Merge 6.12.17 into android16-6.12

GKI (arm64) relevant 39 out of 154 changes, affecting 57 files +585/-415
  93745f5f arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings [1 file, +6/-3]
  065215ef Bluetooth: qca: Update firmware-name to support board specific nvm [1 file, +85/-28]
  4a679448 Bluetooth: qca: Fix poor RF performance for WCN6855 [1 file, +3/-2]
  3e0686bc Input: serio - define serio_pause_rx guard to pause and resume serio ports [1 file, +3/-0]
  1711fd7b PCI: Make pcim_request_all_regions() a public function [2 files, +3/-1]
  969c54c8 PCI: Export pci_intx_unmanaged() and pcim_intx() [3 files, +34/-21]
  ed020100 PCI: Remove devres from pci_intx() [3 files, +4/-44]
  75334c9c PCI: Restore original INTX_DISABLE bit by pcim_intx() [1 file, +19/-15]
  3284fbfa tracing: Switch trace.c code over to use guard() [1 file, +94/-172]
  1e6419b1 tracing: Have the error of __tracing_resize_ring_buffer() passed to user [1 file, +1/-7]
  e9fec6f4 USB: gadget: f_midi: f_midi_complete to call queue_work [1 file, +1/-1]
  4381a4fa vsock/virtio: fix variables initialization during resuming [1 file, +7/-3]
  3e4c56cf net/sched: cls_api: fix error handling causing NULL dereference [1 file, +1/-1]
  22b68321 sockmap, vsock: For connectible sockets allow only connected [1 file, +3/-0]
  478a46f1 vsock/bpf: Warn on socket without transport [2 files, +4/-1]
  997ef611 tcp: adjust rcvq_space after updating scaling ratio [1 file, +9/-3]
  90c7f5cd flow_dissector: Fix handling of mixed port and port-range keys [1 file, +19/-12]
  cbd75b91 flow_dissector: Fix port range key handling in BPF conversion [1 file, +10/-8]
  36d5616b net: Add non-RCU dev_getbyhwaddr() helper [2 files, +36/-3]
  c4a0f115 arp: switch to dev_getbyhwaddr() in arp_req_set_public() [1 file, +1/-1]
  cd34a07f tcp: drop secpath at the same time as we currently drop dst [4 files, +21/-7]
  ed0ca7d2 net: allow small head cache usage with large MAX_SKB_FRAGS values [3 files, +10/-6]
  972bafed bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() [1 file, +1/-4]
  1c81ba19 bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic [2 files, +8/-6]
  d95607a5 bpf: avoid holding freeze_mutex during mmap operation [1 file, +10/-7]
  6798f428 bpf: Fix wrong copied_seq calculation [5 files, +77/-5]
  f91716d5 bpf: Disable non stream socket for strparser [1 file, +4/-1]
  fac674d2 bpf: Fix deadlock when freeing cgroup storage [1 file, +1/-1]
  f579afac net: Add rx_skb of kfree_skb to raw_tp_null_args[]. [1 file, +2/-0]
  c1f3f389 bpf: Fix softlockup in arena_map_free on 64k page kernel [1 file, +1/-1]
  d2d5fe4c nvme/ioctl: add missing space in err message [1 file, +1/-2]
  7b8894ef bpf: skip non exist keys in generic_map_lookup_batch [1 file, +5/-13]
  79151b47 io_uring/rw: forbid multishot async reads [1 file, +11/-2]
  506b9b5e io_uring: prevent opcode speculation [1 file, +2/-0]
  6f3edf2d gpiolib: protect gpio_chip with SRCU in array_info paths in multi get/set [2 files, +35/-17]
  cd1c4113 lib/iov_iter: fix import_iovec_ubuf iovec management [1 file, +2/-1]
  ff673b71 mm,madvise,hugetlb: check for 0-length range after end address adjustment [1 file, +10/-1]
  ada54b2e irqchip/gic-v3: Fix rk3399 workaround when secure interrupts are enabled [1 file, +40/-13]
  384c8291 tracing: Fix using ret variable in tracing_set_tracer() [1 file, +1/-2]

Changes in 6.12.17
	arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
	drm/xe/oa: Separate batch submission from waiting for completion
	drm/xe/oa/uapi: Define and parse OA sync properties
	drm/xe/oa: Add input fence dependencies
	xe/oa: Fix query mode of operation for OAR/OAC
	btrfs: do not assume the full page range is not dirty in extent_writepage_io()
	btrfs: move the delalloc range bitmap search into extent_io.c
	btrfs: mark all dirty sectors as locked inside writepage_delalloc()
	btrfs: remove unused btrfs_folio_start_writer_lock()
	btrfs: unify to use writer locks for subpage locking
	btrfs: rename btrfs_folio_(set|start|end)_writer_lock()
	btrfs: use btrfs_inode in extent_writepage()
	btrfs: fix double accounting race when btrfs_run_delalloc_range() failed
	btrfs: fix double accounting race when extent_writepage_io() failed
	KVM: x86: Get vcpu->arch.apic_base directly and drop kvm_get_apic_base()
	KVM: x86: Inline kvm_get_apic_mode() in lapic.h
	KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
	drm/amd/display: Refactoring if and endif statements to enable DC_LOGGER
	drm/amd/display: update dcn351 used clock offset
	drm/amd/display: Correct register address in dcn35
	Bluetooth: qca: Update firmware-name to support board specific nvm
	Bluetooth: qca: Fix poor RF performance for WCN6855
	Input: serio - define serio_pause_rx guard to pause and resume serio ports
	Input: synaptics - fix crash when enabling pass-through port
	ASoC: renesas: rz-ssi: Terminate all the DMA transactions
	ASoC: renesas: rz-ssi: Add a check for negative sample_space
	PCI: Make pcim_request_all_regions() a public function
	PCI: Export pci_intx_unmanaged() and pcim_intx()
	PCI: Remove devres from pci_intx()
	PCI: Restore original INTX_DISABLE bit by pcim_intx()
	arm64: dts: mediatek: mt8183-pumpkin: add HDMI support
	arm64: dts: mediatek: mt8183: Disable DSI display output by default
	accel/ivpu: Limit FW version string length
	accel/ivpu: Add coredump support
	accel/ivpu: Add FW state dump on TDR
	accel/ivpu: Fix error handling in recovery/reset
	drm/amdkfd: Move gfx12 trap handler to separate file
	drm/amdkfd: Ensure consistent barrier state saved in gfx12 trap handler
	tracing: Switch trace.c code over to use guard()
	tracing: Have the error of __tracing_resize_ring_buffer() passed to user
	USB: gadget: f_midi: f_midi_complete to call queue_work
	sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq()
	sched_ext: Fix migration disabled handling in targeted dispatches
	ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
	ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
	powerpc/code-patching: Disable KASAN report during patching via temporary mm
	powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
	ALSA: hda/realtek: Fixup ALC225 depop procedure
	powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
	ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device
	vsock/virtio: fix variables initialization during resuming
	geneve: Fix use-after-free in geneve_find_dev().
	ALSA: hda/cirrus: Correct the full scale volume set logic
	net/sched: cls_api: fix error handling causing NULL dereference
	ALSA: seq: Drop UMP events when no UMP-conversion is set
	s390/ism: add release function for struct device
	ibmvnic: Add stat for tx direct vs tx batched
	ibmvnic: Don't reference skb after sending to VIOS
	sockmap, vsock: For connectible sockets allow only connected
	vsock/bpf: Warn on socket without transport
	tcp: adjust rcvq_space after updating scaling ratio
	net: pse-pd: Avoid setting max_uA in regulator constraints
	net: pse-pd: Use power limit at driver side instead of current limit
	net: pse-pd: pd692x0: Fix power limit retrieval
	gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
	geneve: Suppress list corruption splat in geneve_destroy_tunnels().
	flow_dissector: Fix handling of mixed port and port-range keys
	flow_dissector: Fix port range key handling in BPF conversion
	net: Add non-RCU dev_getbyhwaddr() helper
	arp: switch to dev_getbyhwaddr() in arp_req_set_public()
	net: axienet: Set mac_managed_pm
	tcp: drop secpath at the same time as we currently drop dst
	net: allow small head cache usage with large MAX_SKB_FRAGS values
	bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
	bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
	bpf: avoid holding freeze_mutex during mmap operation
	strparser: Add read_sock callback
	bpf: Fix wrong copied_seq calculation
	bpf: Disable non stream socket for strparser
	bpf: Fix deadlock when freeing cgroup storage
	arm64: dts: rockchip: Fix lcdpwr_en pin for Cool Pi GenBook
	power: supply: da9150-fg: fix potential overflow
	power: supply: axp20x_battery: Fix fault handling for AXP717
	selftests/bpf: Add tests for raw_tp null handling
	net: Add rx_skb of kfree_skb to raw_tp_null_args[].
	bpf: Fix softlockup in arena_map_free on 64k page kernel
	arm64: dts: rockchip: adjust SMMU interrupt type on rk3588
	firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set
	md/raid*: Fix the set_queue_limits implementations
	firmware: imx: IMX_SCMI_MISC_DRV should depend on ARCH_MXC
	platform: cznic: CZNIC_PLATFORMS should depend on ARCH_MVEBU
	nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
	drm/msm: Avoid rounding up to one jiffy
	drm/msm/dpu: skip watchdog timer programming through TOP on >= SM8450
	drm/msm/dpu: enable DPU_WB_INPUT_CTRL for DPU 5.x
	drm/msm/dpu: Don't leak bits_per_component into random DSC_ENC fields
	drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG0 updated from driver side
	drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG1 against clock driver
	drm/msm/dsi/phy: Do not overwite PHY_CMN_CLK_CFG1 when choosing bitclk source
	nvme: tcp: Fix compilation warning with W=1
	nvme-tcp: fix connect failure on receiving partial ICResp PDU
	nvme/ioctl: add missing space in err message
	bpf: skip non exist keys in generic_map_lookup_batch
	drm/nouveau/pmu: Fix gp10b firmware guard
	irqchip/jcore-aic, clocksource/drivers/jcore: Fix jcore-pit interrupt request
	drm: panel: jd9365da-h3: fix reset signal polarity
	drm/msm/dpu: Disable dither in phys encoder cleanup
	drm/i915: Make sure all planes in use by the joiner have their crtc included
	drm/i915/dp: Fix error handling during 128b/132b link training
	drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
	drm/i915/gt: Use spin_lock_irqsave() in interruptible context
	io_uring/rw: forbid multishot async reads
	io_uring: prevent opcode speculation
	gpiolib: protect gpio_chip with SRCU in array_info paths in multi get/set
	tee: optee: Fix supplicant wait loop
	drop_monitor: fix incorrect initialization order
	mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
	arm64: dts: rockchip: Fix broken tsadc pinctrl names for rk3588
	arm64: dts: rockchip: Move uart5 pin configuration to px30 ringneck SoM
	arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
	soc: loongson: loongson2_guts: Add check for devm_kstrdup()
	s390/boot: Fix ESSA detection
	xfs: fix online repair probing when CONFIG_XFS_ONLINE_REPAIR=n
	lib/iov_iter: fix import_iovec_ubuf iovec management
	smb: client: fix chmod(2) regression with ATTR_READONLY
	nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
	gve: set xdp redirect target only when it is available
	ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
	ASoC: fsl_micfil: Enable default case in micfil_set_quality()
	ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
	ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
	ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
	acct: perform last write from workqueue
	acct: block access to kernel internal filesystems
	mm,madvise,hugetlb: check for 0-length range after end address adjustment
	mtd: spi-nor: sst: Fix SST write failure
	mtd: rawnand: cadence: fix error code in cadence_nand_init()
	mtd: rawnand: cadence: use dma_map_resource for sdma address
	mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
	perf/x86/intel: Fix event constraints for LNC
	irqchip/gic-v3: Fix rk3399 workaround when secure interrupts are enabled
	smb: client: Add check for next_buffer in receive_encrypted_standard()
	EDAC/qcom: Correct interrupt enable register configuration
	ftrace: Correct preemption accounting for function tracing.
	ftrace: Fix accounting of adding subops to a manager ops
	ftrace: Do not add duplicate entries in subops manager ops
	tracing: Fix using ret variable in tracing_set_tracer()
	net: pse-pd: Fix deadlock in current limit functions
	sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq()
	selftests/mm: build with -O2
	arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts
	drm/amdgpu/gfx9: manually control gfxoff for CS on RV
	drm/amdgpu: bump version for RV/PCO compute fix
	Linux 6.12.17

Change-Id: I5ee898299270b3b8a7d037d4b060ab803a3cc8db
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>