Merge 6.6.85 into android15-6.6-lts

GKI (arm64) relevant 23 out of 76 changes, affecting 47 files +307/-269
  bfb9b940 xfrm: fix tunnel mode TX datapath in packet offload mode [1 file, +41/-0]
  8e1704e5 xfrm_output: Force software GSO only in tunnel mode [1 file, +1/-1]
  59b68359 Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters [1 file, +1/-1]
  119dcafe ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). [1 file, +2/-1]
  a235ec29 ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). [1 file, +2/-0]
  ae2ec5a5 net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES [1 file, +1/-0]
  f0372a4c Revert "gre: Fix IPv6 link-local address generation." [1 file, +6/-9]
  e26f24ca regulator: dummy: force synchronous probing [1 file, +1/-1]
  998b1aae regulator: check that dummy regulator has been probed before using it [1 file, +11/-1]
  9efb6b50 mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT [1 file, +12/-1]
  29124ae9 mm/migrate: fix shmem xarray update during migration [1 file, +4/-6]
  63b53198 proc: fix UAF in proc_get_inode() [4 files, +31/-6]
  19f4e715 efi/libstub: Avoid physical address 0x0 when doing random allocation [1 file, +4/-0]
  b7b4be1f xsk: fix an integer overflow in xp_create_and_assign_umem() [1 file, +1/-1]
  20c6561c KVM: arm64: Calculate cptr_el2 traps on activating traps [5 files, +32/-51]
  806d5c1e KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state [2 files, +8/-48]
  73f64c67 KVM: arm64: Remove host FPSIMD saving for non-protected KVM [4 files, +0/-8]
  88adb7a0 KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN [2 files, +0/-18]
  30253b3e KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN [2 files, +0/-25]
  2afe0394 KVM: arm64: Refactor exit handlers [3 files, +25/-41]
  93074abe KVM: arm64: Mark some header functions as inline [1 file, +8/-9]
  7d566962 KVM: arm64: Eagerly switch ZCR_EL{1,2} [10 files, +113/-22]
  690597da Revert "sched/core: Reduce cost of sched_move_task when config autogroup" [1 file, +3/-19]

Changes in 6.6.85
	firmware: imx-scu: fix OF node leak in .probe()
	arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
	xfrm: fix tunnel mode TX datapath in packet offload mode
	xfrm_output: Force software GSO only in tunnel mode
	soc: imx8m: Remove global soc_uid
	soc: imx8m: Use devm_* to simplify probe failure handling
	soc: imx8m: Unregister cpufreq and soc dev in cleanup path
	ARM: dts: bcm2711: PL011 UARTs are actually r1p5
	arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
	RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
	RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
	ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
	ARM: dts: bcm2711: Don't mark timer regs unconfigured
	RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
	RDMA/hns: Fix soft lockup during bt pages loop
	RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
	RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
	RDMA/hns: Fix wrong value of max_sge_rd
	Bluetooth: Fix error code in chan_alloc_skb_cb()
	Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters
	accel/qaic: Fix possible data corruption in BOs > 2G
	ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
	ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
	ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
	net: atm: fix use after free in lec_send()
	net: lwtunnel: fix recursion loops
	net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
	Revert "gre: Fix IPv6 link-local address generation."
	i2c: omap: fix IRQ storms
	can: rcar_canfd: Fix page entries in the AFL list
	can: ucan: fix out of bound read in strscpy() source
	can: flexcan: only change CAN state when link up in system PM
	can: flexcan: disable transceiver during system PM
	drm/v3d: Don't run jobs that have errors flagged in its fence
	riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
	regulator: dummy: force synchronous probing
	regulator: check that dummy regulator has been probed before using it
	accel/qaic: Fix integer overflow in qaic_validate_req()
	arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
	arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
	arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
	mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
	mmc: atmel-mci: Add missing clk_disable_unprepare()
	mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
	mm/migrate: fix shmem xarray update during migration
	proc: fix UAF in proc_get_inode()
	ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
	ARM: shmobile: smp: Enforce shmobile_smp_* alignment
	efi/libstub: Avoid physical address 0x0 when doing random allocation
	xsk: fix an integer overflow in xp_create_and_assign_umem()
	batman-adv: Ignore own maximum aggregation size during RX
	soc: qcom: pdr: Fix the potential deadlock
	drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
	drm/sched: Fix fence reference count leak
	drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
	drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
	drm/amd/display: should support dmub hw lock on Replay
	drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
	ksmbd: fix incorrect validation for num_aces field of smb_acl
	mptcp: Fix data stream corruption in the address announcement
	KVM: arm64: Calculate cptr_el2 traps on activating traps
	KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
	KVM: arm64: Remove host FPSIMD saving for non-protected KVM
	KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
	KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
	KVM: arm64: Refactor exit handlers
	KVM: arm64: Mark some header functions as inline
	KVM: arm64: Eagerly switch ZCR_EL{1,2}
	arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
	Revert "sched/core: Reduce cost of sched_move_task when config autogroup"
	btrfs: make sure that WRITTEN is set on all metadata blocks
	bnxt_en: Fix receive ring space parameters when XDP is active
	wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
	wifi: iwlwifi: mvm: ensure offloading TID queue exists
	netfilter: nft_counter: Use u64_stats_t for statistic.
	Linux 6.6.85

Change-Id: Iddd300eb099379e09951998694d9d8c24c96eab9
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>