Merge 6.12.53 into android16-6.12-lts

GKI (arm64) relevant 44 out of 261 changes, affecting 47 files +357/-233
  a13e07ab filelock: add FL_RECLAIM to show_fl_flags() macro [1 file, +2/-1]
  dadf1f44 seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast [1 file, +5/-7]
  8690cf59 uprobes: uprobe_warn should use passed task [1 file, +1/-1]
  e907b272 regmap: Remove superfluous check for !config in __regmap_init() [1 file, +1/-1]
  f059795e bpf: Remove migrate_disable in kprobe_multi_link_prog_run [1 file, +7/-2]
  1a1f50bd cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() [1 file, +10/-0]
  babc634e blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx [1 file, +4/-2]
  60002c90 block: use int to store blk_stack_limits() return value [1 file, +2/-1]
  4e0043a5 PM: sleep: core: Clear power.must_resume in noirq suspend error path [1 file, +13/-1]
  3a57944a vdso: Add struct __kernel_old_timeval forward declaration to gettime.h [1 file, +1/-0]
  13f46cfa mmc: core: Fix variable shadowing in mmc_route_rpmb_frames() [1 file, +3/-3]
  fe9d33f0 bpf: Explicitly check accesses to bpf_sock_addr [1 file, +10/-6]
  76e53c74 bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() [1 file, +1/-2]
  372a5b01 smp: Fix up and expand the smp_call_function_many() kerneldoc [1 file, +5/-6]
  a9f10c9f spi: fix return code when spi device has too many chipselects [1 file, +1/-1]
  bafb3f16 bpf: Mark kfuncs as __noclone [1 file, +1/-1]
  f856c598 bpf: Enforce expected_attach_type for tailcall compatibility [2 files, +6/-0]
  50c3564c inet: ping: check sock_net() in ping_get_port() and ping_lookup() [1 file, +10/-4]
  96a1e350 tcp: fix __tcp_close() to only send RST when required [1 file, +5/-4]
  97f27d4a usb: gadget: configfs: Correctly set use_os_string at bind [1 file, +2/-0]
  f01fa358 pps: fix warning in pps_register_cdev when register device fail [2 files, +3/-7]
  5be3c747 iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() [1 file, +14/-14]
  e2ed5701 iio: consumers: Fix offset handling in iio_convert_raw_to_processed() [1 file, +1/-1]
  f9bd59d1 f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() [1 file, +1/-1]
  a7b7ebdd f2fs: fix to truncate first page in error path of f2fs_truncate() [1 file, +9/-1]
  d6b19dac f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() [1 file, +19/-20]
  63ee96c7 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT [1 file, +15/-10]
  5b1c071d HID: hidraw: tighten ioctl command parsing [2 files, +124/-102]
  8ec4fa03 f2fs: fix zero-sized extent for precache extents [1 file, +4/-3]
  11559d14 Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" [1 file, +4/-7]
  78e7653d netfilter: nfnetlink: reset nlh pointer during batch replay [1 file, +2/-0]
  6053e47b net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast [1 file, +0/-2]
  9a331a8d Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO [1 file, +4/-6]
  80689777 Bluetooth: ISO: Fix possible UAF on iso_conn_free [1 file, +7/-0]
  cd4d1267 Bluetooth: ISO: free rx_skb if not consumed [1 file, +2/-0]
  63a39169 Bluetooth: ISO: don't leak skb in ISO_CONT RX [1 file, +1/-1]
  fe66d9a9 Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements [1 file, +6/-4]
  bd117f72 KEYS: X.509: Fix Basic Constraints CA flag parsing [1 file, +12/-4]
  5017c302 bpf: Reject negative offsets for ALU ops [1 file, +2/-2]
  696ba603 io_uring/waitid: always prune wait queue entry in io_waitid_wait() [1 file, +2/-1]
  19ca4528 dm: fix NULL pointer dereference in __dm_suspend() [1 file, +4/-3]
  48c96b7e Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak [1 file, +1/-0]
  688c688e pinctrl: check the return value of pinmux_ops::get_function_name() [1 file, +1/-1]
  15345173 net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock [1 file, +29/-0]

Changes in 6.12.53
	filelock: add FL_RECLAIM to show_fl_flags() macro
	init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD
	seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast
	selftests: arm64: Check fread return value in exec_target
	gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote
	powerpc/8xx: Remove left-over instruction and comments in DataStoreTLBMiss handler
	powerpc/603: Really copy kernel PGD entries into all PGDIRs
	uprobes: uprobe_warn should use passed task
	coresight: trbe: Prevent overflow in PERF_IDX2OFF()
	perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
	smb: server: fix IRD/ORD negotiation with the client
	EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
	x86/vdso: Fix output operand size of RDPID
	lsm: CONFIG_LSM can depend on CONFIG_SECURITY
	btrfs: return any hit error from extent_writepage_io()
	pinctrl: renesas: rzg2l: Fix invalid unsigned return in rzg3s_oen_read()
	arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0
	regmap: Remove superfluous check for !config in __regmap_init()
	bpf/selftests: Fix test_tcpnotify_user
	bpf: Remove migrate_disable in kprobe_multi_link_prog_run
	libbpf: Fix reuse of DEVMAP
	ARM: dts: renesas: porter: Fix CAN pin group
	leds: flash: leds-qcom-flash: Update torch current clamp setting
	cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
	firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver
	arm64: dts: imx93-kontron: Fix GPIO for panel regulator
	arm64: dts: imx93-kontron: Fix USB port assignment
	arm64: dts: imx95: Correct the lpuart7 and lpuart8 srcid
	ACPI: processor: idle: Fix memory leak when register cpuidle device failed
	soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
	pinctrl: meson-gxl: add missing i2c_d pinmux
	blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
	ARM: at91: pm: fix MCKx restore routine
	arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map
	regulator: scmi: Use int type to store negative error codes
	selftests/nolibc: fix EXPECT_NZ macro
	leds: leds-lp55xx: Use correct address for memory programming
	block: use int to store blk_stack_limits() return value
	PM: sleep: core: Clear power.must_resume in noirq suspend error path
	vdso: Add struct __kernel_old_timeval forward declaration to gettime.h
	ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax
	ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS
	ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property
	PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
	power: supply: cw2015: Fix a alignment coding style issue
	pinctrl: renesas: Use int type to store negative error codes
	null_blk: Fix the description of the cache_size module argument
	selftests: vDSO: Fix -Wunitialized in powerpc VDSO_CALL() wrapper
	selftests: vDSO: vdso_test_abi: Correctly skip whole test with missing vDSO
	arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0
	nbd: restrict sockets to TCP and UDP
	PM / devfreq: rockchip-dfi: double count on RK3588
	firmware: firmware: meson-sm: fix compile-test default
	soc: mediatek: mtk-svs: fix device leaks on mt8183 probe failure
	soc: mediatek: mtk-svs: fix device leaks on mt8192 probe failure
	cpuidle: qcom-spm: fix device and OF node leaks at probe
	arm64: dts: mediatek: mt8186-tentacruel: Fix touchscreen model
	arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names
	mmc: core: Fix variable shadowing in mmc_route_rpmb_frames()
	arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value
	arm64: dts: mediatek: mt8395-kontron-i1200: Fix MT6360 regulator nodes
	arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
	pwm: tiehrpwm: Don't drop runtime PM reference in .free()
	pwm: tiehrpwm: Make code comment in .free() more useful
	pwm: tiehrpwm: Fix various off-by-one errors in duty-cycle calculation
	pwm: tiehrpwm: Fix corner case in clock divisor calculation
	ACPICA: Fix largest possible resource descriptor index
	riscv, bpf: Sign extend struct ops return values properly
	nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
	i3c: master: svc: Use manual response for IBI events
	i3c: master: svc: Recycle unused IBI slot
	selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
	bpf: Explicitly check accesses to bpf_sock_addr
	bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free()
	smp: Fix up and expand the smp_call_function_many() kerneldoc
	tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers
	spi: fix return code when spi device has too many chipselects
	bpf: Mark kfuncs as __noclone
	once: fix race by moving DO_ONCE to separate section
	hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems
	thermal/drivers/qcom: Make LMH select QCOM_SCM
	thermal/drivers/qcom/lmh: Add missing IRQ includes
	i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
	i2c: designware: Fix clock issue when PM is disabled
	i2c: designware: Add disabling clocks when probe fails
	libbpf: Fix error when st-prefix_ops and ops from differ btf
	bpf: Enforce expected_attach_type for tailcall compatibility
	drm/panel: novatek-nt35560: Fix invalid return value
	drm/radeon/r600_cs: clean up of dead code in r600_cs
	f2fs: fix condition in __allow_reserved_blocks()
	drm/bridge: it6505: select REGMAP_I2C
	media: zoran: Remove zoran_fh structure
	phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568
	usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
	usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls
	serial: max310x: Add error checking in probe()
	drm/amd/display: Remove redundant semicolons
	crypto: keembay - Add missing check after sg_nents_for_len()
	hwrng: nomadik - add ARM_AMBA dependency
	scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
	scsi: myrs: Fix dma_alloc_coherent() error check
	crypto: octeontx2 - Call strscpy() with correct size argument
	media: rj54n1cb0c: Fix memleak in rj54n1_probe()
	RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count
	RDMA/mlx5: Fix vport loopback forcing for MPV device
	PCI/ACPI: Fix pci_acpi_preserve_config() memory leak
	ALSA: lx_core: use int type to store negative error codes
	media: st-delta: avoid excessive stack usage
	crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations
	crypto: hisilicon - re-enable address prefetch after device resuming
	crypto: hisilicon/qm - check whether the input function and PF are on the same device
	inet: ping: check sock_net() in ping_get_port() and ping_lookup()
	coresight: Only register perf symlink for sinks with alloc_buffer
	drm/amdgpu: Power up UVD 3 for FW validation (v2)
	drm/amd/pm: Disable ULV even if unsupported (v3)
	drm/amd/pm: Fix si_upload_smc_data (v3)
	drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
	drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
	drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
	drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3)
	wifi: mwifiex: send world regulatory domain to driver
	PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
	tcp: fix __tcp_close() to only send RST when required
	drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
	usb: phy: twl6030: Fix incorrect type for ret
	usb: gadget: configfs: Correctly set use_os_string at bind
	tty: n_gsm: Don't block input queue by waiting MSC
	misc: genwqe: Fix incorrect cmd field being reported in error
	pps: fix warning in pps_register_cdev when register device fail
	wifi: iwlwifi: Remove redundant header files
	idpf: fix Rx descriptor ready check barrier in splitq
	ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
	ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
	ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
	drm/msm/dpu: fix incorrect type for ret
	fs: ntfs3: Fix integer overflow in run_unpack()
	fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
	iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed()
	iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
	netfilter: ipset: Remove unused htable_bits in macro ahash_region
	ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
	watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
	drivers/base/node: handle error properly in register_one_node()
	RDMA/cm: Rate limit destroy CM ID timeout error message
	wifi: mt76: fix potential memory leak in mt76_wmac_probe()
	wifi: mt76: mt7996: Fix RX packets configuration for primary WED device
	wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE
	wifi: mt76: mt7915: fix mt7981 pre-calibration
	f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks()
	f2fs: fix to truncate first page in error path of f2fs_truncate()
	f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page()
	ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
	ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
	scsi: qla2xxx: edif: Fix incorrect sign of error code
	scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
	scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp()
	HID: hidraw: tighten ioctl command parsing
	f2fs: fix zero-sized extent for precache extents
	Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
	RDMA/core: Resolve MAC of next-hop device without ARP support
	IB/sa: Fix sa_local_svc_timeout_ms read race
	Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
	wifi: ath12k: fix wrong logging ID used for CE
	wifi: ath10k: avoid unnecessary wait for service ready message
	iommu/vt-d: debugfs: Fix legacy mode page table dump logic
	wifi: mac80211: fix Rx packet handling when pubsta information is not available
	ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
	sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
	sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
	sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
	sparc: fix accurate exception reporting in copy_to_user for Niagara 4
	sparc: fix accurate exception reporting in copy_{from,to}_user for M7
	vfio/pds: replace bitmap_free with vfree
	crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs
	RDMA/rxe: Fix race in do_task() when draining
	wifi: rtw89: avoid circular locking dependency in ser_state_run()
	PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert()
	remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
	dm vdo: return error on corrupted metadata in start_restoring_volume functions
	coresight-etm4x: Conditionally access register TRCEXTINSELR
	coresight: tmc: Support atclk
	coresight: catu: Support atclk
	coresight: etm4x: Support atclk
	coresight: trbe: Return NULL pointer for allocation failures
	coresight: tpda: fix the logic to setup the element size
	coresight: Fix incorrect handling for return value of devm_kzalloc
	NFSv4.1: fix backchannel max_resp_sz verification check
	ipvs: Defer ip_vs_ftp unregister during netns cleanup
	netfilter: nfnetlink: reset nlh pointer during batch replay
	scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
	usb: vhci-hcd: Prevent suspending virtually attached devices
	PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion
	PCI: rcar-gen4: Assure reset occurs before DBI access
	PCI: rcar-gen4: Fix inverted break condition in PHY initialization
	iommu/vt-d: Disallow dirty tracking if incoherent page walk
	RDMA/siw: Always report immediate post SQ errors
	net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
	ptp: Add a upper bound on max_vclocks
	vhost: vringh: Fix copy_to_iter return value check
	Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
	Bluetooth: ISO: Fix possible UAF on iso_conn_free
	Bluetooth: ISO: free rx_skb if not consumed
	Bluetooth: ISO: don't leak skb in ISO_CONT RX
	Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements
	KEYS: X.509: Fix Basic Constraints CA flag parsing
	hwrng: ks-sa - fix division by zero in ks_sa_rng_init
	ocfs2: fix double free in user_cluster_connect()
	drivers/base/node: fix double free in register_one_node()
	mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands
	PCI: j721e: Fix incorrect error message in probe()
	idpf: fix mismatched free function for dma_alloc_coherent
	nfp: fix RSS hash key size when RSS is not supported
	net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
	net: dlink: handle copy_thresh allocation failure
	net/mlx5: Stop polling for command response if interface goes down
	net/mlx5: pagealloc: Fix reclaim race during command interface teardown
	net/mlx5: fw reset, add reset timeout work
	smb: client: fix crypto buffers in non-linear memory
	Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
	vhost: vringh: Modify the return value check
	bpf: Reject negative offsets for ALU ops
	tpm: Disable TPM2_TCG_HMAC by default
	Squashfs: fix uninit-value in squashfs_get_parent
	uio_hv_generic: Let userspace take care of interrupt mask
	io_uring/waitid: always prune wait queue entry in io_waitid_wait()
	ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
	ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down
	ASoC: codecs: wcd937x: set the comp soundwire port correctly
	ASoC: codecs: wcd937x: make stub functions inline
	fs: udf: fix OOB read in lengthAllocDescs handling
	net: nfc: nci: Add parameter validation for packet data
	mfd: rz-mtu3: Fix MTU5 NFCR register offset
	mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
	dm: fix queue start/stop imbalance under suspend/load/resume races
	dm: fix NULL pointer dereference in __dm_suspend()
	LoongArch: Automatically disable kaslr if boot from kexec_file
	ksmbd: Fix race condition in RPC handle list access
	ksmbd: fix error code overwriting in smb2_get_info_filesystem()
	ksmbd: add max ip connections parameter
	ext4: fix checks for orphan inodes
	KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
	fbdev: simplefb: Fix use after free in simplefb_detach_genpds()
	mm: hugetlb: avoid soft lockup when mprotect to large memory area
	nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
	misc: fastrpc: Save actual DMA size in fastrpc_map structure
	misc: fastrpc: Fix fastrpc_map_lookup operation
	misc: fastrpc: fix possible map leak in fastrpc_put_args
	misc: fastrpc: Skip reference for DMA handles
	Input: atmel_mxt_ts - allow reset GPIO to sleep
	Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
	sunrpc: fix null pointer dereference on zero-length checksum
	remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()
	tee: fix register_shm_helper()
	pinctrl: check the return value of pinmux_ops::get_function_name()
	bus: fsl-mc: Check return value of platform_get_resource()
	net/9p: Fix buffer overflow in USB transport layer
	net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
	usb: typec: tipd: Clear interrupts first
	arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode
	usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
	Linux 6.12.53

Change-Id: Ic6accefdd1b8f2baeab278c3320ea6e0b273c1da
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>