Merge 6.6.57 into android15-6.6-lts

GKI (arm64) relevant 51 out of 212 changes, affecting 78 files +635/-257
  9790a7ac Revert "PCI/MSI: Provide stubs for IMS functions" [1 file, +8/-26]
  e87cb9dd tracing: Remove precision vsnprintf() check from print event [1 file, +2/-4]
  be6c52b0 drm/crtc: fix uninitialized variable use even harder [1 file, +1/-0]
  5915b898 tracing: Have saved_cmdlines arrays all in one allocation [1 file, +8/-10]
  9e6075e1 scsi: Remove scsi device no_start_on_resume flag [2 files, +3/-7]
  a47a759e scsi: sd: Do not repeat the starting disk message [1 file, +2/-3]
  86052433 bootconfig: Fix the kerneldoc of _xbc_exit() [1 file, +2/-1]
  5f77c8e8 Bluetooth: Fix usage of __hci_cmd_sync_status [1 file, +12/-15]
  dcfaf8b5 jbd2: fix kernel-doc for j_transaction_overhead_buffers [1 file, +1/-1]
  fd949863 virtio_console: fix misc probe bugs [1 file, +10/-8]
  6272936f zram: free secondary algorithms names [1 file, +5/-0]
  6e20720b zram: don't free statically defined names [1 file, +4/-2]
  c43622d6 bpf: Check percpu map value size first [2 files, +6/-0]
  58c0648e ext4: don't set SB_RDONLY after filesystem errors [1 file, +5/-4]
  e789b7fd ext4: nested locking for xattr inode [1 file, +2/-2]
  5d5e3b4c bpf: Prevent tail call between progs attached to different hooks [2 files, +19/-3]
  bd9a77a9 PCI: Add function 0 DMA alias quirk for Glenfly Arise chip [3 files, +7/-1]
  24886858 PCI: Add ACS quirk for Qualcomm SA8775P [1 file, +2/-0]
  8f53f6f9 PCI: Mark Creative Labs EMU20k2 INTx masking as broken [1 file, +2/-0]
  f4ce3b5d io_uring: check if we need to reschedule during overflow flush [1 file, +15/-0]
  7af8d697 media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() [1 file, +4/-4]
  e418d911 serial: protect uart_port_dtr_rts() in uart_shutdown() too [1 file, +9/-7]
  5b04f41a netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash [1 file, +118/-2]
  784744b0 netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n [2 files, +6/-9]
  d885c464 driver core: bus: Fix double free in driver API bus_register() [1 file, +2/-0]
  5da98553 driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute [1 file, +4/-2]
  e676ca60 tcp: fix to allow timestamp undo if no retransmits were sent [1 file, +16/-2]
  04dce9a1 tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe [1 file, +13/-0]
  718c49f8 tcp: new TCP_INFO stats for RTO events [6 files, +63/-2]
  2daffbd8 tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out [1 file, +9/-2]
  38b2d5a5 Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change [1 file, +0/-2]
  1edf039e net/sched: accept TCA_STAB only for root qdisc [2 files, +6/-2]
  eae7435b net: do not delay dst_entries_add() in dst_release() [1 file, +12/-5]
  35b72bea rtnetlink: Add bulk registration helpers for rtnetlink message handlers. [2 files, +46/-0]
  60bfd345 bridge: Handle error of rtnl_register_module(). [3 files, +17/-13]
  f4df31a0 mctp: Handle error of rtnl_register_module(). [5 files, +66/-36]
  c8c76f15 rtnetlink: change nlk->cb_mutex role [2 files, +21/-16]
  ba5366b8 rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag [4 files, +8/-0]
  8bb79eb1 slip: make slhc_remember() more robust against malicious packets [1 file, +34/-23]
  174caf7a rcu/nocb: Make IRQs disablement symmetric [2 files, +15/-14]
  38aef06e usb: dwc3: core: Stop processing of pending events if controller is halted [3 files, +19/-18]
  cb8b441f usb: xhci: Fix problem with xhci resume from suspend [1 file, +5/-0]
  0b97fe09 usb: gadget: core: force synchronous registration [1 file, +1/-0]
  86763930 Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync [1 file, +3/-0]
  7994a484 scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb() [1 file, +2/-3]
  563e6892 net: explicitly clear the sk pointer, when pf->create fails [1 file, +6/-1]
  3be342e0 net: Fix an unsafe loop on the list [2 files, +4/-1]
  143ffa78 net: phy: Remove LED entry from LEDs list on unregister [1 file, +3/-2]
  19a50299 kthread: unpark only parked kthread [1 file, +2/-0]
  7caf9663 secretmem: disable memfd_secret() if arch cannot set direct map [1 file, +2/-2]
  8d5aebff scsi: Revert "scsi: sd: Do not repeat the starting disk message" [1 file, +3/-2]

Changes in 6.6.57
        unicode: Don't special case ignorable code points
        net: fec: don't save PTP state if PTP is unsupported
        Revert "PCI/MSI: Provide stubs for IMS functions"
        ASoC: cs35l56: Load tunings for the correct speaker models
        phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
        phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
        gfs2: Revert "introduce qd_bh_get_or_undo"
        gfs2: qd_check_sync cleanups
        gfs2: Revert "ignore negated quota changes"
        riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
        net: ethernet: cortina: Drop TSO support
        drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
        tracing: Remove precision vsnprintf() check from print event
        ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
        ALSA: hda/realtek: cs35l41: Fix device ID / model name
        drm/crtc: fix uninitialized variable use even harder
        bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
        bus: mhi: ep: Introduce async read/write callbacks
        bus: mhi: ep: Add support for async DMA write operation
        bus: mhi: ep: Add support for async DMA read operation
        bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
        Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
        pds_core: no health-thread in VF path
        libceph: init the cursor when preparing sparse read in msgr2
        tracing: Have saved_cmdlines arrays all in one allocation
        riscv: cpufeature: Fix thead vector hwcap removal
        spi: spi-fsl-lpspi: remove redundant spi_controller_put call
        ata: ahci: Add mask_port_map module parameter
        ASoC: tas2781: mark dvc_tlv with __maybe_unused
        scsi: Remove scsi device no_start_on_resume flag
        scsi: sd: Do not repeat the starting disk message
        i40e: Fix ST code value for Clause 45
        i40e: Include types.h to some headers
        e1000e: move force SMBUS near the end of enable_ulp function
        bootconfig: Fix the kerneldoc of _xbc_exit()
        perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
        perf sched: Fix memory leak in perf_sched__map()
        perf sched: Move curr_thread initialization to perf_sched__map()
        perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
        libsubcmd: Don't free the usage string
        selftests: net: Remove executable bits from library scripts
        selftests: Introduce Makefile variable to list shared bash scripts
        Bluetooth: Fix usage of __hci_cmd_sync_status
        jbd2: fix kernel-doc for j_transaction_overhead_buffers
        lib/build_OID_registry: avoid non-destructive substitution for Perl < 5.13.2 compat
        drm/amd/display: Remove a redundant check in authenticated_dp
        drm/amd/display: Revert "Check HDCP returned status"
        fs/ntfs3: Do not call file_modified if collapse range failed
        fs/ntfs3: Fix sparse warning in ni_fiemap
        fs/ntfs3: Refactor enum_rstbl to suppress static checker
        virtio_console: fix misc probe bugs
        ntfs3: Change to non-blocking allocation in ntfs_d_hash
        zram: free secondary algorithms names
        zram: don't free statically defined names
        Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
        selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
        bpf: Check percpu map value size first
        s390/facility: Disable compile time optimization for decompressor code
        s390/mm: Add cond_resched() to cmm_alloc/free_pages()
        bpf, x64: Fix a jit convergence issue
        ext4: don't set SB_RDONLY after filesystem errors
        ext4: nested locking for xattr inode
        s390/cpum_sf: Remove WARN_ON_ONCE statements
        bpf: Prevent tail call between progs attached to different hooks
        ktest.pl: Avoid false positives with grub2 skip regex
        RDMA/mad: Improve handling of timed out WRs of mad agent
        soundwire: intel_bus_common: enable interrupts before exiting reset
        PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
        RDMA/rtrs-srv: Avoid null pointer deref during path establishment
        clk: bcm: bcm53573: fix OF node leak in init
        PCI: Add ACS quirk for Qualcomm SA8775P
        i2c: i801: Use a different adapter-name for IDF adapters
        PCI: Mark Creative Labs EMU20k2 INTx masking as broken
        i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
        RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
        io_uring: check if we need to reschedule during overflow flush
        ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
        mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
        riscv: avoid Imbalance in RAS
        RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
        soundwire: cadence: re-check Peripheral status with delayed_work
        riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
        media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
        remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
        clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
        serial: protect uart_port_dtr_rts() in uart_shutdown() too
        usb: typec: tipd: Free IRQ only if it was requested before
        usb: chipidea: udc: enable suspend interrupt after usb reset
        usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
        comedi: ni_routing: tools: Check when the file could not be opened
        LoongArch: Fix memleak in pci_acpi_scan_root()
        netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
        netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
        virtio_pmem: Check device status before requesting flush
        tools/iio: Add memory allocation failure check for trigger_name
        staging: vme_user: added bound check to geoid
        driver core: bus: Fix double free in driver API bus_register()
        driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
        scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
        scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
        drm/amd/display: Check null pointer before dereferencing se
        fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
        smb: client: fix UAF in async decryption
        fbdev: sisfb: Fix strbuf array overflow
        x86/amd_nb: Add new PCI IDs for AMD family 0x1a
        x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
        NFSD: Mark filecache "down" if init fails
        ice: set correct dst VSI in only LAN filters
        ice: fix VLAN replay after reset
        SUNRPC: Fix integer overflow in decode_rc_list()
        NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
        net: phy: dp83869: fix memory corruption when enabling fiber
        tcp: fix to allow timestamp undo if no retransmits were sent
        tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
        tcp: new TCP_INFO stats for RTO events
        tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
        rxrpc: Fix uninitialised variable in rxrpc_send_data()
        netfilter: br_netfilter: fix panic with metadata_dst skb
        selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
        Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
        net: phy: bcm84881: Fix some error handling paths
        thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
        thermal: intel: int340x: processor: Fix warning during module unload
        Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
        net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
        net: dsa: b53: fix jumbo frame mtu check
        net: dsa: b53: fix max MTU for 1g switches
        net: dsa: b53: fix max MTU for BCM5325/BCM5365
        net: dsa: b53: allow lower MTUs on BCM5325/5365
        net: dsa: b53: fix jumbo frames on 10/100 ports
        drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
        nouveau/dmem: Fix privileged error in copy engine channel
        gpio: aspeed: Add the flush write to ensure the write complete.
        gpio: aspeed: Use devm_clk api to manage clock source
        platform/x86/intel/tpmi: Add defines to get version information
        powercap: intel_rapl_tpmi: Ignore minor version change
        ice: Fix netif_is_ice() in Safe Mode
        ice: rename switchdev to eswitch
        ice: Flush FDB entries before reset
        i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
        igb: Do not bring the device up after non-fatal error
        e1000e: change I219 (19) devices to ADP
        net/sched: accept TCA_STAB only for root qdisc
        net: ibm: emac: mal: fix wrong goto
        btrfs: zoned: fix missing RCU locking in error message when loading zone info
        sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
        netfilter: xtables: avoid NFPROTO_UNSPEC where needed
        netfilter: fib: check correct rtable in vrf setups
        net: do not delay dst_entries_add() in dst_release()
        rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
        vxlan: Handle error of rtnl_register_module().
        bridge: Handle error of rtnl_register_module().
        mctp: Handle error of rtnl_register_module().
        rtnetlink: change nlk->cb_mutex role
        rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
        mpls: no longer hold RTNL in mpls_netconf_dump_devconf()
        mpls: Handle error of rtnl_register_module().
        phonet: no longer hold RTNL in route_dumpit()
        phonet: Handle error of rtnl_register_module().
        ppp: fix ppp_async_encode() illegal access
        slip: make slhc_remember() more robust against malicious packets
        rcu/nocb: Make IRQs disablement symmetric
        rcu/nocb: Fix rcuog wake-up from offline softirq
        HID: mcp2200: added driver for GPIOs of MCP2200
        HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
        HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
        HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
        HID: asus: add ROG Ally N-Key ID and keycodes
        HID: asus: add ROG Z13 lightbar
        hid-asus: add ROG Ally X prod ID to quirk list
        wifi: mac80211: Avoid address calculations via out of bounds array indexing
        hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
        hwmon: (tmp513) Add missing dependency on REGMAP_I2C
        hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
        hwmon: (adm9240) Add missing dependency on REGMAP_I2C
        hwmon: (adt7470) Add missing dependency on REGMAP_I2C
        HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
        HID: multitouch: Add support for lenovo Y9000P Touchpad
        HID: plantronics: Workaround for an unexcepted opposite volume key
        Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
        usb: dwc3: core: Stop processing of pending events if controller is halted
        usb: xhci: Fix problem with xhci resume from suspend
        usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
        usb: gadget: core: force synchronous registration
        hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
        drm/v3d: Stop the active perfmon before being destroyed
        drm/vc4: Stop the active perfmon before being destroyed
        drm/i915/hdcp: fix connector refcounting
        Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
        scsi: wd33c93: Don't use stale scsi_pointer value
        scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
        mptcp: fallback when MPTCP opts are dropped after 1st data
        ata: libata: avoid superfluous disk spin down + spin up during hibernation
        net: explicitly clear the sk pointer, when pf->create fails
        net: Fix an unsafe loop on the list
        net: dsa: lan9303: ensure chip reset and wait for READY status
        net: phy: Remove LED entry from LEDs list on unregister
        mptcp: handle consistently DSS corruption
        mptcp: pm: do not remove closing subflows
        device-dax: correct pgoff align in dax_set_mapping()
        nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
        powercap: intel_rapl_tpmi: Fix bogus register reading
        selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
        selftests/rseq: Fix mm_cid test failure
        btrfs: split remaining space to discard in chunks
        kthread: unpark only parked kthread
        fs/proc/kcore.c: allow translation of physical memory addresses
        secretmem: disable memfd_secret() if arch cannot set direct map
        net: ethernet: cortina: Restore TSO support
        e1000e: fix force smbus during suspend flow
        scsi: Revert "scsi: sd: Do not repeat the starting disk message"
        Linux 6.6.57

Change-Id: I2a6b20a825181ed83798dd31990ef8414963c3c5
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>