMA/mlx4: Avoid false error about access to uninitialized gids array
| * 410b99a3d062 ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
| * 434b724ce471 arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
| * a17b2390322a arm64: dts: mediatek: mt8516: add i2c clock-div property
| * 8c9cda5a2074 arm64: dts: mediatek: mt8516: fix wdt irq type
| * 5a10685c816f arm64: dts: mediatek: mt8516: fix GICv2 range
| * 8bea7ece086b arm64: dts: mt8183: set DMIC one-wire mode on Damu
| * ac8f8cc0b2b2 arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
| * 4aa4a0045753 ARM: at91: pm: change BU Power Switch to automatic mode
| * 5908e04d7388 soc: atmel: fix device_node release in atmel_soc_device_init()
| * 7f298125b365 cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c
| * 3f901c35e1a1 smb: client: fix oops due to unset link speed
| * 6f45ef616775 padata: avoid UAF for reorder_work
| * b5981c994671 padata: add pd get/put refcnt helper
| * bbccae982e9f padata: fix UAF in padata_reorder
| * 55f75ce472ae perf lock: Fix parse_lock_type which only retrieve one lock flag
| * 40f8b565d595 ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop
| * 670ef7b2900b bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
| * eeef8e65041a bpf: Send signals asynchronously if !preemptible
| * 01220c10a7f4 pinctrl: amd: Take suspend type into consideration which pins are non-wake
| * 3872b4eec88a pinctrl: stm32: Add check for clk_enable()
| * 2e09336f352f perf report: Fix misleading help message about --demangle
| * 49bc44a51d72 ASoC: Intel: avs: Fix theoretical infinite loop
| * 5e6f12d554ae ASoC: Intel: avs: Do not readq() u32 registers
| * b9db15cf2d69 ASoC: Intel: avs: Abstract IPC handling
| * b5a41d42396e ASoC: Intel: avs: Prefix SKL/APL-specific members
| * 125066c32953 perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
| * d43c2447032c perf namespaces: Introduce nsinfo__set_in_pidns()
| * 4318e26fe4f4 perf machine: Don't ignore _etext when not a text symbol
| * 8487f93db855 perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
| * e6e97a24de83 padata: fix sysfs store callback check
| * 19f17a762ebd ALSA: seq: Make dependency on UMP clearer
| * 7bd0bb51bd92 ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
| * 78f2ac97823c crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
| * cfb531141bda crypto: hisilicon/sec2 - fix for aead invalid authsize
| * 2309cf3f5e9d crypto: hisilicon/sec2 - fix for aead icv error
| * a4cc472ea0d8 crypto: hisilicon/sec2 - optimize the error return process
| * 3392fa605d7c bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
| * 3c7f63d94087 ktest.pl: Remove unused declarations in run_bisect_test function
| * 1ee00cc23cc8 perf expr: Initialize is_test value in expr__ctx_new()
| * dd95e117530e ASoC: renesas: rz-ssi: Use only the proper amount of dividers
| * c7d067a47bf8 perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info()
| * bce9da3aca14 perf header: Fix one memory leakage in process_bpf_prog_info()
| * 4f2582dacad4 perf header: Fix one memory leakage in process_bpf_btf()
| * 3885a4d4a519 crypto: caam - use JobR's space to access page 0 regs
| * e2a5487487bd selftests/bpf: Fix fill_link_info selftest on powerpc
| * 557065f0a493 ASoC: sun4i-spdif: Add clock multiplier settings
| * ccb01198f01d libbpf: Fix segfault due to libelf functions not setting errno
| * 8d0c37831e28 tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
| * 3676e5741739 libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
| * 352daa50946c net/rose: prevent integer overflows in rose_setsockopt()
| * 617d7308bd38 tcp_cubic: fix incorrect HyStart round start detection
| * 88fd5db8c007 net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
| * e3c1a0e4ba0a netfilter: nft_flow_offload: update tcp state flags under lock
| * d9aaae892d46 netfilter: nf_tables: fix set size with rbtree backend
| * c80fcb6caa9b netfilter: nft_set_rbtree: prefer sync gc to async worker
| * b7e81ae38643 netfilter: nft_set_rbtree: rename gc deactivate+erase function
| * 6f8277b97ad4 netfilter: nf_tables: de-constify set commit ops function argument
| * 7e2bd8c13b07 net: sched: Disallow replacing of child qdisc from one parent to another
| * 2f29127e94ae net: avoid race between device unregistration and ethnl ops
| * f9ad8c928921 octeon_ep: remove firmware stats fetch in ndo_get_stats64
| * cf7d4b9ca534 net/mlxfw: Drop hard coded max FW flash image size
| * 6ce38b5a6a49 net: let net.core.dev_weight always be non-zero
| * 627f67b6d099 selftests/landlock: Fix error message
| * c7efca80bdec pwm: stm32: Add check for clk_enable()
| * b8e33f0a3c86 clk: analogbits: Fix incorrect calculation of vco rate delta
| * 5960f4d87398 inet: ipmr: fix data-races
| * 1c73ffb62422 wifi: cfg80211: adjust allocation of colocated AP data
| * 1138cf80bbbf wifi: cfg80211: Handle specific BSSID in 6GHz scanning
| * 2c23036b53a0 selftests: harness: fix printing of mismatch values in __EXPECT()
| * e75ae3db46b5 selftests: timers: clocksource-switch: Adapt progress to kselftest framework
| * dc343336b7c0 cpufreq: ACPI: Fix max-frequency computation
| * 5f97a0b96e14 wifi: mt76: mt7996: fix ldpc setting
| * 7fd26afa1da9 wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
| * b9288a136a0a wifi: mt76: mt7996: fix HE Phy capability
| * b20cda1df8ba wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
| * 566b749f0d64 wifi: mt76: mt7996: add max mpdu len capability
| * 0d6961b57365 wifi: mt76: mt7996: fix register mapping
| * 59e4ebeb43f2 wifi: mt76: mt7915: fix register mapping
| * 1e474cbe5db6 wifi: mt76: mt7915: fix omac index assignment after hardware reset
| * c71d2db21f15 wifi: mt76: mt7915: improve hardware restart reliability
| * 9d19f26ecf26 wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
| * 72eabd4c1986 wifi: mt76: mt7915: firmware restart on devices with a second pcie link
| * 7a249ebfc80e wifi: mt76: mt7996: fix rx filter setting for bfee functionality
| * 987e8224da66 wifi: mt76: mt7915: fix overflows seen when writing limit attributes
| * b823e541dcc1 wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
| * 824813ea30a5 wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
| * 39bb3d56f1c3 landlock: Handle weird files
| * d433ccd98736 net/smc: fix data error when recvmsg with MSG_PEEK flag
| * d0edcd0d18d7 clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
| * cf21ef3d4308 wifi: mac80211: don't flush non-uploaded STAs
| * 43b67fb2fea3 wifi: mac80211: Fix common size calculation for ML element
| * 69226421a5bc wifi: mac80211: fix tid removal during mesh forwarding
| * d36e48a4d81c wifi: mac80211: prohibit deactivating all links
| * a4ba608bd427 wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
| * 849fb90ccc3d wifi: wlcore: fix unbalanced pm_runtime calls
| * 9450b3c3c4ff samples/landlock: Fix possible NULL dereference in parse_path()
| * e30d21ed451d mfd: syscon: Fix race in device_node_get_regmap()
| * 4bbe56ed428d mfd: syscon: Use scoped variables with memory allocators to simplify error paths
| * b45fd493da18 mfd: syscon: Add of_syscon_register_regmap() API
| * d6c5f73c31f0 mfd: syscon: Remove extern from function prototypes
| * c2c3949cebef leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
| * 68834217baaf HID: fix generic desktop D-Pad controls
| * ae730deded66 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
| * 1efa37f8b548 clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
| * eb47144d9111 wifi: ath12k: fix tx power, max reg power update to firmware
| * 2851acb600d6 ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
| * 7ec98ebb38dc OPP: OF: Fix an OF node leak in _opp_add_static_v2()
| * 7705d8a7f2c2 ax25: rcu protect dev->ax25_ptr
| * d54308079d05 regulator: of: Implement the unwind path of of_regulator_match()
| * 32d90424651b clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
| * e121a4f42b4d clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
| * 11f5bdeff93e dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
| * 184a564e6000 team: prevent adding a device which is already a team device lower
| * a32da24ef8cc clk: imx8mp: Fix clkout1/2 support
| * 3319bebda6df cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
| * f757327c4ce6 cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available
| * b38f66273f89 gpio: pca953x: log an error when failing to get the reset GPIO
| * f66aed661bf2 gpio: pca953x: Fully convert to device managed resources
| * e657dc10c4d4 gpio: pca953x: Drop unused fields in struct pca953x_platform_data
| * 50bcea7af924 cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
| * 0f06dd950d04 pwm: stm32-lp: Add check for clk_enable()
| * 280fb099c1dd inetpeer: do not get a refcount in inet_getpeer()
| * e22c073471b5 inetpeer: update inetpeer timestamp in inet_getpeer()
| * cb8449c34910 inetpeer: remove create argument of inet_getpeer()
| * fdaa6b3c7e36 inetpeer: remove create argument of inet_getpeer_v[46]()
| * d01e6a675950 leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
| * 7fd7fd629a33 dt-bindings: mfd: bd71815: Fix rsense and typos
| * 97294d480d4b cpupower: fix TSC MHz calculation
| * 45f1432e74d1 ACPI: fan: cleanup resources in the error path of .probe()
| * 19958067c4be wifi: brcmfmac: add missing header include for brcmf_dbg
| * 3afc51492ad9 regulator: dt-bindings: mt6315: Drop regulator-compatible property
| * 2d259ac7e0c5 HID: multitouch: fix support for Goodix PID 0x01e9
| * c2fe1678e04d wifi: rtlwifi: pci: wait for firmware loading before releasing memory
| * 624cea89a086 wifi: rtlwifi: fix memory leaks and invalid access at probe error path
| * c37901c0c8eb wifi: rtlwifi: destroy workqueue at rtl_deinit_core
| * 465d01ef6962 wifi: rtlwifi: remove unused check_buddy_priv
| * 43c47210dae3 dt-bindings: leds: class-multicolor: Fix path to color definitions
| * 1ffbe3a0b816 clk: fix an OF node reference leak in of_clk_get_parent_name()
| * 914ef7d1a702 of: remove internal arguments from of_property_for_each_u32()
| * 8b84c2cee295 clk: si5351: allow PLLs to be adjusted without reset
| * 2321288c4357 serial: sc16is7xx: use device_property APIs when configuring irda mode
| * 0523ac72a8d8 dt-bindings: mmc: controller: clarify the address-cells description
| * 9c6702260557 rxrpc: Fix handling of received connection abort
| * 6bb87d8823d4 spi: zynq-qspi: Add check for clk_enable()
| * 833e9a1c27b8 net_sched: sch_sfq: don't allow 1 packet limit
| * 58ae7465f0e7 net_sched: sch_sfq: handle bigger packets
| * ab18d76f7852 net_sched: sch_sfq: annotate data-races around q->perturb_period
| * e95f9c408ff8 wifi: wcn36xx: fix channel survey memory allocation size
| * 568460c3c935 wifi: rtlwifi: usb: fix workqueue leak when probe fails
| * 82a843e949f7 wifi: rtlwifi: fix init_sw_vars leak when probe fails
| * 20893ffe7a48 wifi: rtlwifi: wait for firmware loading before releasing memory
| * d8a376b7b5f5 wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
| * b304e1f7edc5 wifi: rtlwifi: do not complete firmware loading needlessly
| * f4b764d99183 wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
| * 4c9caf86d04d ipmi: ipmb: Add check devm_kasprintf() returned value
| * 20412f04bce8 genirq: Make handle_enforce_irqctx() unconditionally available
| * c9d24e47419b drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
| * e576f132cb42 drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
| * 41b72c3401a3 drm/msm: Check return value of of_dma_configure()
| * d69ded4b4fd3 drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
| * d44b7452a58d drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
| * ab3077fe61b8 drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
| * 4ec5e1495ffe drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
| * 396c05f170da drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
| * 84ff05c9bd57 OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
| * eb6ffa0192ba OPP: add index check to assert to avoid buffer overflow in _read_freq()
| * 753c018fce5a drm/amdgpu/vcn: reset fw_shared under SRIOV
| * 26862f0223ef drm/rockchip: vop2: include rockchip_drm_drv.h
| * b7a2cc4952d1 drm/rockchip: move output interface related definition to rockchip_drm_drv.h
| * b126c585fa3a drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
| * 674bb131f70b drm/rockchip: vop2: Fix the windows switch between different layers
| * 66eeb05b7f7d drm/rockchip: vop2: set bg dly and prescan dly at vop2_post_config
| * a56ec21a2972 drm/rockchip: vop2: Set YUV/RGB overlay mode
| * 0b12c1f8c557 drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
| * 556178977bfe drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
| * 6a30634a2e0f drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
| * d0c34936c3bb drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config()
| * ed3d38834764 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
| * f029961b2d47 drm/etnaviv: Fix page property being used for non writecombine buffers
| * d453d03a5e71 drm/msm/dp: set safe_to_exit_level before printing it
| * ccfdd3e19c79 x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
| * 046cf2bacea6 x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
| * cbef443cab0e sched/topology: Rename 'DIE' domain to 'PKG'
| * 32fe5c4c3e55 sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
| * c0dbecb204cf perf/core: Save raw sample data conditionally based on sample type
| * c89b19e96281 afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
| * db996ed19901 nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
| * e1951c169377 select: Fix unbalanced user_access_end()
| * a6cfeb1c2850 partitions: ldm: remove the initial kernel-doc notation
| * 525dc0f60469 nvme: Add error path for xa_store in nvme_init_effects
| * 136f70dc96b8 selftests/powerpc: Fix argument order to timer_sub()
| * 48ef61d25e79 nvme: Add error check for xa_store in nvme_get_effects_log
| * df62fac30c06 pstore/blk: trivial typo fixes
| * d208d2c52b65 nbd: don't allow reconnect after disconnect
| * b1e537fa2307 block: retry call probe after request_module in blk_request_module
| * 5aa2d3a88726 fs: fix proc_handler for sysctl_nr_open
| * a5e157074798 afs: Fix cleanup of immediately failed async calls
| * 7e8ea8e80a46 afs: Fix directory format encoding struct
| * 684ce13e3f1a afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
| * 5ee9c048089f dlm: fix srcu_read_lock() return type to int
| * 905507850170 powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
* | 31e1e0b06470 Merge 6.6.75 into android15-6.6-lts
|\|
| * d51b7d37f14e Linux 6.6.75
| * 431fb709db43 drm/v3d: Assign job pointer to NULL before signaling the fence
| * 35b144b393db Input: xpad - add support for wooting two he (arm)
| * 7c477b26d39e Input: xpad - add support for Nacon Evol-X Xbox One Controller
| * c009f1865582 Input: xpad - improve name of 8BitDo controller 2dc8:3106
| * 723aa536831c Input: xpad - add QH Electronics VID/PID
| * 7ea7e327a199 Input: xpad - add unofficial Xbox 360 wireless receiver clone
| * dc8c9c171ef3 Input: atkbd - map F23 key to support default copilot shortcut
| * 80327feb234c Input: xpad - add support for Nacon Pro Compact
| * cca07b29f7af ALSA: usb-audio: Add delay quirk for USB Audio Device
| * 3d8f4dc8c78f Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
| * 6377838560c0 USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
| * 088bde862f8d scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
| * e0500e4373cd ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
| * 6e35f560daeb ext4: fix access to uninitialised lock in fc replay path
| * c981c32c38af vfio/platform: check the bounds of read/write syscalls
| * 7d6405c13b0d cachestat: fix page cache statistics permission checking
| * 854d0d361e45 Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
| * a99bacb35c14 block: fix integer overflow in BLKSECDISCARD
| * f4168299e553 net: sched: fix ets qdisc OOB Indexing
| * 5ddcc9e92d54 smb: client: handle lack of EA support in smb2_query_path_info()
| * 850e696f3627 libfs: Use d_children list to iterate simple_offset directories
| * 0f03dd06e5d1 libfs: Replace simple_offset end-of-directory detection
| * 6b1de53b1a0a Revert "libfs: Add simple_offset_empty()"
| * a01bb1c5cac9 libfs: Return ENOSPC when the directory offset range is exhausted
| * 2b6da3fa94cd shmem: Fix shmem_rename2()
| * 753828d6775e libfs: Add simple_offset_rename() API
| * 3e716f31ff8b libfs: Fix simple_offset_rename_exchange()
| * 307f68e49dda libfs: Add simple_offset_empty()
| * fc90bbcc08da libfs: Define a minimum directory offset
| * 3bd97ebf7e4f libfs: Re-arrange locking in offset_iterate_dir()
| * 4dd57d1f0e98 gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
| * 7998e7efd1d5 RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
| * 52da02521ede ipv6: Fix soft lockups in fib6_select_path under high next hop churn
| * cd9f7bf6cad8 cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
| * 2364dc21ba5a ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
| * 509a928e815e ASoC: samsung: Add missing depends on I2C
| * 85af156e158c hwmon: (drivetemp) Set scsi command timeout to 10s
| * 2148a41dc8ff irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
| * b25bf1d7f5ff of/unittest: Add test that of_address_to_resource() fails on non-translatable address
| * 758abba3dd41 drm/amd/display: Use HW lock mgr for PSR1
| * 44c485f0fcb2 scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
| * 06bfc95f817b seccomp: Stub for !CONFIG_SECCOMP
| * ed0d02b7e147 ASoC: samsung: Add missing selects for MFD_WM8994
| * bb60f107c96b ASoC: wm8994: Add depends on MFD core
* | 3259186cfce2 Revert "fs: fix missing declaration of init_files"
* | f864dcb60ec0 Revert "net: add exit_batch_rtnl() method"
* | fca9d77ad539 Revert "gtp: use exit_batch_rtnl() method"
* | 2a4ffc3cb3f3 Revert "gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp()."
* | c79677a8fb38 Revert "gtp: Destroy device along with udp socket's netns dismantle."
* | 62384b0a6762 Merge 6.6.74 into android15-6.6-lts
|\|
| * 0372f43ab704 Linux 6.6.74
| * 3f51f8c9d289 net: fix data-races around sk->sk_forward_alloc
| * 7d082fb20aa2 x86/xen: fix SLS mitigation in xen_hypercall_iret()
| * 80d39b50bdc0 nfsd: add list_head nf_gc to struct nfsd_file
| * 0b7b07cb5990 Revert "drm/amdgpu: rework resume handling for display (v2)"
| * f47c834a9131 fs: relax assertions on failure to encode file handles
| * f0c0ac84de17 ovl: support encoding fid from inode with no alias
| * 955a355e179f ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
| * ec3e32de2d8a ocfs2: fix deadlock in ocfs2_get_system_file_inode
| * 1364a29b71c7 block: fix uaf for flush rq while iterating tags
| * 08ac5fdb9c6d drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
| * c39d275efbe9 iio: imu: inv_icm42600: fix spi burst write not supported
| * bcb9678b1c4f Revert "PCI: Use preserve_config in place of pci_flags"
| * 0cc84b6636be drm/amdgpu: always sync the GFX pipe on ctx switch
| * 65622de7c440 drm/i915/fb: Relax clear color alignment to 64 bytes
| * a5cbbea145b4 hrtimers: Handle CPU state correctly on hotplug
| * 6c84ff2e788f irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
| * 61c684dbfeb0 irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
| * 61ecbceae2ee irqchip: Plug a OF node reference leak in platform_irqchip_probe()
| * 926ad31b76b8 pmdomain: imx8mp-blk-ctrl: add missing loop break condition
| * b0111650ee59 gpio: xilinx: Convert gpio_lock to raw spinlock
| * a5a2ee8144c3 fs/proc: fix softlockup in __read_vmcore (part 2)
| * 09528bb1a412 filemap: avoid truncating 64-bit offset to 32 bits
| * c5418187b977 nouveau/fence: handle cross device fences properly
| * bc9c49341f97 vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
| * 8a15c81063b9 vsock: reset socket state when de-assigning the transport
| * dd93823fdd0e vsock/virtio: cancel close work in the destructor
| * d88b249e14bd vsock/virtio: discard packets if the transport changes
| * 58e586c30d0b vsock/bpf: return early if transport is not assigned
| * a3a3c1aa5126 net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
| * 75deec40a774 selftests: mptcp: avoid spurious errors on disconnect
| * d09d17c104a9 mptcp: fix spurious wake-up on under memory pressure
| * 890507bc19b9 mptcp: be sure to send ack when mptcp-level window re-opens
| * 5cfe4b1d0cfb i2c: atr: Fix client detach
| * 571d3f6045cd zram: fix potential UAF of zram table
| * 4c8b783c9d16 ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
| * ee37f3a538fc x86/asm: Make serialize() always_inline
| * 002b2efb1130 nvmet: propagate npwg topology
| * 8c9c1a2b48bb RDMA/bnxt_re: Fix to export port num to ib_query_qp
| * bd6a4b4aed75 poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
| * 91371922704c iomap: avoid avoid truncating 64-bit offset to 32 bits
| * 4aaa1003a3f4 ACPI: resource: acpi_dev_irq_override(): Check DMI match last
| * 8cc32fc86e47 selftests: tc-testing: reduce rshift value
| * 8df41b7fb46d scsi: ufs: core: Honor runtime/system PM levels if set by host controller drivers
| * 933689000dff cachefiles: Parse the "secctx" immediately
| * 3f81514078fc kheaders: Ignore silly-rename files
| * 62861a5d4dd6 fs: fix missing declaration of init_files
| * c598398815ee hfs: Sanity check the root record
| * 2e41e98c4e79 mac802154: check local interfaces before deleting sdata list
| * 1ea680703385 smb: client: fix double free of TCP_Server_Info::hostname
| * 6152c2c612a7 i2c: rcar: fix NACK handling when being a target
| * 573f036ba219 i2c: mux: demux-pinctrl: check initial mux selection, too
| * f3311576789e Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
| * b9b63c9cc1e0 hwmon: (tmp513) Fix division of negative numbers
| * 3c8fe0931d9b soc: ti: pruss: Fix pruss APIs
| * 63195bae1cbf drm/v3d: Ensure job pointer is set to NULL after job completion
| * 5faf45beb701 drm/vmwgfx: Add new keep_resv BO param
| * ff5b9e9be645 net/mlx5e: Always start IPsec sequence number from 1
| * cdb3f2b62e2d net/mlx5e: Rely on reqid in IPsec tunnel mode
| * 87c4417a9021 net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
| * 473bc285378f net/mlx5: Clear port select structure when fail to create
| * ba8fdf7cff09 net/mlx5: Fix RDMA TX steering prio
| * 8a0097db0544 net: fec: handle page_pool_dev_alloc_pages error
| * e8438cb84d0b net: xilinx: axienet: Fix IRQ coalescing packet count overflow
| * 325f2762fac7 nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
| * bb11f992f5a4 gtp: Destroy device along with udp socket's netns dismantle.
| * d756c8ac3029 gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
| * 3d1c0c5500f5 gtp: use exit_batch_rtnl() method
| * 1e222169f718 net: add exit_batch_rtnl() method
| * 7cde21f52042 pktgen: Avoid out-of-bounds access in get_imix_entries
| * ea966b669878 openvswitch: fix lockup on tx to unregistering netdev with carrier
| * b02e70be498b bpf: Fix bpf_sk_select_reuseport() memory leak
| * c5af09473110 net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
* | 56ef2c22d495 Merge 6.6.73 into android15-6.6-lts
|\|
| * 3b4299ff7a25 Linux 6.6.73
| * 1795ca657119 Revert "ovl: do not encode lower fh with upper sb_writers held"
| * d1c53de4463b Revert "ovl: pass realinode to ovl_encode_real_fh() instead of realdentry"
| * 950b604384fd Revert "ovl: support encoding fid from inode with no alias"
* | 0d373e817532 Revert "scsi: ufs: qcom: Power off the PHY if it was already powered on in ufs_qcom_power_up_sequence()"
* | 71b067b6a01a Merge 6.6.72 into android15-6.6-lts
|\|
| * c2e420511612 Linux 6.6.72
| * ac7f5641e988 drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
| * 08a2117e83e5 riscv: Fix text patching when IPI are used
| * 56b274473d6e mm: hugetlb: independent PMD page table shared count
| * ec500230d39a mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
| * 5cfaddaa4bdb fs/Kconfig: make hugetlbfs a menuconfig
| * 1abe0a34aea6 pgtable: fix s390 ptdesc field comments
| * 1fd2a57dcb4d workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
| * 6dc676743a7a workqueue: Update lock debugging code
| * 2717b5e55a9f workqueue: Add rcu lock check at the end of work item execution
| * 66e533f0b250 pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
| * b1e6351c16b4 pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
| * b613a038fdd7 arm64: dts: rockchip: add hevc power domain clock to rk3328
| * be3eed59ac01 block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
| * 53e25b10a28e hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
| * a4b01371512e ARM: dts: imxrt1050: Fix clocks for mmc
| * 8efff2aa2d95 io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
| * 03753bfacbc6 riscv: kprobes: Fix incorrect address calculation
| * 6a96af5f309d iio: adc: ad7124: Disable all channels at probe time
| * 91dd568e3ff9 iio: inkern: call iio_device_put() only on mapped devices
| * 09e067e3c83e iio: adc: at91: call input_free_device() on allocated iio_dev
| * f110a6d71bd8 iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
| * 2df664d7b4f2 iio: gyro: fxas21002c: Fix missing data update in trigger handler
| * 455df95eb8f2 iio: adc: ti-ads8688: fix information leak in triggered buffer
| * 5a95fbbecec7 iio: adc: rockchip_saradc: fix information leak in triggered buffer
| * cde312e257b5 iio: imu: kmx61: fix information leak in triggered buffer
| * a15ea87d4337 iio: light: vcnl4035: fix information leak in triggered buffer
| * 74058395b2c6 iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
| * fefb88a4da96 iio: pressure: zpa2326: fix information leak in triggered buffer
| * ea57f0bbe225 usb: gadget: configfs: Ignore trailing LF for user strings to cdev
| * ea6a14987424 usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
| * 88cdfe9f15d5 usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm()
| * c1e7ced99da9 usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
| * dcd4de31bd01 usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe()
| * 43c204b22dd8 usb: gadget: midi2: Reverse-select at the right place
| * 953dea074bc5 usb: fix reference leak in usb_new_device()
| * 730016e0b963 USB: core: Disable LPM only for non-suspended ports
| * 77af0434807b USB: usblp: return error when setting unsupported protocol
| * 7c3f7c3caa35 usb: dwc3-am62: Disable autosuspend during remove
| * 0a3a87221418 x86/fpu: Ensure shadow stack is active before "getting" registers
| * 0c50f00cc299 usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
| * 0231ecfb1f7a tty: serial: 8250: Fix another runtime PM usage counter underflow
| * 12f950a6a1c1 misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
| * 25692750c025 misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
| * b02cf1d27e46 topology: Keep the cpumask unchanged when printing cpumap
| * c995c81b2a30 usb: dwc3: gadget: fix writing NYET threshold
| * 05da04bbf3b9 USB: serial: cp210x: add Phoenix Contact UPS Device
| * 138655dd9ebe usb-storage: Add max sectors quirk for Nokia 208
| * e5c87f33b514 staging: iio: ad9832: Correct phase range check
| * 4c04529c77d5 staging: iio: ad9834: Correct phase range check
| * 8166f38c8099 USB: serial: option: add Neoway N723-EA support
| * 2dcb6368adf5 USB: serial: option: add MeiG Smart SRM815
| * 12caa73a28f0 dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
| * 8dddc12d0324 f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
| * e3ed5a14aac7 io_uring/timeout: fix multishot updates
| * 3ce08bab0105 drm/amd/display: increase MAX_SURFACES to the value supported by hw
| * fa6bc7263061 drm/amdkfd: fixed page fault when enable MES shader debugger
| * 55ee64816bd5 ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
| * b239a3867d58 ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
| * f48f060a4b36 riscv: Fix sleeping in invalid context in die()
| * 5fe671caedc2 smb: client: sync the root session and superblock context passwords before automounting
| * d2512434f4cf thermal: of: fix OF node leak in of_thermal_zone_find()
| * ae9ab63a268b drm/amd/display: Add check for granularity in dml ceil/floor helpers
| * 59d28c133e71 ksmbd: Implement new SMB3 POSIX type
| * 284a221f8fa5 sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
| * 55627918febd sctp: sysctl: udp_port: avoid using current->nsproxy
| * 7ec30c54f339 sctp: sysctl: auth_enable: avoid using current->nsproxy
| * dc9d0e3cfd16 sctp: sysctl: rto_min/max: avoid using current->nsproxy
| * ad673e514b27 sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
| * c0e394fd6b88 mptcp: sysctl: sched: avoid using current->nsproxy
| * a57ce97c1978 dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
| * 086136ad70c5 scsi: ufs: qcom: Power off the PHY if it was already powered on in ufs_qcom_power_up_sequence()
| * 6b305e98de0d dm thin: make get_first_thin use rcu-safe list first function
| * a4a7ac3d2660 riscv: mm: Fix the out of bound issue of vmemmap address
| * 387f5b8ad3ff cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu
| * 65b31b9d992c ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
| * 5cc621085e2b platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
| * 7673030efe0f afs: Fix the maximum cell name length
| * 271ae0edbfc9 ksmbd: fix a missing return value check bug
| * 5b195e6f8bde drm/mediatek: Add return value check when reading DPCD
| * 5352901f0bf1 drm/mediatek: Fix mode valid issue for dp
| * 9db527726634 drm/mediatek: Fix YCbCr422 color format issue for DP
| * acefaa6993eb drm/mediatek: stop selecting foreign drivers
| * 7083b93e9755 drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
| * 229cc1028437 net/mlx5: Fix variable not being completed when function returns
| * 235419f0956e net: stmmac: dwmac-tegra: Read iommu stream id from device tree
| * 27202e2e8721 sched: sch_cake: add bounds checks to host bulk flow fairness counts
| * d5807dd1328b netfilter: conntrack: clamp maximum hashtable size to INT_MAX
| * 1e3f5638c96b netfilter: nf_tables: imbalance in flowtable binding
| * 281855205a7c iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
| * e026530e20e7 x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()
| * 85e4923bcbcd memblock tests: fix implicit declaration of function 'numa_valid_node'
| * b0b415f1a29d riscv: Fix early ftrace nop patching
| * 52a6d4f16e5b tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
| * b455f050709a Bluetooth: btnxpuart: Fix driver sending truncated data
| * 327bd191bb44 Bluetooth: MGMT: Fix Add Device to responding before completing
| * 9ba06f078f33 Bluetooth: hci_sync: Fix not setting Random Address when required
| * eff2cd6f53a5 eth: gve: use appropriate helper to set xdp_features
| * ba9f7c16ec87 ipvlan: Fix use-after-free in ipvlan_get_iflink().
| * 7397fa36d676 tls: Fix tls_sw_sendmsg error handling
| * a78e04e0236b igc: return early when failing to read EECD register
| * 30254c85b814 igc: field get conversion
| * 0677b13dd9b0 ice: fix incorrect PHY settings for 100 GB/s
| * 9d3884f303b0 cxgb4: Avoid removal of uninserted tid
| * 70163207b57b bnxt_en: Fix possible memory leak when hwrm_req_replace fails
| * b7e540c52137 pds_core: limit loop over fw name list
| * 24b85a8b0310 btrfs: avoid NULL pointer dereference if no valid extent tree
| * a8fbf80c4ff5 net: libwx: fix firmware mailbox abnormal return
| * e54beb9aed2a net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
| * 91f89fe177a4 tcp/dccp: allow a connection when sk_max_ack_backlog is zero
| * b2c9204e21b5 tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
| * 41d2e3be0f28 net: 802: LLC+SNAP OID:PID lookup on start of skb data
| * 45ae076dac49 ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
| * 6c37547a6eeb selftests/alsa: Fix circular dependency involving global-timer
| * 3d736856e245 ASoC: mediatek: disable buffer pre-allocation
| * 6754f5473dab ASoC: rt722: add delay time to wait for the calibration procedure
| * 14f030a807dd erofs: fix PSI memstall accounting
| * 1bf7e414cac3 erofs: handle overlapped pclusters out of crafted images properly
| * a1a541fbfa7e ovl: support encoding fid from inode with no alias
| * a3f8a2b13a27 ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
| * 26423e18cd6f ovl: do not encode lower fh with upper sb_writers held
| * 1e92afe80197 exfat: fix the infinite loop in __exfat_free_cluster()
| * dc1d7afceb98 exfat: fix the infinite loop in exfat_readdir()
| * 71f4123cf2c7 dm array: fix cursor index when skipping across block boundaries
| * 14f0e64c2f11 dm array: fix unreleased btree blocks on closing a faulty array cursor
| * 6002bec5354f dm array: fix releasing a faulty array block twice in dm_array_cursor_end
| * a71e465f69be jbd2: flush filesystem device before updating tail sequence
| * 6b32ff20d16a jbd2: increase IO priority for writing revoke records
| * fdebee5c5c2b memblock: use numa_valid_node() helper to check for invalid node ID
| * 4ddb7f966f3d memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
* | 640d946981a1 Merge 6.6.71 into android15-6.6-lts
|\|
| * 843e64492a7e Linux 6.6.71
| * a6923798e471 x86/hyperv: Fix hv tsc page based sched_clock for hibernation
| * b34e805539da Revert "x86, crash: wrap crash dumping code into crash related ifdefs"
| * c8bc44c5f961 Revert "x86/hyperv: Fix hv tsc page based sched_clock for hibernation"
* | 6ddca1554dc0 Revert "tracing: Move readpos from seq_buf to trace_seq"
* | 0ed0d8bbf268 Revert "xhci: retry Stop Endpoint on buggy NEC controllers"
* | 9ae20bdc77ab Revert "usb: xhci: Limit Stop Endpoint retries"
* | 4e117eced9ba Revert "xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic"
* | eef651fa3a45 Revert "usb: typec: ucsi: add callback for connector status updates"
* | 161ef03547ba Revert "usb: typec: ucsi: glink: move GPIO reading into connector_status callback"
* | 28d4b6af0230 Revert "usb: typec: ucsi: add update_connector callback"
* | 07b3f1737a18 Revert "usb: typec: ucsi: glink: set orientation aware if supported"
* | d3e5804ce24d Revert "usb: typec: ucsi: glink: be more precise on orientation-aware ports"
* | 04ccc9c6bedc Revert "seq_buf: Introduce DECLARE_SEQ_BUF and seq_buf_str()"
* | 809520ac2359 Revert "seq_buf: Make DECLARE_SEQ_BUF() usable"
* | b39e88afd99c Revert "tracing: Handle old buffer mappings for event strings and functions"
* | ba3cbed1a4d3 Revert "tracing: Fix trace_check_vprintf() when tp_printk is used"
* | f04571686e44 Revert "tracing: Check "%s" dereference via the field and not the TP_printk format"
* | eaa8023f31c4 Merge 6.6.70 into android15-6.6-lts
|\|
| * 1acb10106df3 Linux 6.6.70
| * 9722973ad038 scsi: hisi_sas: Remove redundant checks for automatic debugfs dump
| * 3de1b50f055d RDMA/bnxt_re: Fix max SGEs for the Work Request
| * f61e663d78ff mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
| * 27c843e76447 mptcp: fix recvbuffer adjust on sleeping rcvmsg
| * 53fe947f67c9 mptcp: fix TCP options overflow.
| * 1ff2302e8aea mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
| * 86d946f3f999 mm/kmemleak: fix sleeping function called from invalid context at print message
| * 424abdec35ec mm/readahead: fix large folio support in async readahead
| * cbe9eb2c39d0 gve: guard XDP xmit NDO on existence of xdp queues
| * 771d66f2bd8c gve: guard XSK operations on the existence of queues
| * 9b071576f891 fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
| * 1f49aaf55652 drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
| * 79fcfc900abe dt-bindings: display: adi,adv7533: Drop single lane support
| * 7b977f8c26b6 drm: adv7511: Drop dsi single lane support
| * 271f031f4c31 net/sctp: Prevent autoclose integer overflow in sctp_association_init()
| * b32c3b748d29 sky2: Add device ID 11ab:4373 for Marvell 88E8075
| * 8c6fd5803b98 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
| * b92667f75574 RDMA/uverbs: Prevent integer overflow issue
| * c9818b61d0a8 scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
| * edc8ece96c11 kcov: mark in_softirq_really() as __always_inline
| * 2e3d203b1ade ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
| * d2392b79d8af ALSA: seq: oss: Fix races at processing SysEx messages
| * 7d1f59defa9e ALSA hda/realtek: Add quirk for Framework F111:000C
| * 396964d45ca5 ALSA: seq: Check UMP support for midi_version change
| * 199f04528737 Revert "bpf: support non-r10 register spill/fill to/from stack in precision tracking"
| * bc6962f2dbaf modpost: fix the missed iteration for the max bit in do_input()
| * f93e9ae0ba5e modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
| * 36e1b6890f22 RDMA/bnxt_re: Fix the max WQE size for static WQE support
| * c3b5a7d6a13b seq_buf: Make DECLARE_SEQ_BUF() usable
| * f2b94ee08ec6 ARC: build: Try to guess GCC variant of cross compiler
| * d8f3f7d30f65 irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
| * bef333418368 Bluetooth: hci_core: Fix sleeping function called from invalid context
| * d8ecb248c199 net: usb: qmi_wwan: add Telit FE910C04 compositions
| * c6b1d01e7a9c smb: client: destroy cfid_put_wq on module exit
| * 1d7ee876b8b9 ksmbd: set ATTR_CTIME flags when setting mtime
| * 2f75da8294bf ksmbd: retry iterate_dir in smb2_query_dir
| * f53b37313ab6 bpf: fix potential error return
| * 73a30cb3e980 sound: usb: format: don't warn that raw DSD is unsupported
| * 325370be0676 sound: usb: enable DSD output for ddHiFi TC44C
| * 7523dd63ab22 ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
| * 0d5e2d476000 ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
| * 35916b2f9650 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
| * d0fafe701c6a drm/amdkfd: Correct the migration DMA map direction
| * 037ea0f28f9a wifi: mac80211: wake the queues in case of failure in resume
| * 86772872f9f5 wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
| * d6b130fabfe1 net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
| * 17e8fa894345 ila: serialize calls to nf_register_net_hooks()
| * a693b87692b4 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
| * 7aa78d0d8546 af_packet: fix vlan_get_tci() vs MSG_PEEK
| * 23f2e7a13fa4 net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
| * ad91a2dacbf8 net: restrict SO_REUSEPORT to inet sockets
| * 95ccf006bbc8 net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
| * 9eea3703c882 net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
| * b238f61cc394 RDMA/rtrs: Ensure 'ib_sge list' is accessible
| * 0cd3bde081cd net: wwan: t7xx: Fix FSM command timeout issue
| * 313474b10897 net: mv643xx_eth: fix an OF node reference leak
| * d5ea3a4d02d8 eth: bcmsysport: fix call balance of priv->clk handling routines
| * 930f2f96734e ALSA: usb-audio: US16x08: Initialize array before use
| * 0c896816aa19 net: llc: reset skb->transport_header
| * 4f49349c1963 netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
| * c9b344ada5fd drm/i915/dg1: Fix power gate sequence.
| * 3e45dd1622a2 net/mlx5e: Skip restore TC rules for vport rep without loaded flag
| * e66a99b9177b net/mlx5e: macsec: Maintain TX SA from encoding_sa
| * 43e589ab372f net/mlx5: DR, select MSIX vector 0 for completion queue creation
| * f647d72245aa netrom: check buffer length before accessing it
| * 36eff8669b74 net: Fix netns for ip_tunnel_init_flow()
| * 7e9aa1a065dc ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
| * 3b1a7fb74ab1 ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
| * ae0710c5cc74 ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
| * 77b1e00fe97e ip_tunnel: annotate data-races around t->parms.link
| * 2af69905180b net: fix memory leak in tcp_conn_request()
| * c6870f86bde6 net: stmmac: restructure the error path of stmmac_probe_config_dt()
| * 6d01d9f66ae1 net: stmmac: don't create a MDIO bus if unnecessary
| * 48f63e4e64a5 RDMA/hns: Fix missing flush CQE for DWQE
| * be4293e108e2 RDMA/hns: Fix warning storm caused by invalid input in IO path
| * 2746888be48c RDMA/hns: Fix mapping error of zero-hop WQE buffer
| * 2049fb6c8bd7 RDMA/hns: Remove unused parameters and variables
| * 363f502cbfc0 RDMA/hns: Refactor mtr find
| * ca2a2cad4efb net: dsa: microchip: Fix LAN937X set_ageing_time function
| * 7583dd5928b6 net: dsa: microchip: Fix KSZ9477 set_ageing_time function
| * fa7f96589f17 drm/bridge: adv7511_audio: Update Audio InfoFrame properly
| * f28fa7625536 RDMA/bnxt_re: Fix the locking while accessing the QP table
| * cd1547b49b2c RDMA/bnxt_re: Fix MSN table size for variable wqe mode
| * 2e719d89b9fa RDMA/bnxt_re: Add send queue size check for variable wqe
| * 3ae9ee7ff3b2 RDMA/bnxt_re: Disable use of reserved wqes
| * bb46a484a0c6 RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
| * 9fcfe972758b RDMA/bnxt_re: Fix max_qp_wrs reported
| * 38b49312da2d RDMA/bnxt_re: Fix reporting hw_ver in query_device
| * 14f66ac898c9 RDMA/bnxt_re: Add check for path mtu in modify_qp
| * 183a96174cab RDMA/bnxt_re: Fix the check for 9060 condition
| * 347654387bb1 nvme-pci: 512 byte aligned dma pool segment quirk
| * a0ceed736c88 RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
| * a5092b138e1c RDMA/bnxt_re: Avoid initializing the software queue for user queues
| * 25e6e9da6926 RDMA/mlx5: Enforce same type port association for multiport RoCE
| * 5d1d7522cf82 RDMA/bnxt_re: Remove always true dattr validity check
| * c91ae7c12d6f RDMA/bnxt_re: Allow MSN table capability check
| * f452f397f9a6 tracing: Check "%s" dereference via the field and not the TP_printk format
| * 55841e8820b9 tracing: Fix trace_check_vprintf() when tp_printk is used
| * 680c07fabc2b tracing: Handle old buffer mappings for event strings and functions
| * 6920e362bc08 seq_buf: Introduce DECLARE_SEQ_BUF and seq_buf_str()
| * cd27bbe89810 powerpc: Remove initialisation of readpos
| * c46547b4686e tracing: Move readpos from seq_buf to trace_seq
| * 1ec141d8f51b net: mctp: handle skb cleanup on sock_queue failures
| * c47ed91156da ceph: give up on paths longer than PATH_MAX
| * a64e5295ebc4 tracing: Have process_string() also allow arrays
| * de2a10e19226 mmc: sdhci-msm: fix crypto key eviction
| * 6228f13f1996 btrfs: fix use-after-free in btrfs_encoded_read_endio()
| * c1dbd28a0795 selinux: ignore unknown extended permissions
| * c2a7fc514637 f2fs: fix to wait dio completion
| * 23ea763880d6 platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
| * d4eb5b3c115d ALSA: ump: Shut up truncated string warning
| * 8b2e38f2a9b7 usb: xhci: Avoid queuing redundant Stop Endpoint commands
| * 8a2273e5c1be usb: typec: ucsi: glink: fix off-by-one in connector_status
| * a47f0b03149a scsi: hisi_sas: Fix a deadlock issue related to automatic dump
| * 8c5ad189e90f cleanup: Remove address space of returned pointer
| * 55779f26eab9 crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes
| * 9457d783fb94 Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
| * 3aab20eb1989 Bluetooth: btusb: add callback function in btusb suspend/resume
| * 9a466b8693b9 btrfs: fix use-after-free when COWing tree bock and tracing is enabled
| * 0d2cc60b44d0 btrfs: rename and export __btrfs_cow_block()
| * 151447859d6f x86/fred: Clear WFE in missing-ENDBRANCH #CPs
| * 9c268be377e7 x86/ptrace: Add FRED additional information to the pt_regs structure
| * 498bdedca58a x86/ptrace: Cleanup the definition of the pt_regs structure
| * 48417c3426cf ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
| * 4252d023bae7 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
| * f5a20424084f scsi: mpi3mr: Start controller indexing from 0
| * d424303d8d18 scsi: mpi3mr: Use ida to manage mrioc ID
| * 8d891c866cf7 ALSA: ump: Update legacy substream names upon FB info update
| * 9617001adfc9 ALSA: ump: Indicate the inactive group in legacy substream names
| * cf29cbf61cf2 ALSA: ump: Don't open legacy substream for an inactive group
| * b5e175e18a39 ALSA: ump: Use guard() for locking
| * b41d73055284 udf: Verify inode link counts before performing rename
| * 17b312c5d869 udf_rename(): only access the child content on cross-directory rename
| * d33523b0beb5 watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
| * e145b77fb5c1 watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
| * 7ea100fb50bb watchdog: rzg2l_wdt: Remove reset de-assert from probe
| * b222816f9c43 of: address: Preserve the flags portion on 1:1 dma-ranges mapping
| * 443f803b332b of: address: Store number of bus flag cells rather than bool
| * 7a40a884f597 of: address: Remove duplicated functions
| * 6681113633dc x86/hyperv: Fix hv tsc page based sched_clock for hibernation
| * e5b1574a8ca2 x86, crash: wrap crash dumping code into crash related ifdefs
| * 5422f4321640 thunderbolt: Don't display nvm_version unless upgrade supported
| * 5a23e3e9e245 thunderbolt: Add support for Intel Panther Lake-M/P
| * 888c554d3dfd thunderbolt: Add support for Intel Lunar Lake
| * 6cd8e621a689 xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
| * f1ece345ad2c usb: xhci: Limit Stop Endpoint retries
| * 61329b25dc1d xhci: retry Stop Endpoint on buggy NEC controllers
| * 43e3aa2f44d6 net: renesas: rswitch: fix possible early skb release
| * 3dd65ffa2df6 softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
| * d6616dcd8721 net/mlx5: unique names for per device caches
| * ddcc7d71be31 Revert "nvme: make keep-alive synchronous operation"
| * 801acf741c87 nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
| * 2c276bef8273 usb: typec: ucsi: glink: be more precise on orientation-aware ports
| * 7723988b0127 usb: typec: ucsi: glink: set orientation aware if supported
| * 01059e0b5cc0 usb: typec: ucsi: add update_connector callback
| * fd662c37a108 usb: typec: ucsi: glink: move GPIO reading into connector_status callback
| * 8dd7fc5e409b usb: typec: ucsi: add callback for connector status updates
| * c47940e84398 iio: adc: ad7192: properly check spi_get_device_match_data()
| * 843b5d1602d6 iio: adc: ad7192: Convert from of specific to fwnode property handling
| * f7d548a62f08 usb: chipidea: udc: limit usb request length to max 16KB
| * 7a2020e83b6a usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
| * c39df6d3af2d usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag
| * c2556801583c fs/ntfs3: Fix warning in ni_fiemap
| * 48ebb93f933d fs/ntfs3: Implement fallocate for compressed files
| * 171c40531b04 remoteproc: qcom: pas: enable SAR2130P audio DSP support
| * b506a0c41411 remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
| * 25804f9b492b remoteproc: qcom: pas: Add sc7180 adsp
| * 3c9d3157f3cc mailbox: pcc: Check before sending MCTP PCC response ACK
| * d8c0f38208a4 ACPI: PCC: Add PCC shared memory region command and status bitfields
| * 4460b5236818 i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros
| * dcc02c9ebfe8 mailbox: pcc: Support shared interrupt for multiple subspaces
| * 605018764e21 mailbox: pcc: Add support for platform notification handling
| * 82461d89c849 clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
| * deff81f56dff clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure
| * 7c8c50c9855a scsi: hisi_sas: Create all dump files during debugfs initialization
| * 044928679823 scsi: hisi_sas: Allocate DFX memory during dump trigger
| * 91e035e98fa1 scsi: hisi_sas: Directly call register snapshot instead of using workqueue
| * 4f4fe3db92bb Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
| * f8a67ffb96c9 Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
| * 1e7b1a8e7b6e Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
| * e612c16ed0b7 Bluetooth: Add support ITTIM PE50-M75C
| * ca4e69826d67 Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
| * 6e6a3479986a i2c: i801: Add support for Intel Panther Lake
| * f38ca98b0721 i2c: i801: Add support for Intel Arrow Lake-H
| * b35de9e01fc7 wifi: ath10k: avoid NULL pointer error during sdio remove
| * 358c36eae58d wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights
| * 3ed6b2daa4e9 wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
| * dc6094108573 wifi: mac80211: Add non-atomic station iterator
| * 4eceef729c84 wifi: ath12k: Optimize the mac80211 hw data access
| * 3d94c4b21966 wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
| * 24b5898a8c73 wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
| * ed01e57a8169 media: uvcvideo: Force UVC version to 1.0a for 0408:4033
| * 9471b8f80526 media: uvcvideo: Force UVC version to 1.0a for 0408:4035
| * 8fa6f680b5aa cleanup: Adjust scoped_guard() macros to avoid potential warning
| * 873df38bdf42 cleanup: Add conditional guard support
| * 4b6beff3c073 crypto: ecdsa - Avoid signed integer overflow on signature decoding
| * ec6488917941 crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
| * 1afc7acbedb8 crypto: ecdsa - Rename keylen to bufsize where necessary
| * e7fcd5d696c4 crypto: ecdsa - Convert byte arrays with key coordinates to digits
| * 93011887013d ext4: partial zero eof block on unaligned inode size extension
| * fa42d5f1327f ext4: convert to new timestamp accessors
| * 1864d4712c4b memblock: allow zero threshold in validate_numa_converage()
| * 6fdc770506eb NUMA: optimize detection of memory with no node id assigned by firmware
| * 3adf89f17dbd sched: Initialize idle tasks only once
| * 106740e978c7 usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic
| * 39619c65ab4b smb: client: fix use-after-free of signing key
| * d7cb986425ce smb: client: stop flooding dmesg in smb2_calc_signature()
| * 5f36890d650c fs/smb/client: implement chmod() for SMB3 POSIX Extensions
| * d64429042fef smb/client: rename cifs_ace to smb_ace
| * 298e73ac323a smb/client: rename cifs_acl to smb_acl
| * 46c22d37f691 smb/client: rename cifs_sid to smb_sid
| * 386660bd303e smb/client: rename cifs_ntsd to smb_ntsd
| * 8322a66f9369 x86/mm: Carve out INVLPG inline asm for use by others
| * bffaf4cb2810 docs: media: update location of the media patches
| * e8b8c1ecbd2c drm/amd/display: Fix incorrect DSC recompute trigger
| * 3f9f631f9b91 drm/amd/display: Fix DSC-re-computing
* | 29f519344046 Revert "tracing: Constify string literal data member in struct trace_event_call"
* | b21f85763470 Merge 6.6.69 into android15-6.6-lts
|\|
| * a30cd70ab75a Linux 6.6.69
| * ee18012c8015 block: avoid to reuse `hctx` not removed from cpuhp callback list
| * 937fcde0e971 ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
| * ff4dff0bbe79 x86/cpu/intel: Drop stray FAM6 check with new Intel CPU model defines
| * 0098f6a62ac7 ALSA: sh: Fix wrong argument order for copy_from_iter()
| * 1ce362065899 btrfs: sysfs: fix direct super block member reads
| * 6e1a82259307 btrfs: avoid monopolizing a core when activating a swap file
| * 13eb3cae1d8e power: supply: gpio-charger: Fix set charge current limits
| * c484dbafbae9 i2c: microchip-core: fix "ghost" detections
| * e1cc0e256092 i2c: imx: add imx7d compatible string for applying erratum ERR007805
| * b1f7476e07b9 PCI/MSI: Handle lack of irqdomain gracefully
| * 3f66c65f6525 i2c: microchip-core: actually use repeated sends
| * 80120bb4eef7 io_uring/sqpoll: fix sqpoll error handling races
| * 03041e474a6a tracing: Prevent bad count for tracing_cpumask_write
| * dafa7332e7c0 tracing: Constify string literal data member in struct trace_event_call
| * c1a26ea77f81 freezer, sched: Report frozen tasks as 'D' instead of 'R'
| * 60b57dc761d3 drm/amdkfd: pause autosuspend when creating pdd
| * 4312b60fa7ac drm/amdkfd: Use device based logging for errors
| * 9f7042ffc7f3 drm/amdkfd: drop struct kfd_cu_info
| * 798f21e8a655 drm/amdkfd: reduce stack size in kfd_topology_add_device()
| * 8406848671ce x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation
| * fe48d03286b2 x86/cpu/intel: Switch to new Intel CPU model defines
| * d7ac1856b6ec x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h
| * cb3491e875f6 x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86
| * f3a3192993da x86/cpu: Add model number for another Intel Arrow Lake mobile processor
| * 224d693c9203 x86/cpu: Add model number for Intel Clearwater Forest processor
| * 14172f8e9485 drm/amdgpu/hdp6.0: do a posting read when flushing HDP
| * c9ad5cbf2495 drm/amdgpu/hdp5.0: do a posting read when flushing HDP
| * f60770d660dc drm/amdgpu/hdp4.0: do a posting read when flushing HDP
| * a9cb2cc5b8b5 drm/amd/amdgpu: allow use kiq to do hdp flush under sriov
| * 36a6e8aeae4a pmdomain: core: Add missing put_device()
| * 13ced1c4980e ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
| * 31fc2ce99308 ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i
| * 2d2b19ed4169 sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
| * 1258986bbd17 MIPS: mipsregs: Set proper ISA level for virt extensions
| * 37ee3b66eb62 MIPS: Probe toolchain support of -msym32
| * 58bf93580fec blk-mq: move cpuhp callback registering out of q->sysfs_lock
| * 079fcc926b0b blk-mq: register cpuhp callback after hctx is added to xarray table
* | 3234ad500534 ANDROID: GKI: virtual_device: add blk_mq_quiesce_queue_nowait to the symbol list.
* | e3d74b9e2419 Reapply "virtio-blk: don't keep queue frozen during system suspend"
* |   0f8bfbc30e51 Merge 908806a2e789 ("phy: rockchip: naneng-combphy: fix phy reset") into android15-6.6-lts
|\ \
* \ \   53a0e98109cd Merge 9735d40f5fde ("drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()") into android15-6.6-lts
|\ \ \
* | | | cd645a42619b Revert "virtio-blk: don't keep queue frozen during system suspend"
* | | |   3e3d472df244 Merge 12c0ddd6c551 ("virtio-blk: don't keep queue frozen during system suspend") into android15-6.6-lts
|\ \ \ \
| | |_|/
| |/| |
| * | | 12c0ddd6c551 virtio-blk: don't keep queue frozen during system suspend
| |/ /
| * | 9735d40f5fde drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
| * | 5edf9f786a18 spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
| * | 3556af9a68af scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
| * | cf4bea16bb6d scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
| * | cecca8b42063 spi: intel: Add Panther Lake SPI controller support
| * | eb9b647a6834 platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
| * | 4eb54230b0ba LoongArch: BPF: Adjust the parameter of emit_jirl()
| * | 5fc47124442d LoongArch: Fix reserving screen info memory for above-4G firmware
| * | 5e448ea8df48 regmap: Use correct format specifier for logging range errors
| * | 3ad1feaa0bd0 smb: server: Fix building with GCC 15
| * | 7dbf2af85cd3 ALSA: sh: Use standard helper for buffer accesses
| * | 39c860c96c64 ALSA: hda/conexant: fix Z60MR100 startup pop issue
| * | 3dea3c59c4bd udf: Skip parent dir link count update if corrupted
| * | f50783148ec9 scsi: megaraid_sas: Fix for a potential deadlock
| * | fbd7deb459b2 scsi: qla1280: Fix hw revision numbering for ISP1020/1040
| * | ab9ae7e789ab watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
| * | e64809e8754a watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
| * | d4d67fa7158d tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
| * | 23681bc4b59f stddef: make __struct_group() UAPI C++-friendly
| * | b7f60ffdfd96 powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
| * | dd45c8778273 mtd: rawnand: fix double free in atmel_pmecc_create_user()
| * | e658f1c133b8 dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
| * | aa2381a1ea39 dmaengine: apple-admac: Avoid accessing registers in probe
| * | 34d2c9c6de73 dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
| * | f2705359161f dmaengine: tegra: Return correct DMA status when paused
| * | 8cf5aa06d074 dmaengine: dw: Select only supported masters for ACPI devices
| * | 7f92f287b0fa dmaengine: mv_xor: fix child node refcount handling in early exit
| |/
| * 908806a2e789 phy: rockchip: naneng-combphy: fix phy reset
| * 96173874d6b8 phy: usb: Toggle the PHY power during init
| * 94dd7d0665ec phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
| * 216b9f8335b5 phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
| * 58068f8b7a55 phy: core: Fix that API devm_phy_put() fails to release the phy
| * 80a6eeb3a73a phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
| * 293b3748abab phy: core: Fix an OF node refcount leakage in _of_phy_get()
| * 826acec1a9f9 phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
| * 36094da8b402 mtd: rawnand: arasan: Fix missing de-registration of NAND
| * 649ba9c1712b mtd: rawnand: arasan: Fix double assertion of chip-select
| * 3970d6b335fb mtd: diskonchip: Cast an operand to prevent potential overflow
| * 15c184b4e7cf nfsd: restore callback functionality for NFSv4.0
| * 488304065d0d nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
| * 0326fbf69311 bpf: Check negative offsets in __bpf_skb_min_len()
| * 343a932a05f4 tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
| * 9dbc7e0e5ce5 tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
| * 9ef08c3fe764 mm/vmstat: fix a W=1 clang compiler warning
| * d41fa58fca6f ceph: allocate sparse_ext map only for sparse reads
| * 44e518abbb49 ceph: fix memory leak in ceph_direct_read_write()
| * fb98248fc4a2 ceph: try to allocate a smaller extent map for sparse read
| * 1d6de21f0029 media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
* | cd5c19823300 Merge 6.6.68 into android15-6.6-lts
|\|
| * 3ee19fb278a6 Linux 6.6.68
| * fd4d53318e96 dt-bindings: net: fec: add pps channel property
| * c226b0f0d8b0 drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
| * 194532af82a1 net: fec: make PPS channel configurable
| * 897bab2abdac net: fec: refactor PPS channel configuration
| * 4cba44122663 io_uring/rw: avoid punting to io-wq directly
| * 41928840172e io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
| * 6c27fc6a783c io_uring/rw: split io_read() into a helper
| * d9831a655e13 epoll: Add synchronous wakeup support for ep_poll_callback
| * b3ab12531d0d ceph: fix memory leaks in __ceph_sync_read()
| * a07c0908e368 ceph: improve error handling and short/overflow-read logic in __ceph_sync_read()
| * f006f6eaea7b ceph: validate snapdirname option length when mounting
| * 7094f3b6df92 of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
| * a7e5dc8d5da1 of: Fix error path in of_parse_phandle_with_args_map()
| * 50c960e79921 udmabuf: also check for F_SEAL_FUTURE_WRITE
| * 284760b320a0 nilfs2: prevent use of deleted inode
| * cfb608b4cf22 nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
| * fdfa42cefba4 of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
| * dd3412f29899 of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
| * 96c9ff350476 NFS/pnfs: Fix a live lock between recalled layouts and layoutget
| * 2ca94c8de360 io_uring: check if iowq is killed before queuing
| * a73f0425f44b io_uring: Fix registered ring file refcount leak
| * 24047899f94e selftests/bpf: Use asm constraint "m" for LoongArch
| * 8b7dfdf3dbd7 selftests/memfd: run sysctl tests when PID namespace support is enabled
| * 2f6ad0b613cd tracing: Add "%s" check in test_event_printk()
| * cc2c77b35186 tracing: Add missing helper functions in event pointer dereference check
| * 452e89f1588d tracing: Fix test_event_printk() to process entire print argument
| * 906807c734ed smb: client: fix TCP timers deadlock after rmmod
| * 3d2634ec0d1d KVM: x86: Play nice with protected guests in complete_hypercall_exit()
| * 89fcec5e466b Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
| * a41ee016b5df btrfs: tree-checker: reject inline extent items with 0 ref count
| * 90ae5b7a1c52 vmalloc: fix accounting with i915
| * 0b5b0b65561b zram: fix uninitialized ZRAM not releasing backing device
| * aca0f94c25de zram: refuse to use zero sized block device as backing device
| * da61286b6512 hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
| * 7e3b14abe39a hwmon: (tmp513) Fix Current Register value interpretation
| * c680302c5eeb hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers
| * 81a3738bed1a hwmon: (tmp513) Use SI constants from units.h
| * d0823a2fe057 hwmon: (tmp513) Simplify with dev_err_probe()
| * 9d207df1282a hwmon: (tmp513) Don't use "proxy" headers
| * da6b2c626ae7 drm/amdgpu: don't access invalid sched
| * b91184b59437 i915/guc: Accumulate active runtime on gt reset
| * 7871b0d81a3b i915/guc: Ensure busyness counter increases motonically
| * b5e8103c46aa i915/guc: Reset engine utilization buffer before registration
| * 5f46feefa5ef drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
| * b39de5a71bac drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
| * d1b96495fa2a thunderbolt: Improve redrive mode handling
| * cd8fb13924b3 USB: serial: option: add Telit FE910C04 rmnet compositions
| * ec1ccad0c3b4 USB: serial: option: add MediaTek T7XX compositions
| * 996c88c81fec USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
| * eb748a5a8c59 USB: serial: option: add MeiG Smart SLM770A
| * 27921a57efaf USB: serial: option: add TCL IK512 MBIM & ECM
| * 637b6e17f11d hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
| * b72d1e64984e efivarfs: Fix error on non-existent file
| * 666c7b77d581 i2c: riic: Always round-up when calculating bus period
| * 0eba9c56d77c chelsio/chtls: prevent potential integer overflow on 32bit
| * efe74dd58a72 net: tun: fix tun_napi_alloc_frags()
| * 65fac86c3d73 KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
| * 3e84704feefe EDAC/amd64: Simplify ECC check on unified memory controllers
| * 2956429c7a4e mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
| * 4ca7a0c83100 mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
| * b15b92daf67c net: mdiobus: fix an OF node reference leak
| * 0e78c3eb72ec selftests: openvswitch: fix tcpdump execution
| * 576b58f39b0f netfilter: ipset: Fix for recursive locking warning
| * 592fc96af827 ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
| * 4dfa9a924008 net: ethernet: bgmac-platform: fix an OF node reference leak
| * 13fcc286811c net: hinic: Fix cleanup in create_rxqs/txqs()
| * 55a81dcf79bc ksmbd: fix broken transfers when exceeding max simultaneous operations
| * 8077d33fb8c8 ksmbd: count all requests in req_running counter
| * ce2fade187dd net: renesas: rswitch: rework ts tags management
| * 6cd7cad950d9 ionic: use ee->offset when returning sprom data
| * da5736f516a6 ionic: Fix netdev notifier unregister on failure
| * 470c5ecbac2f netdevsim: prevent bad user input in nsim_dev_health_break_write()
| * 2f3c62ffe881 net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
| * 7a6927814b42 net/smc: check return value of sock_recvmsg when draining clc data
| * 935caf324b44 net/smc: check smcd_v2_ext_offset when receiving proposal msg
| * 295a92e3df32 net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
| * 91a7c27c1444 net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
| * 2e0786b3006e net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
| * 2627c3e86469 net/smc: protect link down work from execute after lgr freed
| * 06518a75de0a cxl/region: Fix region creation for greater than x2 switches
| * fa299bfc1e0e cxl/pci: Fix potential bogus return value upon successful probing
| * 9557ed4dcd8f tools: hv: change permissions of NetworkManager configuration file
| * e5d1ae2d4d0b xfs: reset rootdir extent size hint after growfsrt
| * 29fcb5fef608 xfs: take m_growlock when running growfsrt
| * 35bd108619c2 xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code
| * 9fadc53d793c xfs: Fix the owner setting issue for rmap query in xfs fsmap
| * 4a82db7a4b73 xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set
| * b2dcbd8a928c xfs: attr forks require attr, not attr2
| * 27336a327b40 xfs: remove unused parameter in macro XFS_DQUOT_LOGRES
| * 1bee32f33c0a xfs: fix file_path handling in tracepoints
| * cb95cb2450e3 xfs: convert comma to semicolon
| * ca96d83c9307 xfs: don't walk off the end of a directory data block
| * fe962ab3c4f1 xfs: Fix xfs_prepare_shift() range for RT
| * 2e63ed9b0175 xfs: Fix xfs_flush_unmap_range() range for RT
| * c070b8802159 xfs: create a new helper to return a file's allocation unit
| * 7531c9ab2e55 xfs: declare xfs_file.c symbols in xfs_file.h
| * ff627196ddc1 xfs: use consistent uid/gid when grabbing dquots for inodes
| * c08d03996cea xfs: verify buffer, inode, and dquot items every tx commit
| * 85d0947db262 xfs: fix the contact address for the sysfs ABI documentation
| * e4ee7050712a i2c: pnx: Fix timeout in wait functions
| * 76b63579a904 p2sb: Do not scan and remove the P2SB device when it is unhidden
| * 3c469a528e39 p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
| * 8b64ae60f3f9 p2sb: Introduce the global flag p2sb_hidden_by_bios
| * f8c9788636f5 p2sb: Factor out p2sb_read_from_cache()
| * 9194a9214b04 platform/x86: p2sb: Make p2sb_get_devfn() return void
| * db3667c9bbfb net: stmmac: fix TSO DMA API usage causing oops
| * 43fb5b0974eb usb: cdns3: Add quirk flag to enable suspend residency
| * c7cc4152c0f4 PCI/AER: Disable AER service on suspend
| * 3e221877dd92 PCI: Use preserve_config in place of pci_flags
| * 0d1d7e0c6439 ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
| * 9a6a33eb6be3 ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
| * dbdee8456aa8 MIPS: Loongson64: DTS: Fix msi node for ls7a
| * d10b8db9907e usb: cdns3-ti: Add workaround for Errata i2409
| * 25f760c9ecfd PCI: Add ACS quirk for Broadcom BCM5760X NIC
| * db7d50a5d7c4 PCI: vmd: Create domain symlink before pci_bus_add_devices()
| * 4f3cb0f96a2a usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
| * 97e13434b5da net: sched: fix ordering of qlen adjustment
* | a742226fa135 Merge 6.6.67 into android15-6.6-lts
|\|
| * ab6cc4ef42d6 Linux 6.6.67
| * e68cbbef3d6f x86/static-call: fix 32-bit build
| * 44a7b0419d35 ALSA: usb-audio: Fix a DMA to stack memory bug
| * bcf0e2fda80c x86/xen: remove hypercall page
| * bcca7e067909 x86/xen: use new hypercall functions instead of hypercall page
| * 31f29270c15b x86/xen: add central hypercall functions
| * 82c211ead1ec x86/xen: don't do PV iret hypercall through hypercall page
| * cd95149561d5 x86/static-call: provide a way to do very early static-call updates
| * 8fb54fe2e709 objtool/x86: allow syscall instruction
| * aac984c87ef8 x86: make get_cpu_vendor() accessible from Xen code
| * fe9a8f5250ae xen/netfront: fix crash when removing device
| * 4a41bb9f2b40 net: rswitch: Avoid use-after-free in rswitch_poll()
| * 9f7a9f95dfb7 selftests/bpf: remove use of __xlated()
| * ce444a00414a selftests/bpf: Add netlink helper library
| * 3a7d88f9814a tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
| * bfe9446ea1d9 bpf: sync_linked_regs() must preserve subreg_def
| * 4e76efda1f0a KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
| * e2ccaf2d0eb5 kselftest/arm64: abi: fix SVCR detection
| * 4a542118457d blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
| * ee11eaa15132 net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
| * f5fcb1ff9f46 net: renesas: rswitch: fix initial MPIC register setting
| * ecdcaea0e405 Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
| * 3bf09c685e1b Bluetooth: SCO: Add support for 16 bits transparent voice setting
| * 263b390a826f Bluetooth: iso: Fix recursive locking warning
| * 0108132d7d76 Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
| * 11dc486ed5d4 Bluetooth: ISO: Reassociate a socket with an active BIS
| * 81c4b9529ed8 ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
| * c6c217c6e28a team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
| * 679b5884e61d bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
| * 3824c5fad18e net/sched: netem: account for backlog updates from child qdisc
| * 72dc88eca723 net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
| * 27f0574253f6 netfilter: nf_tables: do not defer rule destruction via call_rcu
* | 04852003c6e3 Merge 8c2c8445cda8 ("netfilter: IDLETIMER: Fix for possible ABBA deadlock") into android15-6.6-lts
|\|
| * 8c2c8445cda8 netfilter: IDLETIMER: Fix for possible ABBA deadlock
* | c2394b87da49 Merge 01b2c761503b ("net: renesas: rswitch: handle stop vs interrupt race") into android15-6.6-lts
|\|
| * 01b2c761503b net: renesas: rswitch: handle stop vs interrupt race
| * bf8c6755f020 net: renesas: rswitch: avoid use-after-put for a device tree node
| * 78aa0aabb093 net: renesas: rswitch: fix leaked pointer on error path
| * 0c316b6e0aef net: renesas: rswitch: fix race window between tx start and complete
| * af327c0f41d6 net: rswitch: Add jumbo frames handling for TX
| * 87388cbe9330 net: rswitch: Add a setting ext descriptor function
| * 0aeec4bb6a9f net: rswitch: Add unmap_addrs instead of dma address in each desc
| * 99ee2eb6e0fe net: rswitch: Use build_skb() for RX
| * ad4bd2c039fb net: rswitch: Use unsigned int for desc related array index
| * 2a584b1443bd net: rswitch: Drop unused argument/return value
* | 5720652b31fa Merge f789f9d1af40 ("Documentation: PM: Clarify pm_runtime_resume_and_get() return value") into android15-6.6-lts
|\|
| * f789f9d1af40 Documentation: PM: Clarify pm_runtime_resume_and_get() return value
| * 5b8ea6b89f92 ASoC: amd: yc: Fix the wrong return value
| * d5a1ca7b5980 ALSA: control: Avoid WARN() for symlink errors
| * 131798aea9ae qca_spi: Make driver probing reliable
| * ebaf832f1e22 qca_spi: Fix clock speed for multiple QCA7000
| * 3942f0b0d652 cxgb4: use port number to set mac addr
| * ae5fab215f9c ACPI: resource: Fix memory resource type union access
| * 0d9344165273 net: sparx5: fix the maximum frame length register
| * ad74e16b351d net: sparx5: fix FDMA performance issue
| * f1d6afbe1ecd spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
| * 8e9b5e14e5b9 net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
| * 3b3277267d7b net: mscc: ocelot: be resilient to loss of PTP packets during transmission
| * 5f2c6930c689 net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe
| * 7f42e62a6e9f net: mscc: ocelot: improve handling of TX timestamp for unknown skb
| * d275b713496e net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
* | 1aec76e636bf Revert "net: defer final 'struct net' free in netns dismantle"
* | 062f7d060ff7 Merge b7a79e51297f ("net: defer final 'struct net' free in netns dismantle") into android15-6.6-lts
|\|
| * b7a79e51297f net: defer final 'struct net' free in netns dismantle
* | d79b9f90fdd5 Merge 03e661b5e7aa ("net: lapb: increase LAPB_HEADER_LEN") into android15-6.6-lts
|\|
| * 03e661b5e7aa net: lapb: increase LAPB_HEADER_LEN
* | 98ba54910db3 Merge 74f0a6912926 ("ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()") into android15-6.6-lts
|/
* 74f0a6912926 ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
* 03528ff8de66 selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
* c9776bd1422e selftests: mlxsw: sharedbuffer: Remove duplicate test cases
* 2be4018f4ce1 selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
* bd7ddc5f921d wifi: cfg80211: sme: init n_channels before channels[] access
* 325cf73a1b44 net/mlx5: DR, prevent potential error pointer dereference
* 89ecda492d0a tipc: fix NULL deref in cleanup_bearer()
* 4a9a7f9f745d batman-adv: Do not let TT changes list grows indefinitely
* fd0638fa60e6 batman-adv: Remove uninitialized data in full table TT response
* b2b6ecc29204 batman-adv: Do not send uninitialized TT changes
* 86106974d0a8 amdgpu/uvd: get ring reference from rq scheduler
* e08dc2dc3c3f acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
* 567df47c3e45 wifi: mac80211: fix station NSS capability initialization order
* c32db61989af wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
* c07923459935 wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
* f3412522f788 wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
* a574145ef474 rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
* dbec5b420397 bpf, sockmap: Fix update element with same
* b015f19fedd2 bpf, sockmap: Fix race between element replace and close()
* c2b6b47662d5 bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
* 68d23ee1bdf1 bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
* c7e1962a3807 bpf: Check size for BTF-based ctx access of pointer members
* 0f2dd866c6b1 xfs: only run precommits once per transaction object
* 08b1325d67a1 xfs: fix scrub tracepoints when inode-rooted btrees are involved
* eef2e0da3185 xfs: return from xfs_symlink_verify early on V4 filesystems
* 549f2fc321ea xfs: don't drop errno values when we fail to ficlone the entire range
* b4f3bf6fe918 xfs: update btree keys correctly when _insrec splits an inode root block
* e07f9c92bd12 drm/i915: Fix NULL pointer dereference in capture_engine
* 1f7659950736 drm/i915: Fix memory leak by correcting cache object name in error handler
* c0484aa1adc3 usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
* 8ca07a3d18f3 usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
* bd8ca5c5a04a usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()
* 1c766533deb3 usb: typec: anx7411: fix fwnode_handle reference leak
* e22e4df241f7 usb: ehci-hcd: fix call balance of clocks handling routines
* 35acf6d7e889 usb: gadget: midi2: Fix interpretation of is_midi1 bits
* 3184e07e1240 scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
* 6c75336869c7 usb: dwc2: Fix HCD port connection race
* 700f3afe5b76 usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
* 09883478938d usb: dwc2: Fix HCD resume
* a3840455f275 ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
* a867bf10364a usb: host: max3421-hcd: Correctly abort a USB request.
* 6f796a6a396d riscv: Fix IPIs usage in kfence_protect_page()
* e6c338476c80 ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
* 5baa28569c92 blk-cgroup: Fix UAF in blkcg_unpin_online()
* aa9b1d0d6a5b riscv: Fix wrong usage of __pa() on a fixmap address
* 7ac2535d8ee6 tcp: check space before adding MPTCP SYN options
* bc6d8cc2c563 splice: do not checksum AF_UNIX sockets
* 450a844c045f ksmbd: fix racy issue from session lookup and expire
* 0252305d2964 perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
* f9f85df30118 bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors

Change-Id: I9b9b980550c976031589088f8f8e2b3e5b0d625e
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

There are cases when the bootloader provides information to the kernel
in both ACPI and DTB, not interchangeably. One such use case is virtual
machines in Android. When running on x86, the Android Virtualization
Framework (AVF) boots VMs with ACPI like it is usually done on x86 (i.e.
the virtual LAPIC, IOAPIC, HPET, PCI MMCONFIG etc are described in ACPI)
but also passes various AVF-specific boot parameters in DTB. This allows
reusing the same implementations of various AVF components on both
arm64 and x86.

Commit 7b937cc2 ("of: Create of_root if no dtb provided by firmware")
removed the possibility to do that, since among other things
it introduced forcing emptying the bootloader-provided DTB if ACPI is
enabled (probably assuming that if ACPI is available, a DTB can only be
useful for applying overlays to it afterwards, for testing purposes).

So restore this possibility. Instead of completely preventing using ACPI
and DT together, rely on arch-specific setup code to prevent using both
to set up the same things (see various acpi_disabled checks under arch/).

Fixes: 7b937cc2 ("of: Create of_root if no dtb provided by firmware")
Signed-off-by: Dmytro Maluka <dmaluka@chromium.org>
Link: https://lore.kernel.org/r/20250105172741.3476758-3-dmaluka@chromium.org


Signed-off-by: Rob Herring (Arm) <robh@kernel.org>
(cherry picked from commit 14bce187)
Bug: 378675550
Change-Id: Ib0342a18f61efbf5b6603073652e175035a405a9

When enabling CONFIG_OF on a platform where 'of_root' is not populated
by firmware, we end up without a root node. In order to apply overlays
and create subnodes of the root node, we need one. Create this root node
by unflattening an empty builtin dtb.

If firmware provides a flattened device tree (FDT) then the FDT is
unflattened via setup_arch(). Otherwise, the call to
unflatten(_and_copy)?_device_tree() will create an empty root node.

We make of_have_populated_dt() return true only if the DTB was loaded by
firmware so that existing callers don't change behavior after this
patch. The call in the of platform code is removed because it prevents
overlays from creating platform devices when the empty root node is
used.

[sboyd@kernel.org: Update of_have_populated_dt() to treat this empty dtb
as not populated. Drop setup_of() initcall]

Signed-off-by: Frank Rowand <frowand.list@gmail.com>
Link: https://lore.kernel.org/r/20230317053415.2254616-2-frowand.list@gmail.com


Cc: Rob Herring <robh+dt@kernel.org>
Signed-off-by: Stephen Boyd <sboyd@kernel.org>
Link: https://lore.kernel.org/r/20240217010557.2381548-3-sboyd@kernel.org


Signed-off-by: Rob Herring <robh@kernel.org>
(cherry picked from commit 7b937cc2)
Bug: 378675550
Change-Id: I117dc5727ff379184aab66a6cc6580be8d1e6a6b