merge-upstream/v6.6.113 from branch/tag: upstream/v6.6.113 into branch: main-R121-cos-6.6

Changelog:
-------------------------------------------------------------

Aaron Kling (1):
      cpufreq: tegra186: Set target frequency for all cpus in policy

Adam Xue (1):
      bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()

Ahmet Eray Karadag (1):
      ext4: guard against EA inode refcount underflow in xattr update

Aleksa Sarai (1):
      fscontext: do not consume log entries when returning -EMSGSIZE

Alex Deucher (1):
      drm/amdgpu: Add additional DCE6 SCL registers

Alexandr Sapozhnikov (1):
      net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()

Alok Tiwari (1):
      clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver

Amir Mohammad Jahangirzad (1):
      ACPI: debug: fix signedness issues in read/write helpers

Anderson Nascimento (1):
      btrfs: avoid potential out-of-bounds in btrfs_encode_fh()

Andy Shevchenko (2):
      mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
      ACPI: battery: Check for error code from devm_mutex_init() call

AngeloGioacchino Del Regno (1):
      clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m

Anthony Yznaga (1):
      sparc64: fix hugetlb for sun4u

Askar Safin (1):
      openat2: don't trigger automounts with RESOLVE_NO_XDEV

Bartosz Golaszewski (1):
      gpio: wcd934x: mark the GPIO controller as sleeping

Brian Masney (2):
      clk: at91: peripheral: fix return value
      clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()

Brian Norris (1):
      PCI/sysfs: Ensure devices are powered for config reads

Catalin Marinas (1):
      arm64: mte: Do not flag the zero page as PG_mte_tagged

Chen-Yu Tsai (1):
      clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags()

Clément Le Goffic (1):
      rtc: optee: fix memory leak on driver removal

Corey Minyard (2):
      Revert "ipmi: fix msg stack when IPMI is disconnected"
      ipmi: Rework user message limit handling

Dan Carpenter (1):
      net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()

Daniel Borkmann (1):
      bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}

Daniel Tang (1):
      ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT

Deepanshu Kartikey (1):
      ext4: validate ea_ino and size in check_xattrs

Donet Tom (1):
      mm/ksm: fix incorrect KSM counter handling in mm_struct during fork

Duoming Zhou (1):
      scsi: mvsas: Fix use-after-free bugs in mvs_work_queue

Dzmitry Sankouski (1):
      power: supply: max77976_charger: fix constant current reporting

Edward Adam Davis (1):
      media: mc: Clear minor number before put device

Ekansh Gupta (1):
      misc: fastrpc: Add missing dev_err newlines

Eric Biggers (2):
      KEYS: trusted_tpm1: Compare HMAC values in constant time
      sctp: Fix MAC comparison to be constant-time

Eric Dumazet (1):
      tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat()

Eric Woudstra (1):
      bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()

Erick Karanja (1):
      net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe

Esben Haabendal (2):
      rtc: interface: Ensure alarm irq is enabled when UIE is enabled
      rtc: interface: Fix long-standing race when setting alarm

Fedor Pchelkin (1):
      clk: tegra: do not overallocate memory for bpmp clocks

Fernando Fernandez Mancera (1):
      netfilter: nft_objref: validate objref and objrefmap expressions

Finn Thain (1):
      fbdev: Fix logic error in "offb" name match

Florian Westphal (1):
      netfilter: nf_tables: drop unused 3rd argument from validate callback ops

Georg Gottleuber (1):
      nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk

Greg Kroah-Hartman (1):
      Linux 6.6.113

Guenter Roeck (1):
      ipmi: Fix handling of messages with provided receive message pointer

Gunnar Kudrjavets (1):
      tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single

Hans de Goede (2):
      mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
      mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag

Haoxiang Li (1):
      fs/ntfs3: Fix a resource leak bug in wnd_extend()

Harini T (2):
      mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
      mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes

Harshit Agarwal (1):
      sched/deadline: Fix race in push_dl_task()

Herbert Xu (1):
      crypto: essiv - Check ssize for decryption and in-place encryption

Hongbo Li (1):
      irqchip/sifive-plic: Make use of __assign_bit()

Huacai Chen (3):
      LoongArch: Init acpi_gbl_use_global_lock to false
      init: handle bootloader identifier in kernel parameters
      ACPICA: Allow to skip Global Lock initialization

Ian Forbes (2):
      drm/vmwgfx: Fix Use-after-free in validation
      drm/vmwgfx: Fix copy-paste typo in validation

Ian Rogers (5):
      perf evsel: Avoid container_of on a NULL leader
      libperf event: Ensure tracing data is multiple of 8 sized
      perf test: Don't leak workload gopipe in PERF_RECORD_*
      perf evsel: Ensure the fallback message is always written to
      perf test stat: Avoid hybrid assumption when virtualized

Ilya Leoshkevich (5):
      s390/bpf: Change seen_reg to a mask
      s390/bpf: Centralize frame offset calculations
      s390/bpf: Describe the frame using a struct instead of constants
      s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL
      s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG

James Clark (1):
      perf test: Add a test for default perf stat command

Jan Kara (4):
      ext4: verify orphan file size is not too big
      ext4: free orphan info with kvfree
      writeback: Avoid softlockup when switching many inodes
      writeback: Avoid excessively long inode switching times

Jason Andryuk (3):
      xen/events: Cleanup find_virq() return codes
      xen/events: Return -EEXIST for bound VIRQs
      xen/events: Update virq_to_irq on migration

Jisheng Zhang (1):
      pwm: berlin: Fix wrong register in suspend/resume

Johan Hovold (2):
      firmware: meson_sm: fix device leak at probe
      lib/genalloc: fix device leak in of_gen_pool_get()

John David Anglin (1):
      parisc: Remove spurious if statement from raw_copy_from_user()

KaFai Wan (1):
      bpf: Avoid RCU context warning when unpinning htab with internal structs

Krzysztof Kozlowski (1):
      pinctrl: samsung: Drop unused S3C24xx driver data

Kuniyuki Iwashima (1):
      tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

Lance Yang (1):
      selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled

Laurent Pinchart (1):
      media: mc: Fix MUST_CONNECT handling for pads with no links

Leo Yan (6):
      perf arm_spe: Correct setting remote access
      perf arm-spe: Rename the common data source encoding
      perf arm_spe: Correct memory level for remote access
      perf session: Fix handling when buffer exceeds 2 GiB
      tools build: Align warning options with perf
      perf python: split Clang options when invoking Popen

Li RongQing (1):
      mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0

Lichen Liu (1):
      fs: Add 'initramfs_options' to set initramfs mount options

Ling Xu (1):
      misc: fastrpc: Save actual DMA size in fastrpc_map structure

Linus Walleij (1):
      mtd: rawnand: fsmc: Default to autodetect buswidth

Lu Baolu (1):
      iommu/vt-d: PRS isn't usable if PDS isn't supported

Lucas Zampieri (1):
      irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume

Lukas Wunner (3):
      xen/manage: Fix suspend error path
      PCI/ERR: Fix uevent on failure to recover
      PCI/AER: Support errors introduced by PCIe r6.0

Ma Ke (3):
      media: lirc: Fix error handling in lirc_register()
      of: unittest: Fix device reference count leak in of_unittest_pci_node_verify
      sparc: fix error handling in scan_one_device()

Marek Vasut (4):
      drm/rcar-du: dsi: Fix 1/2/3 lane support
      PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock
      PCI: rcar-host: Drop PMSR spinlock
      PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock

Matthieu Baerts (NGI0) (2):
      selftests: mptcp: join: validate C-flag + def limit
      mptcp: pm: in-kernel: usable client side with C-flag

Miaoqian Lin (2):
      ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
      xtensa: simdisk: add input size check in proc_write_simdisk

Michael Hennerich (2):
      iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
      iio: frequency: adf4350: Fix prescaler usage.

Michael Riesch (1):
      dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required

Muhammad Usama Anjum (1):
      wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again

Nam Cao (2):
      powerpc/powernv/pci: Fix underflow and leak issue
      powerpc/pseries/msi: Fix potential underflow and leak issue

Namhyung Kim (1):
      perf tools: Add fallback for exclude_guest

Namjae Jeon (1):
      ksmbd: add max ip connections parameter

Nathan Chancellor (1):
      lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older

Nick Morrow (1):
      wifi: mt76: mt7921u: Add VID/PID for Netgear A7500

Niklas Cassel (1):
      PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()

Niklas Schnelle (2):
      PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
      PCI/AER: Fix missing uevent on recovery when a reset is requested

Ojaswin Mujoo (1):
      ext4: correctly handle queries for metadata mappings

Oleg Nesterov (1):
      kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths

Olga Kornievskaia (1):
      nfsd: nfserr_jukebox in nlm_fopen should lead to a retry

Pali Rohár (1):
      cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points

Paulo Alcantara (1):
      smb: client: fix missing timestamp updates after utime(2)

Peter Ujfalusi (1):
      ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size

Phillip Lougher (2):
      Squashfs: add additional inode sanity checking
      Squashfs: reject negative file sizes in squashfs_read_inode()

Pratyush Yadav (2):
      spi: cadence-quadspi: Flush posted register writes before INDAC access
      spi: cadence-quadspi: Flush posted register writes before DAC access

Qianfeng Rong (3):
      media: i2c: mt9v111: fix incorrect type for ret
      iio: dac: ad5360: use int type to store negative error codes
      iio: dac: ad5421: use int type to store negative error codes

Qu Wenruo (1):
      btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()

Rafael J. Wysocki (6):
      ACPI: property: Fix buffer properties extraction for subnodes
      cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
      ACPI: battery: Add synchronization between interface updates
      ACPI: property: Disregard references in data-only subnode lists
      ACPI: property: Add code comments explaining what is going on
      ACPI: property: Do not pass NULL handles to acpi_attach_data()

Rex Chen (1):
      mmc: core: SPI mode remove cmd7

Rob Herring (Arm) (1):
      rtc: x1205: Fix Xicor X1205 vendor prefix

Sam James (1):
      parisc: don't reference obsolete termio struct for TC* constants

Sean Anderson (2):
      iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK
      iio: xilinx-ams: Unmask interrupts after updating alarms

Sean Christopherson (5):
      rseq/selftests: Use weak symbol reference, not definition, to link with glibc
      x86/umip: Check that the instruction opcode is at least two bytes
      x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
      KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
      KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2

Sean Nyekjaer (1):
      iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume

SeongJae Park (1):
      mm/damon/vaddr: do not repeat pte_offset_map_lock() until success

Shin'ichiro Kawasaki (1):
      PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release

Shuhao Fu (1):
      drm/nouveau: fix bad ret code in nouveau_bo_move_prep

Siddharth Vadapalli (1):
      PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit

Simon Schuster (1):
      copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)

Stephan Gerhold (4):
      arm64: dts: qcom: msm8916: Add missing MDSS reset
      arm64: dts: qcom: msm8939: Add missing MDSS reset
      arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
      media: venus: firmware: Use correct reset sequence for IRIS2

Sumit Kumar (1):
      bus: mhi: ep: Fix chained transfer handling in read path

Tetsuo Handa (2):
      minixfs: Verify inode mode when loading from disk
      cramfs: Verify inode mode when loading from disk

Thadeu Lima de Souza Cascardo (1):
      mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations

Thomas Fourier (5):
      media: cx18: Add missing check after DMA map
      media: pci: ivtv: Add missing check after DMA map
      crypto: aspeed - Fix dma_unmap_sg() direction
      crypto: atmel - Fix dma_unmap_sg() direction
      crypto: rockchip - Fix dma_unmap_sg() nents value

Thomas Gleixner (1):
      rseq: Protect event mask against membarrier IPI

Thomas Weißschuh (3):
      fs: always return zero on success from replace_fd()
      ACPI: battery: allocate driver data through devm_ APIs
      ACPI: battery: initialize mutexes through devm_ APIs

Thorsten Blum (2):
      scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
      NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()

Tiezhu Yang (1):
      LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()

Timur Kristóf (3):
      drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
      drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
      drm/amd/display: Properly disable scaling on DCE6

Tomi Valkeinen (1):
      media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()

Varad Gautam (1):
      asm-generic/io.h: Skip trace helpers if rwmmio events are disabled

Vibhore Vardhan (1):
      arm64: dts: ti: k3-am62a-main: Fix main padcfg length

Vidya Sagar (1):
      PCI: tegra194: Handle errors in BPMP response

Wang Jiang (1):
      PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan()

Yang Shi (1):
      arm64: kprobes: call set_memory_rox() for kprobe page

Yongjian Sun (1):
      ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()

Yu Kuai (1):
      blk-crypto: fix missing blktrace bio split events

Yuan Chen (1):
      tracing: Fix race condition in kprobe initialization causing NULL pointer dereference

Yunseong Kim (1):
      perf util: Fix compression checks returning -1 as bool

Zack Rusin (1):
      drm/vmwgfx: Fix a null-ptr access in the cursor snooper

Zhang Yi (1):
      ext4: fix an off-by-one issue during moving extents

Zhen Ni (2):
      clocksource/drivers/clps711x: Fix resource leaks in error paths
      memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe

gaoxiang17 (1):
      pid: Add a judgment for ns null in pid_nr_ns

BUG=b/453570806
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.6.113.

Change-Id: Ie3cfd34f742cc74e69673fb7337d0fa6d0cda9f6
Signed-off-by: COS Kernel Merge Bot <[email protected]>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/114822
Reviewed-by: Robert Kolchmeyer <[email protected]>
Tested-by: Kevin Berry <[email protected]>
Main-Branch-Verified: Cusky Presubmit Bot <[email protected]>
Reviewed-by: Kevin Berry <[email protected]>