Merge 6.6.72 into android15-6.6-lts

GKI (arm64) relevant 40 out of 130 changes, affecting 50 files +456/-230
  4ddb7f96 memblock: make memblock_set_node() also warn about use of MAX_NUMNODES [1 file, +4/-0]
  fdebee5c memblock: use numa_valid_node() helper to check for invalid node ID [2 files, +12/-21]
  6b32ff20 jbd2: increase IO priority for writing revoke records [1 file, +1/-1]
  a71e465f jbd2: flush filesystem device before updating tail sequence [1 file, +2/-2]
  dc1d7afc exfat: fix the infinite loop in exfat_readdir() [1 file, +2/-1]
  1e92afe8 exfat: fix the infinite loop in __exfat_free_cluster() [1 file, +10/-0]
  26423e18 ovl: do not encode lower fh with upper sb_writers held [5 files, +104/-42]
  a3f8a2b1 ovl: pass realinode to ovl_encode_real_fh() instead of realdentry [4 files, +12/-10]
  a1a541fb ovl: support encoding fid from inode with no alias [1 file, +25/-21]
  1bf7e414 erofs: handle overlapped pclusters out of crafted images properly [1 file, +31/-28]
  14f030a8 erofs: fix PSI memstall accounting [1 file, +3/-4]
  41d2e3be net: 802: LLC+SNAP OID:PID lookup on start of skb data [1 file, +2/-2]
  b2c9204e tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog [1 file, +1/-1]
  91f89fe1 tcp/dccp: allow a connection when sk_max_ack_backlog is zero [1 file, +1/-1]
  e54beb9a net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute [1 file, +2/-1]
  ba9f7c16 ipvlan: Fix use-after-free in ipvlan_get_iflink(). [1 file, +7/-3]
  9ba06f07 Bluetooth: hci_sync: Fix not setting Random Address when required [1 file, +6/-5]
  327bd191 Bluetooth: MGMT: Fix Add Device to responding before completing [1 file, +36/-2]
  52a6d4f1 tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset [1 file, +1/-1]
  d5807dd1 netfilter: conntrack: clamp maximum hashtable size to INT_MAX [1 file, +4/-1]
  d2512434 thermal: of: fix OF node leak in of_thermal_zone_find() [1 file, +1/-0]
  e3ed5a14 io_uring/timeout: fix multishot updates [1 file, +3/-1]
  8dddc12d f2fs: fix null-ptr-deref in f2fs_submit_page_bio() [1 file, +6/-6]
  12caa73a dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) [1 file, +26/-13]
  b02cf1d2 topology: Keep the cpumask unchanged when printing cpumap [1 file, +20/-4]
  0231ecfb tty: serial: 8250: Fix another runtime PM usage counter underflow [1 file, +3/-0]
  0c50f00c usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null [1 file, +4/-4]
  730016e0 USB: core: Disable LPM only for non-suspended ports [1 file, +4/-3]
  953dea07 usb: fix reference leak in usb_new_device() [1 file, +4/-2]
  c1e7ced9 usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints [1 file, +1/-0]
  ea6a1498 usb: gadget: f_fs: Remove WARN_ON in functionfs_bind [1 file, +1/-1]
  ea57f0bb usb: gadget: configfs: Ignore trailing LF for user strings to cdev [1 file, +5/-1]
  91dd568e iio: inkern: call iio_device_put() only on mapped devices [1 file, +1/-1]
  8efff2aa io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period [1 file, +9/-4]
  be3eed59 block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() [1 file, +10/-2]
  2717b5e5 workqueue: Add rcu lock check at the end of work item execution [1 file, +5/-4]
  6dc67674 workqueue: Update lock debugging code [1 file, +34/-17]
  1fd2a57d workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker [1 file, +13/-9]
  1abe0a34 pgtable: fix s390 ptdesc field comments [1 file, +2/-2]
  56b27447 mm: hugetlb: independent PMD page table shared count [3 files, +38/-9]

Changes in 6.6.72
	memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
	memblock: use numa_valid_node() helper to check for invalid node ID
	jbd2: increase IO priority for writing revoke records
	jbd2: flush filesystem device before updating tail sequence
	dm array: fix releasing a faulty array block twice in dm_array_cursor_end
	dm array: fix unreleased btree blocks on closing a faulty array cursor
	dm array: fix cursor index when skipping across block boundaries
	exfat: fix the infinite loop in exfat_readdir()
	exfat: fix the infinite loop in __exfat_free_cluster()
	ovl: do not encode lower fh with upper sb_writers held
	ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
	ovl: support encoding fid from inode with no alias
	erofs: handle overlapped pclusters out of crafted images properly
	erofs: fix PSI memstall accounting
	ASoC: rt722: add delay time to wait for the calibration procedure
	ASoC: mediatek: disable buffer pre-allocation
	selftests/alsa: Fix circular dependency involving global-timer
	ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
	net: 802: LLC+SNAP OID:PID lookup on start of skb data
	tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
	tcp/dccp: allow a connection when sk_max_ack_backlog is zero
	net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
	net: libwx: fix firmware mailbox abnormal return
	btrfs: avoid NULL pointer dereference if no valid extent tree
	pds_core: limit loop over fw name list
	bnxt_en: Fix possible memory leak when hwrm_req_replace fails
	cxgb4: Avoid removal of uninserted tid
	ice: fix incorrect PHY settings for 100 GB/s
	igc: field get conversion
	igc: return early when failing to read EECD register
	tls: Fix tls_sw_sendmsg error handling
	ipvlan: Fix use-after-free in ipvlan_get_iflink().
	eth: gve: use appropriate helper to set xdp_features
	Bluetooth: hci_sync: Fix not setting Random Address when required
	Bluetooth: MGMT: Fix Add Device to responding before completing
	Bluetooth: btnxpuart: Fix driver sending truncated data
	tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
	riscv: Fix early ftrace nop patching
	memblock tests: fix implicit declaration of function 'numa_valid_node'
	x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()
	iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
	netfilter: nf_tables: imbalance in flowtable binding
	netfilter: conntrack: clamp maximum hashtable size to INT_MAX
	sched: sch_cake: add bounds checks to host bulk flow fairness counts
	net: stmmac: dwmac-tegra: Read iommu stream id from device tree
	net/mlx5: Fix variable not being completed when function returns
	drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
	drm/mediatek: stop selecting foreign drivers
	drm/mediatek: Fix YCbCr422 color format issue for DP
	drm/mediatek: Fix mode valid issue for dp
	drm/mediatek: Add return value check when reading DPCD
	ksmbd: fix a missing return value check bug
	afs: Fix the maximum cell name length
	platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
	ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
	cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu
	riscv: mm: Fix the out of bound issue of vmemmap address
	dm thin: make get_first_thin use rcu-safe list first function
	scsi: ufs: qcom: Power off the PHY if it was already powered on in ufs_qcom_power_up_sequence()
	dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
	mptcp: sysctl: sched: avoid using current->nsproxy
	sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
	sctp: sysctl: rto_min/max: avoid using current->nsproxy
	sctp: sysctl: auth_enable: avoid using current->nsproxy
	sctp: sysctl: udp_port: avoid using current->nsproxy
	sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
	ksmbd: Implement new SMB3 POSIX type
	drm/amd/display: Add check for granularity in dml ceil/floor helpers
	thermal: of: fix OF node leak in of_thermal_zone_find()
	smb: client: sync the root session and superblock context passwords before automounting
	riscv: Fix sleeping in invalid context in die()
	ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
	ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
	drm/amdkfd: fixed page fault when enable MES shader debugger
	drm/amd/display: increase MAX_SURFACES to the value supported by hw
	io_uring/timeout: fix multishot updates
	f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
	dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
	USB: serial: option: add MeiG Smart SRM815
	USB: serial: option: add Neoway N723-EA support
	staging: iio: ad9834: Correct phase range check
	staging: iio: ad9832: Correct phase range check
	usb-storage: Add max sectors quirk for Nokia 208
	USB: serial: cp210x: add Phoenix Contact UPS Device
	usb: dwc3: gadget: fix writing NYET threshold
	topology: Keep the cpumask unchanged when printing cpumap
	misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
	misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
	tty: serial: 8250: Fix another runtime PM usage counter underflow
	usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
	x86/fpu: Ensure shadow stack is active before "getting" registers
	usb: dwc3-am62: Disable autosuspend during remove
	USB: usblp: return error when setting unsupported protocol
	USB: core: Disable LPM only for non-suspended ports
	usb: fix reference leak in usb_new_device()
	usb: gadget: midi2: Reverse-select at the right place
	usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe()
	usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
	usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm()
	usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
	usb: gadget: configfs: Ignore trailing LF for user strings to cdev
	iio: pressure: zpa2326: fix information leak in triggered buffer
	iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
	iio: light: vcnl4035: fix information leak in triggered buffer
	iio: imu: kmx61: fix information leak in triggered buffer
	iio: adc: rockchip_saradc: fix information leak in triggered buffer
	iio: adc: ti-ads8688: fix information leak in triggered buffer
	iio: gyro: fxas21002c: Fix missing data update in trigger handler
	iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
	iio: adc: at91: call input_free_device() on allocated iio_dev
	iio: inkern: call iio_device_put() only on mapped devices
	iio: adc: ad7124: Disable all channels at probe time
	riscv: kprobes: Fix incorrect address calculation
	io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
	ARM: dts: imxrt1050: Fix clocks for mmc
	hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
	block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
	arm64: dts: rockchip: add hevc power domain clock to rk3328
	pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
	pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
	workqueue: Add rcu lock check at the end of work item execution
	workqueue: Update lock debugging code
	workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
	pgtable: fix s390 ptdesc field comments
	fs/Kconfig: make hugetlbfs a menuconfig
	mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
	mm: hugetlb: independent PMD page table shared count
	riscv: Fix text patching when IPI are used
	drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
	Linux 6.6.72

Change-Id: Ia955aafd2a108ebef06301043efd069bb6eef9aa
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>