Merge 6.6.108 into android15-6.6-lts

GKI (arm64) relevant 7 out of 71 changes, affecting 14 files +92/-57
  4a1e3ec2 cgroup: split cgroup_destroy_wq into 3 workqueues [1 file, +36/-7]
  dfd06131 tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). [1 file, +5/-0]
  c8e69b78 io_uring: backport io_should_terminate_tw() [4 files, +16/-5]
  abc9f859 io_uring: include dying ring in task_work "should cancel" state [4 files, +8/-6]
  2d396aa8 minmax: avoid overly complicated constant expressions in VM code [2 files, +8/-1]
  af8b531e minmax: simplify and clarify min_t()/max_t() implementation [1 file, +11/-8]
  42a6aeb4 Revert "loop: Avoid updating block size under exclusive owner" [1 file, +8/-30]

Changes in 6.6.108
	wifi: wilc1000: avoid buffer overflow in WID string configuration
	ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
	wifi: mac80211: increase scan_ies_len for S1G
	wifi: mac80211: fix incorrect type for ret
	pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
	cgroup: split cgroup_destroy_wq into 3 workqueues
	btrfs: fix invalid extref key setup when replaying dentry
	um: virtio_uml: Fix use-after-free after put_device in probe
	dpaa2-switch: fix buffer pool seeding for control traffic
	qed: Don't collect too many protection override GRC elements
	bonding: set random address only when slaves already exist
	mptcp: set remote_deny_join_id0 on SYN recv
	mptcp: tfo: record 'deny join id0' info
	selftests: mptcp: sockopt: fix error messages
	net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
	i40e: remove redundant memory barrier when cleaning Tx descs
	net/mlx5e: Consider aggregated port speed during rate configuration
	net/mlx5e: Harden uplink netdev access against device unbind
	bonding: don't set oif to bond dev when getting NS target destination
	tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
	tls: make sure to abort the stream if headers are bogus
	Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
	net: liquidio: fix overflow in octeon_init_instr_queue()
	cnic: Fix use-after-free bugs in cnic_delete_task
	octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
	ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
	ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
	nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
	crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
	power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
	power: supply: bq27xxx: restrict no-battery detection to bq27000
	LoongArch: Update help info of ARCH_STRICT_ALIGN
	LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
	LoongArch: Check the return value when creating kobj
	iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
	btrfs: tree-checker: fix the incorrect inode ref size check
	ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
	ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
	ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
	mmc: mvsdio: Fix dma_unmap_sg() nents value
	KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
	net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
	rds: ib: Increment i_fastreg_wrs before bailing out
	selftests: mptcp: connect: catch IO errors on listen side
	selftests: mptcp: avoid spurious errors on TCP disconnect
	ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
	io_uring: backport io_should_terminate_tw()
	io_uring: include dying ring in task_work "should cancel" state
	ASoC: wm8940: Correct PLL rate rounding
	ASoC: wm8940: Correct typo in control name
	ASoC: wm8974: Correct PLL rate rounding
	ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
	drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
	drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
	crypto: af_alg - Set merge to zero early in af_alg_sendmsg
	smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
	vmxnet3: unregister xdp rxq info in the reset path
	mptcp: pm: nl: announce deny-join-id0 flag
	selftests: mptcp: userspace pm: validate deny-join-id0 flag
	phy: Use device_get_match_data()
	phy: ti: omap-usb2: fix device leak at unbind
	xhci: dbc: decouple endpoint allocation from initialization
	xhci: dbc: Fix full DbC transfer ring after several reconnects
	iommu/amd/pgtbl: Fix possible race while increase page table level
	rtc: pcf2127: fix SPI command byte for PCF2131 backport
	mptcp: propagate shutdown to subflows when possible
	minmax: avoid overly complicated constant expressions in VM code
	minmax: simplify and clarify min_t()/max_t() implementation
	minmax: add a few more MIN_T/MAX_T users
	Revert "loop: Avoid updating block size under exclusive owner"
	Linux 6.6.108

Change-Id: I1a182a58bb093daa6661ff7edf37f557c773a8a3
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>