Merge 6.6.107 into android15-6.6-lts

GKI (arm64) relevant 22 out of 103 changes, affecting 23 files +180/-105
  905d43b8 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. [2 files, +43/-2]
  f7ec68cc tracing: Fix tracing_marker may trigger page fault during preempt_disable [1 file, +2/-2]
  1262bda8 tracing: Silence warning when chunk allocation fails in trace_pid_write [1 file, +5/-1]
  449682e7 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() [1 file, +5/-2]
  66bcb04a tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. [1 file, +4/-1]
  8be3d521 proc: fix type confusion in pde_set_flags() [1 file, +2/-1]
  e69f61b8 compiler-clang.h: define __SANITIZE_*__ macros only when undefined [1 file, +24/-5]
  31dc1603 net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups [1 file, +0/-13]
  01e1eba6 fuse: check if copy_file_range() returns larger than requested size [1 file, +3/-0]
  8577ded2 fuse: prevent overflow in copy_file_range return value [1 file, +1/-1]
  c95c2240 mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios [1 file, +10/-10]
  9f4b38ad mm/khugepaged: fix the address passed to notifier on testing young [1 file, +2/-2]
  854baafc kernfs: Fix UAF in polling when open file is released [1 file, +36/-18]
  af253b1a Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" [1 file, +13/-0]
  1e92afef tty: hvc_console: Call hvc_kick in hvc_write unconditionally [1 file, +3/-3]
  5e84e18f net: bridge: Bounce invalid boolopts [1 file, +7/-0]
  e6867c0a tunnels: reset the GSO metadata before reusing the skb [1 file, +6/-0]
  6276a6b2 hrtimer: Remove unused function [1 file, +1/-19]
  b1fa39fb hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() [1 file, +8/-13]
  156677ea hrtimers: Unconditionally update target CPU base after offline timer migration [1 file, +3/-8]
  26f296e4 xhci: fix memory leak regression when freeing xhci vdev devices depth first [1 file, +1/-1]
  d70b5910 net: mdiobus: release reset_gpio in mdiobus_unregister_device() [1 file, +1/-3]

Changes in 6.6.107
	kunit: kasan_test: disable fortify string checker on kasan_strings() test
	mm: introduce and use {pgd,p4d}_populate_kernel()
	kasan: fix GCC mem-intrinsic prefix with sw tags
	nfsd: Fix a regression in nfsd_setattr()
	NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs()
	media: i2c: imx214: Fix link frequency validation
	net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
	ima: limit the number of ToMToU integrity violations
	flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
	SUNRPC: call xs_sock_process_cmsg for all cmsg
	NFSv4: Don't clear capabilities that won't be reset
	NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
	NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
	tracing: Fix tracing_marker may trigger page fault during preempt_disable
	ftrace/samples: Fix function size computation
	fs/nfs/io: make nfs_start_io_*() killable
	NFS: Serialise O_DIRECT i/o and truncate()
	NFSv4.2: Serialise O_DIRECT i/o and fallocate()
	NFSv4.2: Serialise O_DIRECT i/o and clone range
	NFSv4.2: Serialise O_DIRECT i/o and copy range
	NFSv4/flexfiles: Fix layout merge mirror check.
	tracing: Silence warning when chunk allocation fails in trace_pid_write
	s390/cpum_cf: Deny all sampling events by counter PMU
	bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
	tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
	proc: fix type confusion in pde_set_flags()
	rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
	rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
	rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
	KVM: SVM: Set synthesized TSA CPUID flags
	EDAC/altera: Delete an inappropriate dma_free_coherent() call
	Revert "SUNRPC: Don't allow waiting for exiting tasks"
	compiler-clang.h: define __SANITIZE_*__ macros only when undefined
	mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
	ocfs2: fix recursive semaphore deadlock in fiemap call
	i2c: i801: Hide Intel Birch Stream SoC TCO WDT
	net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups
	mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
	mtd: rawnand: stm32_fmc2: fix ECC overwrite
	fuse: check if copy_file_range() returns larger than requested size
	fuse: prevent overflow in copy_file_range return value
	mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
	mm/damon/core: set quota->charged_from to jiffies at first charge window
	drm/mediatek: fix potential OF node use-after-free
	drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
	drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
	mtd: nand: raw: atmel: Fix comment in timings preparation
	mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
	libceph: fix invalid accesses to ceph_connection_v1_info
	mm/damon/sysfs: fix use-after-free in state_show()
	mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
	mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
	btrfs: use readahead_expand() on compressed extents
	btrfs: fix corruption reading compressed range when block size is smaller than page size
	mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios
	mm/khugepaged: fix the address passed to notifier on testing young
	cifs: fix pagecache leak when do writepages
	kernfs: Fix UAF in polling when open file is released
	Input: iqs7222 - avoid enabling unused interrupts
	Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
	Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"
	tty: hvc_console: Call hvc_kick in hvc_write unconditionally
	serial: sc16is7xx: fix bug in flow control levels init
	dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
	USB: serial: option: add Telit Cinterion FN990A w/audio compositions
	USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
	Disable SLUB_TINY for build testing
	net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
	net: bridge: Bounce invalid boolopts
	tunnels: reset the GSO metadata before reusing the skb
	docs: networking: can: change bcm_msg_head frames member to support flexible array
	igb: fix link test skipping when interface is admin down
	i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
	can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
	can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
	can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
	net: hsr: Add support for MC filtering at the slave device
	net: hsr: Add VLAN CTAG filter support
	hsr: use rtnl lock when iterating over ports
	hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
	dmaengine: idxd: Remove improper idxd_free
	dmaengine: idxd: Fix refcount underflow on module unload
	dmaengine: idxd: Fix double free in idxd_setup_wqs()
	dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
	regulator: sy7636a: fix lifecycle of power good gpio
	hrtimer: Remove unused function
	hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
	hrtimers: Unconditionally update target CPU base after offline timer migration
	RISC-V: Remove unnecessary include from compat.h
	xhci: fix memory leak regression when freeing xhci vdev devices depth first
	USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
	usb: gadget: midi2: Fix missing UMP group attributes initialization
	usb: gadget: midi2: Fix MIDI2 IN EP max packet size
	dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
	dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
	phy: tegra: xusb: fix device and OF node leak at probe
	phy: ti-pipe3: fix device leak at unbind
	ksmbd: fix null pointer dereference in alloc_preauth_hash()
	net: mdiobus: release reset_gpio in mdiobus_unregister_device()
	drm/amdgpu: fix a memory leak in fence cleanup when unloading
	drm/i915/power: fix size for for_each_set_bit() in abox iteration
	x86: disable image size check for test builds
	Linux 6.6.107

Change-Id: I714c94fc9aeea9c58e5a625d2b355554828b5ffd
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>