Merge 6.6.50 into android15-6.6-lts

Changes in 6.6.50
	drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
	drm: panel-orientation-quirks: Add quirk for OrangePi Neo
	scsi: ufs: core: Check LSDBS cap when !mcq
	scsi: ufs: core: Bypass quick recovery if force reset is needed
	btrfs: tree-checker: validate dref root and objectid
	ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
	ALSA: hda/conexant: Mute speakers at suspend / shutdown
	ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
	ALSA: ump: Explicitly reset RPN with Null RPN
	ALSA: seq: ump: Use the common RPN/bank conversion context
	ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
	ALSA: seq: ump: Explicitly reset RPN with Null RPN
	net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
	smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
	ASoC: amd: yc: Support mic on HP 14-em0002la
	spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
	i2c: Fix conditional for substituting empty ACPI functions
	dma-debug: avoid deadlock between dma debug vs printk and netconsole
	net: usb: qmi_wwan: add MeiG Smart SRM825L
	ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
	ASoC: codecs: ES8326: button detect issue
	mptcp: make pm_remove_addrs_and_subflows static
	mptcp: pm: fix RM_ADDR ID for the initial subflow
	selftests: mptcp: userspace pm create id 0 subflow
	selftests: mptcp: dump userspace addrs list
	selftests: mptcp: userspace pm get addr tests
	selftests: mptcp: declare event macros in mptcp_lib
	selftests: mptcp: join: cannot rm sf if closed
	selftests: mptcp: add explicit test case for remove/readd
	selftests: mptcp: join: check re-using ID of unused ADD_ADDR
	selftests: mptcp: join: check re-adding init endp with != id
	selftests: mptcp: add mptcp_lib_events helper
	selftests: mptcp: join: validate event numbers
	selftests: mptcp: join: check re-re-adding ID 0 signal
	selftests: mptcp: join: test for flush/re-add endpoints
	selftests: mptcp: join: disable get and dump addr checks
	selftests: mptcp: join: stop transfer when check is done (part 2.2)
	mptcp: avoid duplicated SUB_CLOSED events
	mptcp: pr_debug: add missing \n at the end
	drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
	drm/amd/display: Assign linear_pitch_alignment even for VM
	drm/amdgpu: fix overflowed array index read warning
	drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
	drm/amd/pm: fix uninitialized variable warning
	drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
	drm/amd/pm: fix warning using uninitialized value of max_vid_step
	drm/amd/pm: Fix negative array index read
	drm/amd/pm: fix the Out-of-bounds read warning
	drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
	drm/amdgpu: avoid reading vf2pf info size from FB
	drm/amd/display: Check gpio_id before used as array index
	drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
	drm/amd/display: Check index for aux_rd_interval before using
	drm/amd/display: Add array index check for hdcp ddc access
	drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
	drm/amd/display: Check msg_id before processing transcation
	drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
	drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
	drm/amd/display: Spinlock before reading event
	drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
	drm/amd/display: Ensure index calculation will not overflow
	drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
	drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
	drm/amd/amdgpu: Check tbo resource pointer
	drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
	drm/amdgpu/pm: Fix uninitialized variable warning for smu10
	drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
	drm/amdgpu: Fix the uninitialized variable warning
	drm/amdgpu: Fix out-of-bounds write warning
	drm/amdkfd: Check debug trap enable before write dbg_ev_file
	drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
	drm/amdgpu: fix ucode out-of-bounds read warning
	drm/amdgpu: fix mc_data out-of-bounds read warning
	drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
	apparmor: fix possible NULL pointer dereference
	wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
	wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
	drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
	drm/amdgpu: Fix the warning division or modulo by zero
	drm/amdgpu: fix dereference after null check
	drm/amdgpu: fix the waring dereferencing hive
	drm/amd/pm: check specific index for aldebaran
	drm/amd/pm: check specific index for smu13
	drm/amdgpu: the warning dereferencing obj for nbio_v7_4
	drm/amd/pm: check negtive return for table entries
	wifi: rtw89: ser: avoid multiple deinit on same CAM
	drm/kfd: Correct pinned buffer handling at kfd restore and validate process
	drm/amdgpu: update type of buf size to u32 for eeprom functions
	wifi: iwlwifi: remove fw_running op
	cpufreq: scmi: Avoid overflow of target_freq in fast switch
	PCI: al: Check IORESOURCE_BUS existence during probe
	wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
	hwspinlock: Introduce hwspin_lock_bust()
	soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
	RDMA/efa: Properly handle unexpected AQ completions
	ionic: fix potential irq name truncation
	pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
	rcu/nocb: Remove buggy bypass lock contention mitigation
	media: v4l2-cci: Always assign *val
	usbip: Don't submit special requests twice
	usb: typec: ucsi: Fix null pointer dereference in trace
	fsnotify: clear PARENT_WATCHED flags lazily
	net: remove NULL-pointer net parameter in ip_metrics_convert
	drm/amdgu: fix Unintentional integer overflow for mall size
	regmap: spi: Fix potential off-by-one when calculating reserved size
	smack: tcp: ipv4, fix incorrect labeling
	platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
	net/mlx5e: SHAMPO, Fix incorrect page release
	drm/meson: plane: Add error handling
	crypto: stm32/cryp - call finalize with bh disabled
	gfs2: Revert "Add quota_change type"
	drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
	dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
	dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
	hwmon: (k10temp) Check return value of amd_smn_read()
	wifi: cfg80211: make hash table duplicates more survivable
	f2fs: fix to do sanity check on blocks for inline_data inode
	driver: iio: add missing checks on iio_info's callback access
	block: remove the blk_flush_integrity call in blk_integrity_unregister
	drm/amdgpu: add skip_hw_access checks for sriov
	drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
	drm/amdgpu: add lock in kfd_process_dequeue_from_device
	drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
	drm/amd/display: added NULL check at start of dc_validate_stream
	drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
	drm/amd/display: use preferred link settings for dp signal only
	drm/amd/display: Check BIOS images before it is used
	drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
	media: uvcvideo: Enforce alignment of frame and interval
	virtio_net: Fix napi_skb_cache_put warning
	i2c: Use IS_REACHABLE() for substituting empty ACPI functions
	Linux 6.6.50

Change-Id: I0d10650643d671d01fa7df7782e6724c7da195a1
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>