Merge 6.6.100 into android15-6.6-lts

GKI (arm64) relevant 38 out of 113 changes, affecting 44 files +300/-115
  311c434f USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI [2 files, +5/-0]
  58bdd516 usb: gadget: configfs: Fix OOB read on empty string write [1 file, +4/-0]
  db44a558 Input: xpad - set correct controller type for Acer NGR200 [1 file, +1/-1]
  82b29ee8 spi: Add check for 8-bit transfer with 8 IO mode support [1 file, +10/-4]
  469a39a3 dm-bufio: fix sched in atomic context [1 file, +5/-1]
  fcda39a9 HID: core: ensure the allocated report buffer can contain the reserved report ID [1 file, +4/-1]
  a1c0b87b HID: core: ensure __hid_request reserves the report ID as the first byte [1 file, +9/-2]
  0e5017d8 HID: core: do not bypass hid_hw_raw_request [1 file, +1/-2]
  6ba89b38 tracing/probes: Avoid using params uninitialized in parse_btf_arg() [1 file, +1/-1]
  6bc94f20 tracing: Add down_write(trace_event_sem) when adding trace event [1 file, +5/-0]
  d48845af io_uring/poll: fix POLLERR handling [2 files, +8/-6]
  67ea5f37 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() [1 file, +2/-2]
  2bae35ac af_packet: fix soft lockup issue caused by tpacket_snd() [1 file, +11/-12]
  600f55da pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov [1 file, +16/-2]
  e7be6791 bpf: Reject %p% format string in bprintf-like helpers [1 file, +8/-3]
  21033b49 block: fix kobject leak in blk_unregister_queue [1 file, +1/-0]
  5d95fbbf nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list() [1 file, +1/-1]
  ec158d05 net: phy: Don't register LEDs for genphy [1 file, +4/-2]
  a2f02a87 nvme: fix misaccounting of nvme-mpath inflight I/O [1 file, +4/-0]
  167006f7 wifi: cfg80211: remove scan request n_channels counted_by [1 file, +1/-1]
  c4f16f6b Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() [1 file, +3/-0]
  32e62491 Bluetooth: hci_sync: fix connectable extended advertising when using static random address [1 file, +2/-2]
  f3323b18 Bluetooth: SMP: If an unallowed command is received consider it a failure [2 files, +19/-1]
  4ceefc9c Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout [1 file, +1/-1]
  dcbc346f ipv6: mcast: Delay put pmc->idev in mld_del_delrec() [1 file, +1/-1]
  76179961 netfilter: nf_conntrack: fix crash due to removal of uninitialised entry [2 files, +33/-8]
  bd3051a8 Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU [1 file, +21/-5]
  bb515c41 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime [2 files, +34/-9]
  7ff2d83e net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree [1 file, +3/-1]
  f371ad64 Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" [1 file, +1/-7]
  4cb17b11 ipv6: make addrconf_wq single threaded [1 file, +2/-1]
  dc6a6640 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns [1 file, +5/-0]
  d5024dc5 arm64: Filter out SME hwcaps when FEAT_SME isn't implemented [1 file, +21/-14]
  15fea75a usb: hub: fix detection of high tier USB3 devices behind suspended hubs [1 file, +32/-1]
  71f5c98d usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm [1 file, +4/-2]
  668c7b47 usb: hub: Fix flushing of delayed work used for post resume purposes [2 files, +9/-13]
  824fa25c usb: hub: Don't try to recover devices lost during warm reset. [1 file, +6/-2]
  6cfbff5f usb: dwc3: qcom: Don't leave BCR asserted [1 file, +2/-6]

Changes in 6.6.100
	phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
	phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
	phy: tegra: xusb: Disable periodic tracking on Tegra234
	USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
	USB: serial: option: add Foxconn T99W640
	USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
	usb: musb: fix gadget state on disconnect
	usb: gadget: configfs: Fix OOB read on empty string write
	i2c: stm32: fix the device used for the DMA map
	thunderbolt: Fix wake on connect at runtime
	thunderbolt: Fix bit masking in tb_dp_port_set_hops()
	nvmem: imx-ocotp: fix MAC address byte length
	Input: xpad - set correct controller type for Acer NGR200
	pch_uart: Fix dma_sync_sg_for_device() nents value
	spi: Add check for 8-bit transfer with 8 IO mode support
	dm-bufio: fix sched in atomic context
	HID: core: ensure the allocated report buffer can contain the reserved report ID
	HID: core: ensure __hid_request reserves the report ID as the first byte
	HID: core: do not bypass hid_hw_raw_request
	tracing/probes: Avoid using params uninitialized in parse_btf_arg()
	tracing: Add down_write(trace_event_sem) when adding trace event
	tracing/osnoise: Fix crash in timerlat_dump_stack()
	drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
	ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
	io_uring/poll: fix POLLERR handling
	phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
	net/mlx5: Update the list of the PCI supported devices
	arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
	arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
	arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
	af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
	af_packet: fix soft lockup issue caused by tpacket_snd()
	dmaengine: nbpfaxi: Fix memory corruption in probe()
	isofs: Verify inode mode when loading from disk
	memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
	mmc: bcm2835: Fix dma_unmap_sg() nents value
	mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
	mmc: sdhci_am654: Workaround for Errata i2312
	net: libwx: remove duplicate page_pool_put_full_page()
	net: libwx: fix the using of Rx buffer DMA
	net: libwx: properly reset Rx ring descriptor
	pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
	s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
	smb: client: fix use-after-free in crypt_message when using async crypto
	soc: aspeed: lpc-snoop: Cleanup resources in stack-order
	soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
	iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
	iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
	iio: adc: max1363: Reorder mode_list[] entries
	iio: adc: stm32-adc: Fix race in installing chained IRQ handler
	comedi: pcl812: Fix bit shift out of bounds
	comedi: aio_iiro_16: Fix bit shift out of bounds
	comedi: das16m1: Fix bit shift out of bounds
	comedi: das6402: Fix bit shift out of bounds
	comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
	comedi: Fix some signed shift left operations
	comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
	comedi: Fix initialization of data for instructions that write to subdevice
	soundwire: amd: fix for handling slave alerts after link is down
	soundwire: amd: fix for clearing command status register
	bpf: Reject %p% format string in bprintf-like helpers
	cachefiles: Fix the incorrect return value in __cachefiles_write()
	net: emaclite: Fix missing pointer increment in aligned_read()
	block: fix kobject leak in blk_unregister_queue
	net/sched: sch_qfq: Fix race condition on qfq_aggregate
	rpl: Fix use-after-free in rpl_do_srh_inline().
	smb: client: fix use-after-free in cifs_oplock_break
	nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list()
	net: phy: Don't register LEDs for genphy
	nvme: fix misaccounting of nvme-mpath inflight I/O
	wifi: cfg80211: remove scan request n_channels counted_by
	selftests: net: increase inter-packet timeout in udpgro.sh
	hwmon: (corsair-cpro) Validate the size of the received input buffer
	ice: add NULL check in eswitch lag check
	usb: net: sierra: check for no status endpoint
	Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
	Bluetooth: hci_sync: fix connectable extended advertising when using static random address
	Bluetooth: SMP: If an unallowed command is received consider it a failure
	Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
	Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
	net/mlx5: Correctly set gso_size when LRO is used
	ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
	netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
	Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
	hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf
	tls: always refresh the queue when reading sock
	net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
	net: bridge: Do not offload IGMP/MLD messages
	net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
	rxrpc: Fix recv-recv race of completed call
	rxrpc: Fix transmission of an abort in response to an abort
	Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
	sched: Change nr_uninterruptible type to unsigned long
	ipv6: make addrconf_wq single threaded
	clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
	arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
	usb: hub: fix detection of high tier USB3 devices behind suspended hubs
	usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
	usb: hub: Fix flushing of delayed work used for post resume purposes
	usb: hub: Don't try to recover devices lost during warm reset.
	usb: dwc3: qcom: Don't leave BCR asserted
	i2c: omap: Add support for setting mux
	i2c: omap: Fix an error handling path in omap_i2c_probe()
	i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
	regulator: pwm-regulator: Calculate the output voltage for disabled PWMs
	regulator: pwm-regulator: Manage boot-on with disabled PWM channels
	ASoC: fsl_sai: Force a software reset when starting in consumer mode
	Revert "selftests/bpf: adjust dummy_st_ops_success to detect additional error"
	Revert "selftests/bpf: dummy_st_ops should reject 0 for non-nullable params"
	i2c: omap: fix deprecated of_property_read_bool() use
	nvmem: layouts: u-boot-env: remove crc32 endianness conversion
	KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
	Linux 6.6.100

Change-Id: I4f60d35bcf527d82d2c82fea3307f42c85ec3a45
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>