Merge 6.12.46 into android16-6.12-lts

GKI (arm64) relevant 35 out of 175 changes, affecting 52 files +421/-253
  963e79f6 bpf: Add cookie object to bpf maps [2 files, +7/-0]
  f13441c1 bpf: Move bpf map owner out of common struct [3 files, +49/-35]
  f1f241ee bpf: Move cgroup iterator helpers to bpf.h [2 files, +14/-13]
  41688d1f bpf: Fix oob access in cgroup local storage [2 files, +16/-0]
  d619c55d cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN [1 file, +7/-0]
  70a6e89b Bluetooth: hci_sync: Avoid adding default advertising on startup [1 file, +1/-1]
  e6305292 fs: writeback: fix use-after-free in __mark_inode_dirty() [1 file, +5/-4]
  7a7ba331 HID: simplify snto32() [1 file, +2/-9]
  d6cfa97a HID: stop exporting hid_snto32() [3 files, +32/-38]
  d3b50414 HID: core: Harden s32ton() against conversion to 0 bits [1 file, +5/-1]
  7614b00f netfilter: conntrack: helper: Replace -EEXIST by -EBUSY [1 file, +2/-2]
  306b0991 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() [1 file, +3/-0]
  a22ec2ee net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y [1 file, +2/-0]
  f3d761e5 icmp: fix icmp_ndo_send address translation for reply direction [2 files, +8/-4]
  0925c3c0 macsec: read MACSEC_SA_ATTR_PN with nla_get_uint [1 file, +4/-4]
  46d33c87 net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 [1 file, +15/-17]
  14f0d3c7 net: skb: add pskb_network_may_pull_reason() helper [1 file, +7/-1]
  74872113 net: tunnel: add pskb_inet_may_pull_reason() helper [1 file, +8/-2]
  8b3e9f55 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() [1 file, +3/-4]
  631fc8ab ppp: fix memory leak in pad_compress_skb [1 file, +3/-3]
  47c72af3 ALSA: usb-audio: Add mute TLV for playback volumes on some devices [1 file, +2/-0]
  650c14ab arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE [5 files, +34/-4]
  094ba14a io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU [2 files, +12/-4]
  b051f707 mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE [1 file, +7/-2]
  4f753777 mm: move page table sync declarations to linux/pgtable.h [2 files, +16/-16]
  243b705a mm: slub: avoid wake up kswapd in set_track_prepare [1 file, +20/-10]
  3eebe856 proc: fix missing pde_set_flags() for net proc files [1 file, +21/-17]
  6482c3dc fs/fhandle.c: fix a race in call of has_locked_children() [1 file, +14/-4]
  f7976772 net: dsa: add hook to determine whether EEE is supported [2 files, +9/-0]
  cda6c5c0 net: dsa: provide implementation of .support_eee() [2 files, +17/-0]
  20a54a8d mm: slub: Print the broken data before restoring them [1 file, +14/-18]
  d06b739f mm: slub: call WARN() when detecting a slab corruption [1 file, +29/-18]
  9cd3206f mm, slab: cleanup slab_bug() parameters [1 file, +18/-10]
  dda6ec36 mm/slub: avoid accessing metadata when pointer is invalid in object_err() [1 file, +6/-1]
  1ee0e148 mm: fix accounting of memmap pages [2 files, +9/-11]

Changes in 6.12.46
	bpf: Add cookie object to bpf maps
	bpf: Move bpf map owner out of common struct
	bpf: Move cgroup iterator helpers to bpf.h
	bpf: Fix oob access in cgroup local storage
	btrfs: fix race between logging inode and checking if it was logged before
	btrfs: fix race between setting last_dir_index_offset and inode logging
	btrfs: avoid load/store tearing races when checking if an inode was logged
	LoongArch: Save LBT before FPU in setup_sigcontext()
	cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
	drm/amd/display: Don't warn when missing DCE encoder caps
	cpupower: Fix a bug where the -t option of the set subcommand was not working.
	Bluetooth: hci_sync: Avoid adding default advertising on startup
	btrfs: zoned: skip ZONE FINISH of conventional zones
	fs: writeback: fix use-after-free in __mark_inode_dirty()
	tee: fix NULL pointer dereference in tee_shm_put
	tee: fix memory leak in tee_dyn_shm_alloc_helper
	arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
	tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
	arm64: dts: imx8mp-tqma8mpql: fix LDO5 power off
	arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM
	arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC
	HID: simplify snto32()
	HID: stop exporting hid_snto32()
	HID: core: Harden s32ton() against conversion to 0 bits
	net: usb: qmi_wwan: fix Telit Cinterion FN990A name
	net: usb: qmi_wwan: fix Telit Cinterion FE990A name
	net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition
	LoongArch: vDSO: Remove --hash-style=sysv
	LoongArch: vDSO: Remove -nostdlib complier flag
	mmc: sdhci-of-arasan: Support for emmc hardware reset
	mmc: sdhci-of-arasan: Ensure CD logic stabilization before power-up
	wifi: cfg80211: fix use-after-free in cmp_bss()
	wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
	wifi: mt76: mt7925: fix locking in mt7925_change_vif_links()
	wifi: mt76: prevent non-offchannel mgmt tx during scan/roc
	wifi: mt76: free pending offchannel tx frames on wcid cleanup
	wifi: mt76: fix linked list corruption
	netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
	netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
	wifi: iwlwifi: uefi: check DSM item validity
	Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
	Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
	netfilter: nft_flowtable.sh: re-run with random mtu sizes
	net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
	xirc2ps_cs: fix register access when enabling FullDuplex
	mISDN: Fix memory leak in dsp_hwec_enable()
	selftests: drv-net: csum: fix interface name for remote host
	bnxt_en: fix incorrect page count in RX aggr ring log
	icmp: fix icmp_ndo_send address translation for reply direction
	net: macb: Fix tx_ptr_lock locking
	macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
	net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
	net: mctp: mctp_fraq_queue should take ownership of passed skb
	ice: fix NULL access of tx->in_use in ice_ll_ts_intr
	idpf: set mac type when adding and removing MAC filters
	i40e: remove read access to debugfs files
	i40e: Fix potential invalid access when MAC list is empty
	ixgbe: fix incorrect map used in eee linkmode
	wifi: ath11k: fix group data packet drops during rekey
	net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6
	net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
	net: skb: add pskb_network_may_pull_reason() helper
	net: tunnel: add pskb_inet_may_pull_reason() helper
	net: vxlan: add skb drop reasons to vxlan_rcv()
	net: vxlan: make vxlan_snoop() return drop reasons
	vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
	net: vxlan: make vxlan_set_mac() return drop reasons
	net: vxlan: use kfree_skb_reason() in vxlan_xmit()
	net: vxlan: use kfree_skb_reason() in vxlan_mdb_xmit()
	net: vxlan: rename SKB_DROP_REASON_VXLAN_NO_REMOTE
	vxlan: Refresh FDB 'updated' time upon 'NTF_USE'
	vxlan: Avoid unnecessary updates to FDB 'used' time
	vxlan: Add RCU read-side critical sections in the Tx path
	vxlan: Rename FDB Tx lookup function
	vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
	wifi: cw1200: cap SSID length in cw1200_do_join()
	wifi: libertas: cap SSID len in lbs_associate()
	wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
	net: thunder_bgx: add a missing of_node_put
	net: thunder_bgx: decrement cleanup index before use
	ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
	net/smc: Remove validation of reserved bits in CLC Decline message
	mctp: return -ENOPROTOOPT for unknown getsockopt options
	ax25: properly unshare skbs in ax25_kiss_rcv()
	net: atm: fix memory leak in atm_register_sysfs when device_register fail
	net: xilinx: axienet: Add error handling for RX metadata pointer retrieval
	ppp: fix memory leak in pad_compress_skb
	selftest: net: Fix weird setsockopt() in bind_bhash.c.
	phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
	ALSA: usb-audio: Add mute TLV for playback volumes on some devices
	accel/ivpu: Prevent recovery work from being queued during device removal
	ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
	arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE
	pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
	io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
	x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
	mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE
	mm: move page table sync declarations to linux/pgtable.h
	mm: fix possible deadlock in kmemleak
	mm: slub: avoid wake up kswapd in set_track_prepare
	sched: Fix sched_numa_find_nth_cpu() if mask offline
	kasan: fix GCC mem-intrinsic prefix with sw tags
	ocfs2: prevent release journal inode after journal shutdown
	proc: fix missing pde_set_flags() for net proc files
	of_numa: fix uninitialized memory nodes causing kernel panic
	soc: qcom: mdt_loader: Deal with zero e_shentsize
	wifi: mwifiex: Initialize the chan_stats array to zero
	wifi: mt76: mt7925u: use connac3 tx aggr check in tx complete
	wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
	wifi: mt76: mt7925: fix the wrong bss cleanup for SAP
	net: ethernet: oa_tc6: Handle failure of spi_setup
	drm/amdgpu: drop hw access in non-DC audio fini
	drm/amd/display: Clear the CUR_ENABLE register on DCN314 w/out DPP PG
	platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list
	scsi: lpfc: Fix buffer free/clear order in deferred receive path
	batman-adv: fix OOB read/write in network-coding decode
	cifs: prevent NULL pointer dereference in UTF16 conversion
	e1000e: fix heap overflow in e1000_set_eeprom
	net: pcs: rzn1-miic: Correct MODCTRL register offset
	microchip: lan865x: Fix module autoloading
	microchip: lan865x: Fix LAN8651 autoloading
	fs/fhandle.c: fix a race in call of has_locked_children()
	net: dsa: add hook to determine whether EEE is supported
	net: dsa: provide implementation of .support_eee()
	net: dsa: b53/bcm_sf2: implement .support_eee() method
	net: dsa: b53: do not enable EEE on bcm63xx
	md/raid1,raid10: don't ignore IO flags
	md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT
	md/raid1,raid10: strip REQ_NOWAIT from member bios
	ext4: define ext4_journal_destroy wrapper
	ext4: avoid journaling sb update on error if journal is destroying
	wifi: ath11k: update channel list in reg notifier instead reg worker
	wifi: ath11k: update channel list in worker when wait flag is set
	net: fix NULL pointer dereference in l3mdev_l3_rcv
	md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
	mm: slub: Print the broken data before restoring them
	mm: slub: call WARN() when detecting a slab corruption
	mm, slab: cleanup slab_bug() parameters
	mm/slub: avoid accessing metadata when pointer is invalid in object_err()
	nouveau: fix disabling the nonstall irq due to storm code
	kunit: kasan_test: disable fortify string checker on kasan_strings() test
	mm: fix accounting of memmap pages
	thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold
	dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
	rust: support Rust >= 1.91.0 target spec
	ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
	ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
	Revert "drm/amdgpu: Avoid extra evict-restore process."
	pcmcia: omap: Add missing check for platform_get_resource
	pcmcia: Add error handling for add_interval() in do_validate_mem()
	platform/x86: asus-wmi: Remove extra keys from ignore_key_wlan quirk
	platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID
	hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
	block: add a queue_limits_commit_update_frozen helper
	scsi: sr: Reinstate rotational media flag
	spi: spi-fsl-lpspi: Fix transmissions when using CONT
	spi: spi-fsl-lpspi: Set correct chip-select polarity bit
	spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
	spi: spi-fsl-lpspi: Clear status register after disabling the module
	drm/bridge: ti-sn65dsi86: fix REFCLK setting
	perf bpf-event: Fix use-after-free in synthesis
	perf bpf-utils: Constify bpil_array_desc
	perf bpf-utils: Harden get_bpf_prog_info_linear
	drm/amd/amdgpu: Fix missing error return on kzalloc failure
	tools: gpio: remove the include directory on make clean
	md: prevent incorrect update of resync/recovery offset
	ACPI: RISC-V: Fix FFH_CPPC_CSR error handling
	riscv: Only allow LTO with CMODEL_MEDANY
	riscv: use lw when reading int cpu in new_vmalloc_check
	riscv: use lw when reading int cpu in asm_per_cpu
	riscv, bpf: use lw when reading int cpu in BPF_MOV64_PERCPU_REG
	riscv, bpf: use lw when reading int cpu in bpf_get_smp_processor_id
	md/raid1: fix data lost for writemostly rdev
	dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
	Linux 6.12.46

Change-Id: I4ffa2e5ef5dfa098afa163d5adef4e87a890069e
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>