Merge 6.6.96 into android15-6.6-lts

GKI (arm64) relevant 31 out of 139 changes, affecting 36 files +289/-148
  35cda861 mailbox: Not protect module_put with spin_lock_irqsave [1 file, +1/-1]
  a13b2634 leds: multicolor: Fix intensity setting while SW blinking [1 file, +2/-1]
  96715eb1 fuse: fix race between concurrent setattrs from multiple nodes [1 file, +11/-0]
  969c9646 PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane [1 file, +1/-4]
  433cb3e7 usb: Add checks for snprintf() calls in usb_alloc_dev() [1 file, +10/-4]
  8851e405 usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode [1 file, +4/-0]
  23fe269b usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set [1 file, +2/-2]
  f3465bb3 ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock [1 file, +2/-0]
  d120737a scsi: ufs: core: Don't perform UFS clkscaling during host async scan [1 file, +3/-0]
  2cbeb47e ovl: Check for NULL d_inode() in ovl_dentry_upper() [1 file, +3/-1]
  3bc5abf8 f2fs: don't over-report free space or inodes in statvfs [1 file, +18/-12]
  b7904e2f af_unix: Define locking order for unix_table_double_lock(). [1 file, +11/-1]
  fd3af69c af_unix: Define locking order for U_LOCK_SECOND in unix_state_double_lock(). [1 file, +15/-1]
  0919388a af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in unix_collect_skb(). [2 files, +22/-7]
  aabb458c af_unix: Don't call skb_get() for OOB skb. [2 files, +7/-36]
  fad0a2c1 af_unix: Don't leave consecutive consumed OOB skbs. [1 file, +11/-2]
  64a99eff lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() [1 file, +8/-1]
  74fcb385 ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() [1 file, +2/-0]
  591f7962 attach_recursive_mnt(): do not lock the covering tree when sliding something under it [1 file, +4/-4]
  d58343f8 af_unix: Don't set -ECONNRESET for consumed OOB skb. [1 file, +12/-6]
  8f96a2ae vsock/uapi: fix linux/vm_sockets.h userspace compilation errors [1 file, +4/-0]
  0804d77f net: selftests: fix TCP packet checksum [1 file, +3/-2]
  e395e34b Bluetooth: L2CAP: Fix L2CAP MTU negotiation [1 file, +8/-1]
  33acbeeb HID: wacom: fix memory leak on kobject creation failure [1 file, +3/-1]
  f531651c HID: wacom: fix memory leak on sysfs attribute creation failure [1 file, +1/-0]
  42cf4f01 HID: wacom: fix kobject reference count leak [1 file, +1/-0]
  56aa7679 media: uvcvideo: Rollback non processed entities on error [1 file, +26/-13]
  c46358d0 Revert "ipv6: save dontfrag in cork" [2 files, +4/-6]
  6f27bbf3 nvme: always punt polled uring_cmd end_io work to task_work [1 file, +7/-9]
  67a50f57 firmware: arm_scmi: Add a common helper to check if a message is supported [2 files, +38/-0]
  f9917821 firmware: arm_scmi: Ensure that the message-id supports fastchannel [2 files, +45/-33]

Changes in 6.6.96
	cifs: Correctly set SMB1 SessionKey field in Session Setup Request
	cifs: Fix cifs_query_path_info() for Windows NT servers
	cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode
	NFSv4: Always set NLINK even if the server doesn't support it
	NFSv4.2: fix listxattr to return selinux security label
	mailbox: Not protect module_put with spin_lock_irqsave
	mfd: max14577: Fix wakeup source leaks on device unbind
	sunrpc: don't immediately retransmit on seqno miss
	leds: multicolor: Fix intensity setting while SW blinking
	fuse: fix race between concurrent setattrs from multiple nodes
	cxl/region: Add a dev_err() on missing target list entries
	NFSv4: xattr handlers should check for absent nfs filehandles
	hwmon: (pmbus/max34440) Fix support for max34451
	ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension
	ksmbd: provide zero as a unique ID to the Mac client
	rust: module: place cleanup_module() in .exit.text section
	dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
	dmaengine: xilinx_dma: Set dma_device directions
	PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane
	PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
	md/md-bitmap: fix dm-raid max_write_behind setting
	amd/amdkfd: fix a kfd_process ref leak
	bcache: fix NULL pointer in cache_set_flush()
	drm/scheduler: signal scheduled fence when kill job
	iio: pressure: zpa2326: Use aligned_s64 for the timestamp
	um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
	um: use proper care when taking mmap lock during segfault
	coresight: Only check bottom two claim bits
	usb: dwc2: also exit clock_gating when stopping udc while suspended
	iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
	misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
	usb: potential integer overflow in usbg_make_tpg()
	tty: serial: uartlite: register uart driver in init
	usb: common: usb-conn-gpio: use a unique name for usb connector device
	usb: Add checks for snprintf() calls in usb_alloc_dev()
	usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
	usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
	usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
	ALSA: hda: Ignore unsol events for cards being shut down
	ALSA: hda: Add new pci id for AMD GPU display HD audio controller
	ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
	ceph: fix possible integer overflow in ceph_zero_objects()
	scsi: ufs: core: Don't perform UFS clkscaling during host async scan
	ovl: Check for NULL d_inode() in ovl_dentry_upper()
	btrfs: handle csum tree error with rescue=ibadroots correctly
	fs/jfs: consolidate sanity checking in dbMount
	jfs: validate AG parameters in dbMount() to prevent crashes
	ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe()
	ASoC: codec: wcd9335: Convert to GPIO descriptors
	ASoC: codecs: wcd9335: Fix missing free of regulator supplies
	f2fs: don't over-report free space or inodes in statvfs
	Drivers: hv: vmbus: Add utility function for querying ring size
	uio_hv_generic: Query the ringbuffer size for device
	uio_hv_generic: Align ring size to system page
	PCI: apple: Use helper function for_each_child_of_node_scoped()
	PCI: apple: Set only available ports up
	tty: vt: make init parameter of consw::con_init() a bool
	tty: vt: sanitize arguments of consw::con_clear()
	tty: vt: make consw::con_switch() return a bool
	dummycon: Trigger redraw when switching consoles with deferred takeover
	platform/x86: ideapad-laptop: introduce a generic notification chain
	platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc
	platform/x86: ideapad-laptop: move ACPI helpers from header to source file
	platform/x86: ideapad-laptop: use usleep_range() for EC polling
	af_unix: Define locking order for unix_table_double_lock().
	af_unix: Define locking order for U_LOCK_SECOND in unix_state_double_lock().
	af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in unix_collect_skb().
	af_unix: Don't call skb_get() for OOB skb.
	af_unix: Don't leave consecutive consumed OOB skbs.
	i2c: tiny-usb: disable zero-length read messages
	i2c: robotfuzz-osif: disable zero-length read messages
	mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
	ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
	s390/pkey: Prevent overflow in size calculation for memdup_user()
	lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
	atm: clip: prevent NULL deref in clip_push()
	ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
	attach_recursive_mnt(): do not lock the covering tree when sliding something under it
	libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
	wifi: mac80211: fix beacon interval calculation overflow
	af_unix: Don't set -ECONNRESET for consumed OOB skb.
	vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
	um: ubd: Add missing error check in start_io_thread()
	libbpf: Fix possible use-after-free for externs
	net: enetc: Correct endianness handling in _enetc_rd_reg64
	atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
	ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
	net: selftests: fix TCP packet checksum
	drm/i915: fix build error some more
	drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
	drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
	smb: client: fix potential deadlock when reconnecting channels
	EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs
	staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
	dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
	serial: imx: Restore original RXTL for console to fix data loss
	Bluetooth: L2CAP: Fix L2CAP MTU negotiation
	dm-raid: fix variable in journal device check
	btrfs: fix a race between renames and directory logging
	btrfs: update superblock's device bytes_used when dropping chunk
	net: libwx: fix the creation of page_pool
	HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
	HID: wacom: fix memory leak on kobject creation failure
	HID: wacom: fix memory leak on sysfs attribute creation failure
	HID: wacom: fix kobject reference count leak
	scsi: megaraid_sas: Fix invalid node index
	drm/ast: Fix comment on modeset lock
	drm/cirrus-qemu: Fix pitch programming
	drm/etnaviv: Protect the scheduler's pending list with its lock
	drm/tegra: Assign plane type before registration
	drm/tegra: Fix a possible null pointer dereference
	drm/udl: Unregister device before cleaning up on disconnect
	drm/msm/gpu: Fix crash when throttling GPU immediately during boot
	drm/amdkfd: Fix race in GWS queue scheduling
	drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
	drm/bridge: cdns-dsi: Fix phy de-init and flag it so
	drm/bridge: cdns-dsi: Fix connecting to next bridge
	drm/bridge: cdns-dsi: Check return value when getting default PHY config
	drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
	drm/amd/display: Add null pointer check for get_first_active_display()
	drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
	drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
	drm/amdgpu: Add kicker device detection
	drm/amdgpu: switch job hw_fence to amdgpu_fence
	ksmbd: Use unsafe_memcpy() for ntlm_negotiate
	ksmbd: remove unsafe_memcpy use in session setup
	scripts: clean up IA-64 code
	kbuild: rpm-pkg: simplify installkernel %post
	media: uvcvideo: Rollback non processed entities on error
	s390/entry: Fix last breaking event handling in case of stack corruption
	Kunit to check the longest symbol length
	x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
	Revert "ipv6: save dontfrag in cork"
	spi: spi-cadence-quadspi: Fix pm runtime unbalance
	nvme: always punt polled uring_cmd end_io work to task_work
	firmware: arm_scmi: Add a common helper to check if a message is supported
	firmware: arm_scmi: Ensure that the message-id supports fastchannel
	ARM: 9354/1: ptrace: Use bitfield helpers
	Linux 6.6.96

Change-Id: Iadeae78f7c4d52dcb2037f88c6d651626f62054b
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>