Merge 6.6.113 into android15-6.6-lts

GKI (arm64) relevant 44 out of 200 changes, affecting 72 files +399/-218
  bc7372c0 fs: always return zero on success from replace_fd() [1 file, +4/-1]
  9f13f727 fscontext: do not consume log entries when returning -EMSGSIZE [1 file, +38/-32]
  ed30811f media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() [1 file, +17/-13]
  fdd42814 asm-generic/io.h: Skip trace helpers if rwmmio events are disabled [1 file, +66/-32]
  d497fef5 clk: tegra: do not overallocate memory for bpmp clocks [1 file, +1/-1]
  422c1c17 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). [1 file, +0/-1]
  8078f857 tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() [1 file, +4/-1]
  b6bfe44b bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} [1 file, +2/-0]
  df0ffc4b netfilter: nf_tables: drop unused 3rd argument from validate callback ops [27 files, +30/-60]
  f37e7860 crypto: essiv - Check ssize for decryption and in-place encryption [1 file, +6/-8]
  b6e9645b bpf: Avoid RCU context warning when unpinning htab with internal structs [1 file, +2/-2]
  4c656fd5 media: mc: Fix MUST_CONNECT handling for pads with no links [1 file, +1/-1]
  b4ba1c81 media: lirc: Fix error handling in lirc_register() [1 file, +5/-4]
  f74a135c blk-crypto: fix missing blktrace bio split events [1 file, +3/-0]
  2e9ae62b copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) [1 file, +1/-1]
  dad6e796 init: handle bootloader identifier in kernel parameters [1 file, +12/-0]
  132f827e kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths [1 file, +20/-2]
  babe2b53 lib/genalloc: fix device leak in of_gen_pool_get() [1 file, +4/-1]
  dd21dc8d openat2: don't trigger automounts with RESOLVE_NO_XDEV [1 file, +8/-0]
  4bfba41d nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk [1 file, +2/-0]
  587b819f mmc: core: SPI mode remove cmd7 [1 file, +5/-1]
  31a81d9a rtc: interface: Ensure alarm irq is enabled when UIE is enabled [1 file, +4/-0]
  9f16da9b rtc: interface: Fix long-standing race when setting alarm [1 file, +23/-0]
  bd27ddb6 PCI/sysfs: Ensure devices are powered for config reads [1 file, +19/-1]
  36039348 PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV [1 file, +5/-0]
  a3a52f85 PCI/ERR: Fix uevent on failure to recover [1 file, +7/-1]
  741b7839 PCI/AER: Fix missing uevent on recovery when a reset is requested [1 file, +1/-0]
  61aeab71 PCI/AER: Support errors introduced by PCIe r6.0 [1 file, +6/-6]
  81a6d601 mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations [1 file, +1/-1]
  304fc34f ext4: verify orphan file size is not too big [1 file, +12/-1]
  871b6894 ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() [1 file, +8/-2]
  d1e681c0 ext4: correctly handle queries for metadata mappings [1 file, +9/-5]
  9e642ab8 ext4: fix an off-by-one issue during moving extents [1 file, +1/-1]
  79ea7f3e ext4: guard against EA inode refcount underflow in xattr update [1 file, +8/-7]
  720a66fd ext4: validate ea_ino and size in check_xattrs [1 file, +4/-0]
  abdfc470 ext4: free orphan info with kvfree [1 file, +2/-2]
  7bd4e536 media: mc: Clear minor number before put device [1 file, +1/-5]
  ad25061d mm/ksm: fix incorrect KSM counter handling in mm_struct during fork [1 file, +6/-0]
  d0d9fa88 rseq: Protect event mask against membarrier IPI [2 files, +13/-8]
  7f4f031e arm64: kprobes: call set_memory_rox() for kprobe page [1 file, +7/-1]
  b8c7d40b arm64: mte: Do not flag the zero page as PG_mte_tagged [2 files, +9/-4]
  09d227c5 pid: Add a judgment for ns null in pid_nr_ns [1 file, +1/-1]
  7594dae6 writeback: Avoid softlockup when switching many inodes [1 file, +10/-1]
  163f1537 writeback: Avoid excessively long inode switching times [1 file, +11/-10]

Changes in 6.6.113
	fs: always return zero on success from replace_fd()
	fscontext: do not consume log entries when returning -EMSGSIZE
	clocksource/drivers/clps711x: Fix resource leaks in error paths
	iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
	media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
	asm-generic/io.h: Skip trace helpers if rwmmio events are disabled
	perf evsel: Avoid container_of on a NULL leader
	libperf event: Ensure tracing data is multiple of 8 sized
	clk: at91: peripheral: fix return value
	perf util: Fix compression checks returning -1 as bool
	rtc: x1205: Fix Xicor X1205 vendor prefix
	rtc: optee: fix memory leak on driver removal
	perf arm_spe: Correct setting remote access
	perf arm-spe: Rename the common data source encoding
	perf arm_spe: Correct memory level for remote access
	perf session: Fix handling when buffer exceeds 2 GiB
	perf test: Don't leak workload gopipe in PERF_RECORD_*
	perf test: Add a test for default perf stat command
	perf tools: Add fallback for exclude_guest
	perf evsel: Ensure the fallback message is always written to
	clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m
	clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags()
	clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
	clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
	clk: tegra: do not overallocate memory for bpmp clocks
	cpufreq: tegra186: Set target frequency for all cpus in policy
	scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
	ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size
	LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()
	LoongArch: Init acpi_gbl_use_global_lock to false
	net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
	drm/vmwgfx: Fix a null-ptr access in the cursor snooper
	drm/vmwgfx: Fix Use-after-free in validation
	drm/vmwgfx: Fix copy-paste typo in validation
	net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
	tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
	net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
	tools build: Align warning options with perf
	perf python: split Clang options when invoking Popen
	tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat()
	mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
	mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
	bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
	drm/amdgpu: Add additional DCE6 SCL registers
	drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
	drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
	drm/amd/display: Properly disable scaling on DCE6
	netfilter: nf_tables: drop unused 3rd argument from validate callback ops
	netfilter: nft_objref: validate objref and objrefmap expressions
	bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
	crypto: essiv - Check ssize for decryption and in-place encryption
	smb: client: fix missing timestamp updates after utime(2)
	cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points
	tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
	gpio: wcd934x: mark the GPIO controller as sleeping
	bpf: Avoid RCU context warning when unpinning htab with internal structs
	ACPI: property: Fix buffer properties extraction for subnodes
	ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
	ACPI: debug: fix signedness issues in read/write helpers
	arm64: dts: qcom: msm8916: Add missing MDSS reset
	arm64: dts: qcom: msm8939: Add missing MDSS reset
	arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
	arm64: dts: ti: k3-am62a-main: Fix main padcfg length
	ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
	dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required
	xen/events: Cleanup find_virq() return codes
	xen/manage: Fix suspend error path
	xen/events: Return -EEXIST for bound VIRQs
	xen/events: Update virq_to_irq on migration
	firmware: meson_sm: fix device leak at probe
	media: cx18: Add missing check after DMA map
	media: i2c: mt9v111: fix incorrect type for ret
	media: mc: Fix MUST_CONNECT handling for pads with no links
	media: pci: ivtv: Add missing check after DMA map
	media: venus: firmware: Use correct reset sequence for IRIS2
	media: lirc: Fix error handling in lirc_register()
	drm/rcar-du: dsi: Fix 1/2/3 lane support
	drm/nouveau: fix bad ret code in nouveau_bo_move_prep
	blk-crypto: fix missing blktrace bio split events
	btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
	bus: mhi: ep: Fix chained transfer handling in read path
	bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
	copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
	cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
	crypto: aspeed - Fix dma_unmap_sg() direction
	crypto: atmel - Fix dma_unmap_sg() direction
	crypto: rockchip - Fix dma_unmap_sg() nents value
	fbdev: Fix logic error in "offb" name match
	fs/ntfs3: Fix a resource leak bug in wnd_extend()
	iio: dac: ad5360: use int type to store negative error codes
	iio: dac: ad5421: use int type to store negative error codes
	iio: frequency: adf4350: Fix prescaler usage.
	iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK
	iio: xilinx-ams: Unmask interrupts after updating alarms
	init: handle bootloader identifier in kernel parameters
	iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
	iommu/vt-d: PRS isn't usable if PDS isn't supported
	kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
	KEYS: trusted_tpm1: Compare HMAC values in constant time
	lib/genalloc: fix device leak in of_gen_pool_get()
	of: unittest: Fix device reference count leak in of_unittest_pci_node_verify
	openat2: don't trigger automounts with RESOLVE_NO_XDEV
	parisc: don't reference obsolete termio struct for TC* constants
	parisc: Remove spurious if statement from raw_copy_from_user()
	nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
	pinctrl: samsung: Drop unused S3C24xx driver data
	power: supply: max77976_charger: fix constant current reporting
	powerpc/powernv/pci: Fix underflow and leak issue
	powerpc/pseries/msi: Fix potential underflow and leak issue
	pwm: berlin: Fix wrong register in suspend/resume
	Revert "ipmi: fix msg stack when IPMI is disconnected"
	sched/deadline: Fix race in push_dl_task()
	scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
	sctp: Fix MAC comparison to be constant-time
	sparc64: fix hugetlb for sun4u
	sparc: fix error handling in scan_one_device()
	xtensa: simdisk: add input size check in proc_write_simdisk
	mtd: rawnand: fsmc: Default to autodetect buswidth
	mmc: core: SPI mode remove cmd7
	memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
	rtc: interface: Ensure alarm irq is enabled when UIE is enabled
	rtc: interface: Fix long-standing race when setting alarm
	rseq/selftests: Use weak symbol reference, not definition, to link with glibc
	PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock
	PCI/sysfs: Ensure devices are powered for config reads
	PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
	PCI/ERR: Fix uevent on failure to recover
	PCI/AER: Fix missing uevent on recovery when a reset is requested
	PCI/AER: Support errors introduced by PCIe r6.0
	PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
	PCI: rcar-host: Drop PMSR spinlock
	PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
	PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
	PCI: tegra194: Handle errors in BPMP response
	spi: cadence-quadspi: Flush posted register writes before INDAC access
	spi: cadence-quadspi: Flush posted register writes before DAC access
	x86/umip: Check that the instruction opcode is at least two bytes
	x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
	selftests: mptcp: join: validate C-flag + def limit
	wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
	wifi: mt76: mt7921u: Add VID/PID for Netgear A7500
	mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
	mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0
	mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
	NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
	nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
	ext4: verify orphan file size is not too big
	ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
	ext4: correctly handle queries for metadata mappings
	ext4: fix an off-by-one issue during moving extents
	ext4: guard against EA inode refcount underflow in xattr update
	ext4: validate ea_ino and size in check_xattrs
	ACPICA: Allow to skip Global Lock initialization
	ext4: free orphan info with kvfree
	lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
	Squashfs: add additional inode sanity checking
	Squashfs: reject negative file sizes in squashfs_read_inode()
	media: mc: Clear minor number before put device
	mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
	mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
	mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
	tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
	mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
	KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
	ksmbd: add max ip connections parameter
	misc: fastrpc: Add missing dev_err newlines
	misc: fastrpc: Save actual DMA size in fastrpc_map structure
	PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan()
	PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release
	btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
	rseq: Protect event mask against membarrier IPI
	KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2
	ipmi: Rework user message limit handling
	ipmi: Fix handling of messages with provided receive message pointer
	arm64: kprobes: call set_memory_rox() for kprobe page
	arm64: mte: Do not flag the zero page as PG_mte_tagged
	ACPI: battery: allocate driver data through devm_ APIs
	ACPI: battery: initialize mutexes through devm_ APIs
	ACPI: battery: Check for error code from devm_mutex_init() call
	ACPI: battery: Add synchronization between interface updates
	ACPI: property: Disregard references in data-only subnode lists
	ACPI: property: Add code comments explaining what is going on
	ACPI: property: Do not pass NULL handles to acpi_attach_data()
	s390/bpf: Change seen_reg to a mask
	s390/bpf: Centralize frame offset calculations
	s390/bpf: Describe the frame using a struct instead of constants
	s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL
	s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG
	selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled
	mptcp: pm: in-kernel: usable client side with C-flag
	irqchip/sifive-plic: Make use of __assign_bit()
	irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume
	minixfs: Verify inode mode when loading from disk
	pid: Add a judgment for ns null in pid_nr_ns
	fs: Add 'initramfs_options' to set initramfs mount options
	cramfs: Verify inode mode when loading from disk
	writeback: Avoid softlockup when switching many inodes
	writeback: Avoid excessively long inode switching times
	perf test stat: Avoid hybrid assumption when virtualized
	Linux 6.6.113

Change-Id: I97fe61432f28695b94b1e40a9ce920115dbd6caf
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>