Merge 5.15.136 into android14-5.15-lts

Changes in 5.15.136
	iommu/vt-d: Avoid memory allocation in iommu_suspend()
	scsi: core: Use a structure member to track the SCSI command submitter
	scsi: core: Rename scsi_mq_done() into scsi_done() and export it
	scsi: ib_srp: Call scsi_done() directly
	RDMA/srp: Do not call scsi_done() from srp_abort()
	RDMA/cxgb4: Check skb value for failure to allocate
	perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7
	of: overlay: Reorder struct fragment fields kerneldoc
	platform/x86: think-lmi: Fix reference leak
	platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning
	lib/test_meminit: fix off-by-one error in test_pages()
	HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
	quota: Fix slow quotaoff
	net: prevent address rewrite in kernel_bind()
	ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
	KEYS: trusted: allow use of kernel RNG for key material
	KEYS: trusted: Remove redundant static calls usage
	drm/msm/dp: do not reinitialize phy unless retry during link training
	drm/msm/dsi: skip the wait for video mode done if not applicable
	drm/msm/dsi: fix irq_of_parse_and_map() error checking
	drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow
	ravb: Fix up dma_free_coherent() call in ravb_remove()
	ravb: Fix use-after-free issue in ravb_tx_timeout_work()
	ieee802154: ca8210: Fix a potential UAF in ca8210_probe
	mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
	eth: remove copies of the NAPI_POLL_WEIGHT define
	xen-netback: use default TX queue size for vifs
	riscv, bpf: Factor out emit_call for kernel and bpf context
	riscv, bpf: Sign-extend return values
	drm/vmwgfx: fix typo of sizeof argument
	bpf: Fix verifier log for async callback return values
	net: macsec: indicate next pn update when offloading
	net: phy: mscc: macsec: reject PN update requests
	ixgbe: fix crash with empty VF macvlan list
	net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp
	net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
	net/smc: Fix pos miscalculation in statistics
	pinctrl: renesas: rzn1: Enable missing PINMUX
	nfc: nci: assert requested protocol is valid
	workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
	net: add sysctl accept_ra_min_rtr_lft
	net: change accept_ra_min_rtr_lft to affect all RA lifetimes
	net: release reference to inet6_dev pointer
	media: mtk-jpeg: Fix use after free bug due to uncanceled work
	dmaengine: stm32-mdma: abort resume if no ongoing transfer
	xhci: Keep interrupt disabled in initialization until host is running.
	usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
	net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
	usb: dwc3: Soft reset phy on probe for host
	usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled
	usb: musb: Get the musb_qh poniter after musb_giveback
	usb: musb: Modify the "HWVers" register address
	iio: pressure: bmp280: Fix NULL pointer exception
	iio: pressure: dps310: Adjust Timeout Settings
	iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
	drm/amdgpu: add missing NULL check
	drm/amd/display: Don't set dpms_off for seamless boot
	ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
	x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
	mcb: remove is_added flag from mcb_device struct
	thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge
	thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding
	libceph: use kernel_connect()
	ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
	ceph: fix type promotion bug on 32bit systems
	Input: powermate - fix use-after-free in powermate_config_complete
	Input: psmouse - fix fast_reconnect function for PS/2 mode
	Input: xpad - add PXN V900 support
	Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
	Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case
	tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
	cgroup: Remove duplicates in cgroup v1 tasks file
	pinctrl: avoid unsafe code pattern in find_pinctrl()
	counter: microchip-tcb-capture: Fix the use of internal GCLK logic
	usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
	usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
	usb: cdnsp: Fixes issue with dequeuing not queued requests
	x86/alternatives: Disable KASAN in apply_alternatives()
	dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq
	dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
	powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
	powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
	arm64: report EL1 UNDEFs better
	arm64: die(): pass 'err' as long
	arm64: consistently pass ESR_ELx to die()
	arm64: rework FPAC exception handling
	arm64: rework BTI exception handling
	arm64: allow kprobes on EL0 handlers
	arm64: split EL0/EL1 UNDEF handlers
	arm64: factor out EL1 SSBS emulation hook
	arm64: factor insn read out of call_undef_hook()
	arm64: rework EL0 MRS emulation
	arm64: armv8_deprecated: fold ops into insn_emulation
	arm64: armv8_deprecated move emulation functions
	arm64: armv8_deprecated: move aarch32 helper earlier
	arm64: armv8_deprecated: rework deprected instruction handling
	arm64: armv8_deprecated: fix unused-function error
	Revert "kernel/sched: Modify initial boot task idle setup"
	usb: hub: Guard against accesses to uninitialized BOS descriptors
	eth: remove remaining copies of the NAPI_POLL_WEIGHT define
	Linux 5.15.136

Change-Id: I0eee62c1db50e2a39585ea6cbe30717f9244e847
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>