Merge 6.6.91 into android15-6.6-lts

GKI (arm64) relevant 25 out of 114 changes, affecting 32 files +300/-170
  38433aa3 dm: add missing unlock on in dm_keyslot_evict() [1 file, +2/-1]
  31ff70ad sch_htb: make htb_deactivate() idempotent [1 file, +6/-9]
  fa1fe9f3 gre: Fix again IPv6 link-local address generation. [1 file, +9/-6]
  37063539 netdevice: add netdev_tx_reset_subqueue() shorthand [1 file, +12/-1]
  42b7a7c9 can: gw: fix RCU/BH usage in cgw_create_job() [1 file, +90/-59]
  355b0526 bpf: Scrub packet on bpf_redirect_peer [1 file, +1/-0]
  cbc82e7d Input: xpad - fix Share button on Xbox One controllers [1 file, +20/-15]
  56b4e8b6 Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller [1 file, +1/-0]
  2d9d6a4c Input: xpad - fix two controller table values [1 file, +2/-2]
  faa90596 module: ensure that kobject_put() is safe for module type kobjects [1 file, +3/-1]
  dffa51cf usb: gadget: f_ecm: Add get_status callback [1 file, +7/-0]
  9b09b99a usb: gadget: Use get_status callback to set remote wakeup capability [1 file, +5/-7]
  c9d8b093 usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition [1 file, +1/-1]
  14f298c5 usb: typec: ucsi: displayport: Fix NULL pointer access [1 file, +2/-0]
  95197719 types: Complement the aligned types with signed 64-bit one [2 files, +3/-1]
  eba09f42 nvme: unblock ctrl state transition for firmware update [1 file, +2/-1]
  00f0dd1a do_umount(): add missing barrier before refcount checks in sync case [1 file, +2/-1]
  51f1389b io_uring: always arm linked timeouts prior to issue [1 file, +16/-37]
  746e7d28 io_uring: ensure deferred completions are posted for multishot [1 file, +8/-0]
  054fc98d arm64: insn: Add support for encoding DSB [2 files, +38/-23]
  854da0ed arm64: proton-pack: Expose whether the platform is mitigated by firmware [2 files, +6/-0]
  73591041 arm64: proton-pack: Expose whether the branchy loop k value [2 files, +6/-0]
  42a20cf5 arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs [3 files, +52/-5]
  80251f62 arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users [1 file, +3/-0]
  ca8a5626 arm64: proton-pack: Add new CPUs 'k' values for branch mitigation [2 files, +3/-0]

Changes in 6.6.91
	dm: add missing unlock on in dm_keyslot_evict()
	arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
	can: mcan: m_can_class_unregister(): fix order of unregistration calls
	wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
	can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
	ksmbd: prevent rename with empty string
	ksmbd: prevent out-of-bounds stream writes by validating *pos
	ksmbd: Fix UAF in __close_file_table_ids
	openvswitch: Fix unsafe attribute parsing in output_userspace()
	ksmbd: fix memory leak in parse_lease_state()
	sch_htb: make htb_deactivate() idempotent
	gre: Fix again IPv6 link-local address generation.
	netdevice: add netdev_tx_reset_subqueue() shorthand
	net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
	can: mcp251xfd: fix TDC setting for low data bit rates
	can: gw: fix RCU/BH usage in cgw_create_job()
	ipvs: fix uninit-value for saddr in do_output_route4
	netfilter: ipset: fix region locking in hash types
	bpf: Scrub packet on bpf_redirect_peer
	net: dsa: b53: allow leaky reserved multicast
	net: dsa: b53: fix clearing PVID of a port
	net: dsa: b53: fix flushing old pvid VLAN on pvid change
	net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
	net: dsa: b53: always rejoin default untagged VLAN on bridge leave
	net: dsa: b53: fix learning on VLAN unaware bridges
	Input: cyttsp5 - ensure minimum reset pulse width
	Input: cyttsp5 - fix power control issue on wakeup
	Input: mtk-pmic-keys - fix possible null pointer dereference
	Input: xpad - fix Share button on Xbox One controllers
	Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
	Input: xpad - fix two controller table values
	Input: synaptics - enable InterTouch on Dynabook Portege X30-D
	Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
	Input: synaptics - enable InterTouch on Dell Precision M3800
	Input: synaptics - enable SMBus for HP Elitebook 850 G1
	Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
	staging: iio: adc: ad7816: Correct conditional logic for store mode
	staging: axis-fifo: Remove hardware resets for user errors
	staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
	x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
	drm/amd/display: Shift DMUB AUX reply command if necessary
	iio: adc: ad7606: fix serial register access
	iio: adc: rockchip: Fix clock initialization sequence
	iio: adis16201: Correct inclinometer channel resolution
	iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
	iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
	drm/v3d: Add job to pending list if the reset was skipped
	drm/amd/display: more liberal vmin/vmax update for freesync
	drm/amd/display: Fix the checking condition in dmub aux handling
	drm/amd/display: Remove incorrect checking in dmub aux handler
	drm/amd/display: Fix wrong handling for AUX_DEFER case
	drm/amd/display: Copy AUX read reply data whenever length > 0
	drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
	drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
	drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
	drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
	usb: uhci-platform: Make the clock really optional
	smb: client: Avoid race in open_cached_dir with lease breaks
	xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
	xenbus: Use kref to track req lifetime
	clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
	module: ensure that kobject_put() is safe for module type kobjects
	x86/microcode: Consolidate the loader enablement checking
	ocfs2: switch osb->disable_recovery to enum
	ocfs2: implement handshaking with ocfs2 recovery thread
	ocfs2: stop quota recovery before disabling quotas
	usb: cdnsp: Fix issue with resuming from L1
	usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
	usb: gadget: f_ecm: Add get_status callback
	usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
	usb: gadget: Use get_status callback to set remote wakeup capability
	usb: host: tegra: Prevent host controller crash when OTG port is used
	usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
	usb: typec: ucsi: displayport: Fix NULL pointer access
	USB: usbtmc: use interruptible sleep in usbtmc_read
	usb: usbtmc: Fix erroneous get_stb ioctl error returns
	usb: usbtmc: Fix erroneous wait_srq ioctl return
	usb: usbtmc: Fix erroneous generic_read ioctl return
	iio: accel: adxl367: fix setting odr for activity time update
	iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
	types: Complement the aligned types with signed 64-bit one
	iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
	iio: adc: dln2: Use aligned_s64 for timestamp
	MIPS: Fix MAX_REG_OFFSET
	drm/panel: simple: Update timings for AUO G101EVN010
	nvme: unblock ctrl state transition for firmware update
	do_umount(): add missing barrier before refcount checks in sync case
	io_uring: always arm linked timeouts prior to issue
	io_uring: ensure deferred completions are posted for multishot
	arm64: insn: Add support for encoding DSB
	arm64: proton-pack: Expose whether the platform is mitigated by firmware
	arm64: proton-pack: Expose whether the branchy loop k value
	arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
	arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
	arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
	x86/bpf: Call branch history clearing sequence on exit
	x86/bpf: Add IBHF call at end of classic BPF
	x86/bhi: Do not set BHI_DIS_S in 32-bit mode
	x86/speculation: Simplify and make CALL_NOSPEC consistent
	x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
	x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
	Documentation: x86/bugs/its: Add ITS documentation
	x86/its: Enumerate Indirect Target Selection (ITS) bug
	x86/its: Add support for ITS-safe indirect thunk
	x86/its: Add support for ITS-safe return thunk
	x86/its: Enable Indirect Target Selection mitigation
	x86/its: Add "vmexit" option to skip mitigation on some CPUs
	x86/its: Add support for RSB stuffing mitigation
	x86/its: Align RETs in BHB clear sequence to avoid thunking
	x86/ibt: Keep IBT disabled during alternative patching
	x86/its: Use dynamic thunks for indirect branches
	x86/its: Fix build errors when CONFIG_MODULES=n
	x86/its: FineIBT-paranoid vs ITS
	Linux 6.6.91

Change-Id: Ic8980c4efbc1720c33b4bab154ce2dfe32cf8624
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>