Merge 6.6.41 into android15-6.6-lts

Changes in 6.6.41
	Compiler Attributes: Add __uninitialized macro
	mm: prevent derefencing NULL ptr in pfn_section_valid()
	scsi: ufs: core: Fix ufshcd_clear_cmd racing issue
	scsi: ufs: core: Fix ufshcd_abort_one racing issue
	vfio/pci: Init the count variable in collecting hot-reset devices
	cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop
	cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
	cachefiles: stop sending new request when dropping object
	cachefiles: cancel all requests for the object that is being dropped
	cachefiles: wait for ondemand_object_worker to finish when dropping object
	cachefiles: cyclic allocation of msg_id to avoid reuse
	cachefiles: add missing lock protection when polling
	dsa: lan9303: Fix mapping between DSA port number and PHY address
	filelock: fix potential use-after-free in posix_lock_inode
	fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
	vfs: don't mod negative dentry count when on shrinker list
	net: bcmasp: Fix error code in probe()
	tcp: fix incorrect undo caused by DSACK of TLP retransmit
	bpf: Fix too early release of tcx_entry
	net: phy: microchip: lan87xx: reinit PHY after cable test
	skmsg: Skip zero length skb in sk_msg_recvmsg
	octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability()
	net: fix rc7's __skb_datagram_iter()
	i40e: Fix XDP program unloading while removing the driver
	net: ethernet: lantiq_etop: fix double free in detach
	bpf: fix order of args in call to bpf_map_kvcalloc
	bpf: make timer data struct more generic
	bpf: replace bpf_timer_init with a generic helper
	bpf: Fail bpf_timer_cancel when callback is being cancelled
	net: ethernet: mtk-star-emac: set mac_managed_pm when probing
	ppp: reject claimed-as-LCP but actually malformed packets
	ethtool: netlink: do not return SQI value if link is down
	udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
	net/sched: Fix UAF when resolving a clash
	net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
	s390: Mark psw in __load_psw_mask() as __unitialized
	arm64: dts: qcom: sc8180x: Fix LLCC reg property again
	firmware: cs_dsp: Fix overflow checking of wmfw header
	firmware: cs_dsp: Return error if block header overflows file
	firmware: cs_dsp: Validate payload length before processing block
	firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
	ASoC: SOF: Intel: hda: fix null deref on system suspend entry
	firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
	ARM: davinci: Convert comma to semicolon
	i40e: fix: remove needless retries of NVM update
	octeontx2-af: replace cpt slot with lf id on reg write
	octeontx2-af: fix a issue with cpt_lf_alloc mailbox
	octeontx2-af: fix detection of IP layer
	octeontx2-af: fix issue with IPv6 ext match for RSS
	octeontx2-af: fix issue with IPv4 match for RSS
	cifs: fix setting SecurityFlags to true
	Revert "sched/fair: Make sure to try to detach at least one movable task"
	tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
	tcp: avoid too many retransmit packets
	net: ks8851: Fix deadlock with the SPI chip variant
	net: ks8851: Fix potential TX stall after interface reopen
	USB: serial: option: add Telit generic core-dump composition
	USB: serial: option: add Telit FN912 rmnet compositions
	USB: serial: option: add Fibocom FM350-GL
	USB: serial: option: add support for Foxconn T99W651
	USB: serial: option: add Netprisma LCUK54 series modules
	USB: serial: option: add Rolling RW350-GL variants
	USB: serial: mos7840: fix crash on resume
	USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
	usb: dwc3: pci: add support for the Intel Panther Lake
	usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
	USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
	misc: microchip: pci1xxxx: Fix return value of nvmem callbacks
	hpet: Support 32-bit userspace
	xhci: always resume roothubs if xHC was reset during resume
	s390/mm: Add NULL pointer check to crst_table_free() base_crst_free()
	mm: vmalloc: check if a hash-index is in cpu_possible_mask
	mm/filemap: skip to create PMD-sized page cache if needed
	mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray
	ksmbd: discard write access to the directory open
	iio: trigger: Fix condition for own trigger
	arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical timer
	arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on
	nvmem: rmem: Fix return value of rmem_read()
	nvmem: meson-efuse: Fix return value of nvmem callbacks
	nvmem: core: only change name to fram for current attribute
	platform/x86: toshiba_acpi: Fix array out-of-bounds access
	tty: serial: ma35d1: Add a NULL check for of_node
	ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
	ALSA: hda/realtek: Enable Mute LED on HP 250 G7
	ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
	Fix userfaultfd_api to return EINVAL as expected
	pmdomain: qcom: rpmhpd: Skip retention level for Power Domains
	libceph: fix race between delayed_work() and ceph_monc_stop()
	ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
	cpufreq: ACPI: Mark boost policy as enabled when setting boost
	cpufreq: Allow drivers to advertise boost enabled
	wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU
	wireguard: allowedips: avoid unaligned 64-bit memory accesses
	wireguard: queueing: annotate intentional data race in cpu round robin
	wireguard: send: annotate intentional data race in checking empty queue
	misc: fastrpc: Fix DSP capabilities request
	misc: fastrpc: Avoid updating PD type for capability request
	misc: fastrpc: Copy the complete capability structure to user
	misc: fastrpc: Fix memory leak in audio daemon attach operation
	misc: fastrpc: Fix ownership reassignment of remote heap
	misc: fastrpc: Restrict untrusted app to attach to privileged PD
	mm/shmem: disable PMD-sized page cache if needed
	mm/damon/core: merge regions aggressively when max_nr_regions is unmet
	selftests/net: fix gro.c compilation failure due to non-existent opt_ipproto_off
	nilfs2: fix kernel bug on rename operation of broken directory
	ext4: avoid ptr null pointer dereference
	sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath
	btrfs: tree-checker: add type and sequence check for inline backrefs
	i2c: rcar: bring hardware to known state when probing
	i2c: mark HostNotify target address as used
	i2c: rcar: reset controller is mandatory for Gen3+
	i2c: rcar: introduce Gen4 devices
	i2c: rcar: ensure Gen3+ reset does not disturb local targets
	i2c: testunit: avoid re-issued work after read message
	i2c: rcar: clear NO_RXDMA flag after resetting
	x86/entry: Rename ignore_sysret()
	x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
	x86/bhi: Avoid warning in #DB handler due to BHI mitigation
	kbuild: Make ld-version.sh more robust against version string changes
	i2c: rcar: fix error code in probe()
	Linux 6.6.41

Change-Id: Ie3b5f2506a5ec025294f71f7f4cf0c8bd967091d
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>