Merge 6.6.84 into android15-6.6-lts

GKI (arm64) relevant 50 out of 167 changes, affecting 84 files +776/-659
  c7ee791e zram: fix NULL pointer in comp_algorithm_show() [1 file, +2/-2]
  47217354 hrtimer: Use and report correct timerslack values for realtime tasks [5 files, +22/-26]
  f9543375 bpf: Use raw_spinlock_t in ringbuf [1 file, +6/-6]
  abadaa35 tcp: fix races in tcp_abort() [1 file, +1/-5]
  372df1f2 tcp: fix forever orphan socket caused by tcp_abort [1 file, +10/-6]
  0a9f0cfd netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around [1 file, +2/-2]
  7e8cd2bc Bluetooth: hci_event: Fix enabling passive scanning [1 file, +22/-15]
  5e8ce74f Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" [6 files, +57/-97]
  fda50302 netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() [1 file, +2/-0]
  78533c4a net_sched: Prevent creation of classes with TC_H_ROOT [1 file, +6/-0]
  ecc19a93 gre: Fix IPv6 link-local address generation. [1 file, +9/-6]
  a625ad9b hrtimers: Mark is_migration_base() with __always_inline [1 file, +12/-10]
  a470f80e powercap: call put_device() on an error path in powercap_register_control_type() [1 file, +1/-2]
  e9d4044f scsi: core: Use GFP_NOIO to avoid circular locking dependency [1 file, +1/-1]
  caa38322 scsi: ufs: core: Fix error return with query response [1 file, +6/-1]
  68eddb06 HID: hid-apple: Apple Magic Keyboard a3203 USB-C support [2 files, +6/-0]
  be2051f8 HID: apple: fix up the F6 key on the Omoton KB066 keyboard [1 file, +3/-0]
  265c0369 sched: Clarify wake_up_q()'s write to task->wake_q.next [1 file, +3/-2]
  f225a79b thermal/cpufreq_cooling: Remove structure member documentation [1 file, +0/-2]
  c96cce85 Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd [1 file, +34/-5]
  570f4d6e io-wq: backoff when retrying worker creation [1 file, +18/-5]
  aca3cdc3 nvme-pci: quirk Acer FA100 for non-uniqueue identifiers [1 file, +2/-0]
  f33c0908 nvme: only allow entering LIVE from CONNECTING state [1 file, +0/-2]
  fcfb7ea1 fuse: don't truncate cached, mutated symlink [3 files, +22/-6]
  474cebf2 net: Handle napi_schedule() calls from non-interrupt [1 file, +1/-1]
  0446d868 block: fix 'kmem_cache of name 'bio-108' already exists' [1 file, +1/-1]
  2905c4fe io_uring: get rid of remap_pfn_range() for mapping rings/sqes [2 files, +134/-8]
  a0b21f2a io_uring: don't attempt to mmap larger than what the user asks for [1 file, +3/-2]
  b89f95b9 io_uring: fix corner case forgetting to vunmap [1 file, +3/-1]
  719e745e io_uring: use vmap() for ring mapping [1 file, +9/-29]
  6168ec87 io_uring: unify io_pin_pages() [2 files, +42/-58]
  af8f27ef io_uring/kbuf: vmap pinned buffer ring [1 file, +15/-24]
  46b1b3d8 io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring [5 files, +46/-157]
  1fdb9c9e io_uring: use unpin_user_pages() where appropriate [1 file, +2/-3]
  78aefac7 io_uring: fix error pbuf checking [1 file, +3/-1]
  5184e44b Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers [1 file, +8/-5]
  8cf88f39 Input: xpad - add multiple supported devices [1 file, +19/-1]
  dc9839dc Input: xpad - add support for ZOTAC Gaming Zone [1 file, +2/-0]
  0c4484cd Input: xpad - add support for TECNO Pocket Go [1 file, +2/-0]
  d639d553 Input: xpad - rename QH controller to Legion Go S [1 file, +2/-2]
  528ac204 USB: serial: ftdi_sio: add support for Altera USB Blaster 3 [2 files, +27/-0]
  b3ddebae drm/atomic: Filter out redundant DPMS calls [2 files, +8/-0]
  7b2c29b7 arm64: mm: Populate vmemmap at the page level if not section aligned [1 file, +4/-1]
  b2fe954a lib/buildid: Handle memfd_secret() files in build_id_parse() [1 file, +5/-0]
  86d97d49 mm: split critical region in remap_file_pages() and invoke LSMs in between [1 file, +52/-17]
  54405532 ASoC: ops: Consistently treat platform_max as control value [2 files, +11/-9]
  efc30877 Bluetooth: L2CAP: Fix corrupted list in hci_chan_del [3 files, +58/-98]
  62485737 HID: apple: disable Fn key handling on the Omoton KB066 [1 file, +7/-4]
  7fa2e296 netfilter: nf_tables: use timestamp to check for set element timeout [5 files, +42/-15]
  a561c6a0 netfilter: nf_tables: allow clone callbacks to sleep [8 files, +23/-21]

Changes in 6.6.84
	clockevents/drivers/i8253: Fix stop sequence for timer 0
	sched/isolation: Prevent boot crash when the boot CPU is nohz_full
	zram: fix NULL pointer in comp_algorithm_show()
	hrtimer: Use and report correct timerslack values for realtime tasks
	bpf: Use raw_spinlock_t in ringbuf
	tcp: fix races in tcp_abort()
	tcp: fix forever orphan socket caused by tcp_abort
	fbdev: hyperv_fb: iounmap() the correct memory when removing a device
	pinctrl: bcm281xx: Fix incorrect regmap max_registers value
	netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
	ice: fix memory leak in aRFS after reset
	netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
	sched: address a potential NULL pointer dereference in the GRED scheduler.
	wifi: cfg80211: cancel wiphy_work before freeing wiphy
	Bluetooth: hci_event: Fix enabling passive scanning
	Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
	net/mlx5: Fill out devlink dev info only for PFs
	net: dsa: mv88e6xxx: Verify after ATU Load ops
	net: mctp i2c: Copy headers if cloned
	netpoll: hold rcu read lock in __netpoll_send_skb()
	drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
	Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
	net/mlx5: handle errors in mlx5_chains_create_table()
	eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
	net: switchdev: Convert blocking notification chain to a raw one
	bonding: fix incorrect MAC address setting to receive NS messages
	netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
	ipvs: prevent integer overflow in do_ip_vs_get_ctl()
	net_sched: Prevent creation of classes with TC_H_ROOT
	netfilter: nft_exthdr: fix offset with ipv4_find_option()
	gre: Fix IPv6 link-local address generation.
	net: openvswitch: remove misbehaving actions length check
	net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
	net/mlx5: Bridge, fix the crash caused by LAG state check
	net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
	nvme-fc: go straight to connecting state when initializing
	nvme-fc: do not ignore connectivity loss during connecting
	hrtimers: Mark is_migration_base() with __always_inline
	powercap: call put_device() on an error path in powercap_register_control_type()
	iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
	sched/debug: Provide slice length for fair tasks
	platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
	scsi: core: Use GFP_NOIO to avoid circular locking dependency
	scsi: ufs: core: Fix error return with query response
	scsi: qla1280: Fix kernel oops when debug level > 2
	ACPI: resource: IRQ override for Eluktronics MECH-17
	smb: client: fix noisy when tree connecting to DFS interlink targets
	alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
	vboxsf: fix building with GCC 15
	HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
	HID: intel-ish-hid: Send clock sync message immediately after reset
	HID: ignore non-functional sensor in HP 5MP Camera
	usb: phy: generic: Use proper helper for property detection
	HID: topre: Fix n-key rollover on Realforce R3S TKL boards
	HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
	HID: apple: fix up the F6 key on the Omoton KB066 keyboard
	objtool: Ignore dangling jump table entries
	sched: Clarify wake_up_q()'s write to task->wake_q.next
	platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
	platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
	s390/cio: Fix CHPID "configure" attribute caching
	thermal/cpufreq_cooling: Remove structure member documentation
	Xen/swiotlb: mark xen_swiotlb_fixup() __init
	Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
	selftests/bpf: Fix invalid flag of recv()
	ASoC: simple-card-utils.c: add missing dlc->of_node
	ALSA: hda/realtek: Limit mic boost on Positivo ARN50
	ASoC: rsnd: indicate unsupported clock rate
	ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
	ASoC: rsnd: adjust convert rate limitation
	ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
	ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
	ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
	net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
	io-wq: backoff when retrying worker creation
	nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
	nvme-tcp: add basic support for the C2HTermReq PDU
	nvmet-rdma: recheck queue state is LIVE in state lock in recv done
	apple-nvme: Release power domains when probe fails
	cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes
	sctp: Fix undefined behavior in left shift operation
	nvme: only allow entering LIVE from CONNECTING state
	ASoC: tas2770: Fix volume scale
	ASoC: tas2764: Fix power control mask
	ASoC: tas2764: Set the SDOUT polarity correctly
	fuse: don't truncate cached, mutated symlink
	drm/vkms: Round fixp2int conversion in lerp_u16
	perf/x86/intel: Use better start period for frequency mode
	x86/irq: Define trace events conditionally
	mptcp: safety check before fallback
	drm/nouveau: Do not override forced connector status
	net: Handle napi_schedule() calls from non-interrupt
	block: fix 'kmem_cache of name 'bio-108' already exists'
	mm: add nommu variant of vm_insert_pages()
	io_uring: get rid of remap_pfn_range() for mapping rings/sqes
	io_uring: don't attempt to mmap larger than what the user asks for
	io_uring: fix corner case forgetting to vunmap
	io_uring: use vmap() for ring mapping
	io_uring: unify io_pin_pages()
	io_uring/kbuf: vmap pinned buffer ring
	io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
	io_uring: use unpin_user_pages() where appropriate
	io_uring: fix error pbuf checking
	Input: ads7846 - fix gpiod allocation
	Input: iqs7222 - preserve system status register
	Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
	Input: xpad - add multiple supported devices
	Input: xpad - add support for ZOTAC Gaming Zone
	Input: xpad - add support for TECNO Pocket Go
	Input: xpad - rename QH controller to Legion Go S
	Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
	Input: i8042 - add required quirks for missing old boardnames
	Input: i8042 - swap old quirk combination with new quirk for several devices
	Input: i8042 - swap old quirk combination with new quirk for more devices
	USB: serial: ftdi_sio: add support for Altera USB Blaster 3
	USB: serial: option: add Telit Cinterion FE990B compositions
	USB: serial: option: fix Telit Cinterion FE990A name
	USB: serial: option: match on interface class for Telit FN990B
	x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
	drm/i915/cdclk: Do cdclk post plane programming later
	drm/atomic: Filter out redundant DPMS calls
	drm/dp_mst: Fix locking when skipping CSN before topology probing
	drm/amd/display: Disable unneeded hpd interrupts during dm_init
	drm/amd/display: Restore correct backlight brightness after a GPU reset
	drm/amd/display: Assign normalized_pix_clk when color depth = 14
	drm/amd/display: Fix slab-use-after-free on hdcp_work
	ksmbd: fix use-after-free in ksmbd_free_work_struct
	ksmbd: prevent connection release during oplock break notification
	clk: samsung: update PLL locktime for PLL142XX used on FSD platform
	ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
	dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
	arm64: mm: Populate vmemmap at the page level if not section aligned
	qlcnic: fix memory leak issues in qlcnic_sriov_common.c
	smb: client: fix regression with guest option
	rust: Disallow BTF generation with Rust + LTO
	rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and `Option<KBox<T>>`
	lib/buildid: Handle memfd_secret() files in build_id_parse()
	mm: split critical region in remap_file_pages() and invoke LSMs in between
	ASoC: ops: Consistently treat platform_max as control value
	rust: error: add missing newline to pr_warn! calls
	drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
	ASoC: cs42l43: Fix maximum ADC Volume
	rust: init: add missing newline to pr_info! calls
	ASoC: rt722-sdca: add missing readable registers
	ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
	scripts: generate_rust_analyzer: add missing macros deps
	cifs: Fix integer overflow while processing acregmax mount option
	cifs: Fix integer overflow while processing acdirmax mount option
	cifs: Fix integer overflow while processing actimeo mount option
	cifs: Fix integer overflow while processing closetimeo mount option
	cifs: Validate content of WSL reparse point buffers
	cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point()
	i2c: ali1535: Fix an error handling path in ali1535_probe()
	i2c: ali15x3: Fix an error handling path in ali15x3_probe()
	i2c: sis630: Fix an error handling path in sis630_probe()
	stmmac: loongson: Pass correct arg to PCI function
	smb3: add support for IAKerb
	smb: client: Fix match_session bug preventing session reuse
	Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
	nvme-fc: rely on state transitions to handle connectivity loss
	HID: apple: disable Fn key handling on the Omoton KB066
	nvme-tcp: Fix a C2HTermReq error message
	rust: lockdep: Remove support for dynamically allocated LockClassKeys
	netfilter: nf_tables: use timestamp to check for set element timeout
	netfilter: nf_tables: bail out if stateful expression provides no .clone
	netfilter: nf_tables: allow clone callbacks to sleep
	Linux 6.6.84

Change-Id: I904a2fffac4cb4a00b55c06986c314ebf8579aa4
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>