Merge 6.6.105 into android15-6.6-lts

GKI (arm64) relevant 21 out of 119 changes, affecting 33 files +241/-135
  3eeefeb9 bpf: Add cookie object to bpf maps [2 files, +7/-0]
  8e573ac2 bpf: Move cgroup iterator helpers to bpf.h [2 files, +14/-13]
  dbd8ec22 bpf: Move bpf map owner out of common struct [3 files, +49/-36]
  7acfa07c bpf: Fix oob access in cgroup local storage [2 files, +16/-0]
  235a4c0a cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN [1 file, +7/-0]
  41e168db Bluetooth: hci_sync: Avoid adding default advertising on startup [1 file, +1/-1]
  bf89b1f8 fs: writeback: fix use-after-free in __mark_inode_dirty() [1 file, +5/-4]
  2acc8d3f netfilter: conntrack: helper: Replace -EEXIST by -EBUSY [1 file, +2/-2]
  6077d16b Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() [1 file, +3/-0]
  8d09b137 icmp: fix icmp_ndo_send address translation for reply direction [2 files, +8/-4]
  668f4f63 macsec: read MACSEC_SA_ATTR_PN with nla_get_uint [1 file, +4/-4]
  90ab05ed ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() [1 file, +3/-4]
  85c1c86a ppp: fix memory leak in pad_compress_skb [1 file, +3/-3]
  ad17940a ALSA: usb-audio: Add mute TLV for playback volumes on some devices [1 file, +2/-0]
  50f2f392 arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE [5 files, +34/-4]
  6797a8b3 mm: move page table sync declarations to linux/pgtable.h [2 files, +16/-16]
  698abcf0 proc: fix missing pde_set_flags() for net proc files [1 file, +21/-17]
  0ef7058b mm/slub: avoid accessing metadata when pointer is invalid in object_err() [1 file, +6/-1]
  b088ae4e PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads [2 files, +5/-0]
  ad2df864 slub: Reflow ___slab_alloc() [1 file, +15/-16]
  522ffe29 mm: slub: avoid wake up kswapd in set_track_prepare [1 file, +20/-10]

Changes in 6.6.105
	bpf: Add cookie object to bpf maps
	bpf: Move cgroup iterator helpers to bpf.h
	bpf: Move bpf map owner out of common struct
	bpf: Fix oob access in cgroup local storage
	btrfs: fix race between logging inode and checking if it was logged before
	btrfs: fix race between setting last_dir_index_offset and inode logging
	btrfs: avoid load/store tearing races when checking if an inode was logged
	LoongArch: Save LBT before FPU in setup_sigcontext()
	cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
	drm/amd/display: Don't warn when missing DCE encoder caps
	cpupower: Fix a bug where the -t option of the set subcommand was not working.
	Bluetooth: hci_sync: Avoid adding default advertising on startup
	fs: writeback: fix use-after-free in __mark_inode_dirty()
	tee: fix NULL pointer dereference in tee_shm_put
	arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
	tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
	arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM
	arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC
	wifi: cfg80211: fix use-after-free in cmp_bss()
	wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
	netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
	netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
	Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
	Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
	xirc2ps_cs: fix register access when enabling FullDuplex
	mISDN: Fix memory leak in dsp_hwec_enable()
	icmp: fix icmp_ndo_send address translation for reply direction
	net: macb: Fix tx_ptr_lock locking
	netlink: add variable-length / auto integers
	macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
	net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
	i40e: Fix potential invalid access when MAC list is empty
	wifi: ath11k: Introduce and use ath11k_sta_to_arsta()
	wifi: ath11k: rename ath11k_start_vdev_delay()
	wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
	wifi: ath11k: fix group data packet drops during rekey
	net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
	wifi: cw1200: cap SSID length in cw1200_do_join()
	wifi: libertas: cap SSID len in lbs_associate()
	wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
	net: thunder_bgx: add a missing of_node_put
	net: thunder_bgx: decrement cleanup index before use
	ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
	net/smc: Remove validation of reserved bits in CLC Decline message
	mctp: return -ENOPROTOOPT for unknown getsockopt options
	ax25: properly unshare skbs in ax25_kiss_rcv()
	net: atm: fix memory leak in atm_register_sysfs when device_register fail
	ppp: fix memory leak in pad_compress_skb
	selftest: net: Fix weird setsockopt() in bind_bhash.c.
	phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
	ALSA: usb-audio: Add mute TLV for playback volumes on some devices
	ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
	arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE
	pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
	x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
	mm: move page table sync declarations to linux/pgtable.h
	sched: Fix sched_numa_find_nth_cpu() if mask offline
	ocfs2: prevent release journal inode after journal shutdown
	proc: fix missing pde_set_flags() for net proc files
	soc: qcom: mdt_loader: Deal with zero e_shentsize
	wifi: mwifiex: Initialize the chan_stats array to zero
	wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
	drm/amdgpu: drop hw access in non-DC audio fini
	platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list
	scsi: lpfc: Fix buffer free/clear order in deferred receive path
	batman-adv: fix OOB read/write in network-coding decode
	cifs: prevent NULL pointer dereference in UTF16 conversion
	e1000e: fix heap overflow in e1000_set_eeprom
	net: pcs: rzn1-miic: Correct MODCTRL register offset
	Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths"
	Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance"
	cpufreq: intel_pstate: Revise global turbo disable check
	cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller
	cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization
	cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
	nouveau: fix disabling the nonstall irq due to storm code
	mm/slub: avoid accessing metadata when pointer is invalid in object_err()
	spi: fsl-qspi: use devm function instead of driver remove
	thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold
	PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
	btrfs: adjust subpage bit start based on sectorsize
	iio: imu: inv_mpu6050: align buffer for timestamp
	iio: chemical: pms7003: use aligned_s64 for timestamp
	iio: light: opt3001: fix deadlock due to concurrent flag access
	iio: pressure: mprls0025pa: use aligned_s64 for timestamp
	ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
	ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
	dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
	net: dsa: microchip: update tag_ksz masks for KSZ9477 family
	net: dsa: microchip: linearize skb for tail-tagging switches
	vmxnet3: update MTU after device quiesce
	drm/mediatek: Add crtc path enum for all_drm_priv array
	drm/mediatek: Fix using wrong drm private data to bind mediatek-drm
	drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv
	ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
	ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
	Revert "drm/amdgpu: Avoid extra evict-restore process."
	pcmcia: omap: Add missing check for platform_get_resource
	pcmcia: Add error handling for add_interval() in do_validate_mem()
	hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
	spi: spi-fsl-lpspi: Fix transmissions when using CONT
	spi: spi-fsl-lpspi: Set correct chip-select polarity bit
	spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
	spi: spi-fsl-lpspi: Clear status register after disabling the module
	drm/bridge: ti-sn65dsi86: fix REFCLK setting
	perf bpf-event: Fix use-after-free in synthesis
	drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
	drm/amd/amdgpu: Fix missing error return on kzalloc failure
	tools: gpio: rm .*.cmd on make clean
	tools: gpio: remove the include directory on make clean
	slub: Reflow ___slab_alloc()
	mm: slub: avoid wake up kswapd in set_track_prepare
	riscv: use lw when reading int cpu in asm_per_cpu
	cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()
	cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
	cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()
	dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
	spi: fsl-qspi: Fix double cleanup in probe error path
	Linux 6.6.105

Change-Id: I27572fcb998174d26e793f1abcec52b3883b7b33
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>