merge-upstream/v6.6.92 from branch/tag: upstream/v6.6.92 into branch: cos-6.6

Changelog:
-------------------------------------------------------------

Aaron Kling (2):
      spi: tegra114: Don't fail set_cs_timing when delays are zero
      spi: tegra114: Use value to check for invalid delays

Abdun Nihaal (1):
      qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()

Abhishek Chauhan (1):
      net: Rename mono_delivery_time to tstamp_type for scalabilty

Aditya Garg (3):
      Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
      Input: synaptics - enable InterTouch on Dell Precision M3800
      Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5

Al Viro (1):
      do_umount(): add missing barrier before refcount checks in sync case

Alex Deucher (6):
      drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
      drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
      drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
      drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
      Revert "drm/amd: Stop evicting resources on APUs in suspend"
      drm/amdgpu: fix pm notifier handling

Alexander Lobakin (1):
      netdevice: add netdev_tx_reset_subqueue() shorthand

Alexey Charkov (1):
      usb: uhci-platform: Make the clock really optional

Andrei Kuchynski (2):
      usb: typec: ucsi: displayport: Fix NULL pointer access
      usb: typec: ucsi: displayport: Fix deadlock

Andrew Jeffery (1):
      net: mctp: Ensure keys maintain only one ref to corresponding dev

Andy Shevchenko (1):
      types: Complement the aligned types with signed 64-bit one

Angelo Dureghello (1):
      iio: adc: ad7606: fix serial register access

Aurabindo Pillai (1):
      drm/amd/display: more liberal vmin/vmax update for freesync

Benjamin Marzinski (1):
      dm: always update the array size in realloc_argv on success

Bo-Cun Chen (1):
      net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability

Borislav Petkov (AMD) (1):
      x86/microcode: Consolidate the loader enablement checking

Carolina Jubran (1):
      net/mlx5e: Disable MACsec offload for uplink representor profile

Chad Monroe (1):
      net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM

Chen Linxuan (1):
      drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions'

Chris Bainbridge (1):
      drm/amd/display: Fix slab-use-after-free in hdcp

Chris Mi (1):
      net/mlx5: E-switch, Fix error handling for enabling roce

Christian Bruel (2):
      arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
      arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs

Christian Heusel (2):
      Revert "rndis_host: Flag RNDIS modems as WWAN devices"
      ALSA: usb-audio: Add sample rate quirk for Audioengine D1

Christian Hewitt (1):
      Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"

Clark Wang (1):
      i2c: imx-lpi2c: Fix clock count when probe defers

Claudiu Beznea (2):
      phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind
      phy: renesas: rcar-gen3-usb2: Set timing registers only once

Cong Wang (7):
      sch_htb: make htb_qlen_notify() idempotent
      sch_drr: make drr_qlen_notify() idempotent
      sch_hfsc: make hfsc_qlen_notify() idempotent
      sch_qfq: make qfq_qlen_notify() idempotent
      sch_ets: make est_qlen_notify() idempotent
      sch_htb: make htb_deactivate() idempotent
      net_sched: Flush gso_skb list too during ->change()

Cosmin Tanislav (1):
      regulator: max20086: fix invalid memory access

Cristian Marussi (4):
      firmware: arm_scmi: Balance device refcount when destroying devices
      firmware: arm_scmi: Add helper to trace bad messages
      firmware: arm_scmi: Add message dump traces for bad and unexpected replies
      firmware: arm_scmi: Fix timeout checks on polling path

Da Xue (1):
      net: mdio: mux-meson-gxl: set reversed bit when using internal phy

Dan Carpenter (2):
      dm: add missing unlock on in dm_keyslot_evict()
      phy: tegra: xusb: remove a stray unlock

Daniel Golle (1):
      net: ethernet: mtk_eth_soc: reset all TX queues on DMA free

Daniel Sneddon (2):
      x86/bpf: Call branch history clearing sequence on exit
      x86/bpf: Add IBHF call at end of classic BPF

Daniel Wagner (1):
      nvme: unblock ctrl state transition for firmware update

Dave Chen (1):
      btrfs: fix COW handling in run_delalloc_nocow()

Dave Hansen (1):
      x86/mm: Eliminate window where TLB flushes may be inadvertently skipped

Dave Penkler (3):
      usb: usbtmc: Fix erroneous get_stb ioctl error returns
      usb: usbtmc: Fix erroneous wait_srq ioctl return
      usb: usbtmc: Fix erroneous generic_read ioctl return

David Lechner (1):
      iio: chemical: sps30: use aligned_s64 for timestamp

Dmitry Antipov (1):
      module: ensure that kobject_put() is safe for module type kobjects

Dmitry Torokhov (1):
      Input: synaptics - enable SMBus for HP Elitebook 850 G1

Donet Tom (1):
      book3s64/radix : Align section vmemmap start address to PAGE_SIZE

Eduard Zingerman (10):
      bpf: add find_containing_subprog() utility function
      bpf: refactor bpf_helper_changes_pkt_data to use helper number
      bpf: track changes_pkt_data property for global functions
      selftests/bpf: test for changing packet data from global functions
      bpf: check changes_pkt_data property for extension programs
      selftests/bpf: freplace tests for tracking of changes_packet_data
      bpf: consider that tail calls invalidate packet pointers
      selftests/bpf: validate that tail call invalidates packet pointers
      bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs
      selftests/bpf: extend changes_pkt_data with cases w/o subprograms

Eelco Chaudron (1):
      openvswitch: Fix unsafe attribute parsing in output_userspace()

En-Wei Wu (1):
      Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()

Eric Biggers (1):
      x86/its: Fix build errors when CONFIG_MODULES=n

Eric Dumazet (2):
      mctp: no longer rely on net->dev_index_head[]
      sctp: add mutual exclusion in proc_sctp_do_udp_port()

Eric W. Biederman (1):
      binfmt_elf: Support segments with 0 filesz and misaligned starts

Fedor Pchelkin (1):
      wifi: mt76: disable napi on driver removal

Felix Fietkau (1):
      net: ipv6: fix UDPv6 GSO segmentation with NAT

Feng Tang (1):
      selftests/mm: compaction_test: support platform with huge mount of memory

Filipe Manana (1):
      btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()

Gabriel Shahrouzi (4):
      staging: iio: adc: ad7816: Correct conditional logic for store mode
      staging: axis-fifo: Remove hardware resets for user errors
      staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
      iio: adis16201: Correct inclinometer channel resolution

Gary Bisson (1):
      Input: mtk-pmic-keys - fix possible null pointer dereference

Geert Uytterhoeven (3):
      ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties
      spi: loopback-test: Do not split 1024-byte hexdumps
      ALSA: sh: SND_AICA should depend on SH_DMA_API

Geoffrey D. Bennett (1):
      ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()

Gerhard Engleder (2):
      tsnep: Inline small fragments within TX descriptor
      tsnep: fix timestamping with a stacked DSA driver

Greg Kroah-Hartman (3):
      Linux 6.6.90
      Linux 6.6.91
      Linux 6.6.92

Guillaume Nault (1):
      gre: Fix again IPv6 link-local address generation.

Hangbin Liu (1):
      tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing

Hans de Goede (1):
      platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection

Hao Lan (1):
      net: hns3: fixed debugfs tm_qset size

Hariprasad Kelam (1):
      octeontx2-af: Fix CGX Receive counters

Helge Deller (1):
      parisc: Fix double SIGFPE crash

Henry Martin (1):
      HID: uclogic: Add NULL check in uclogic_input_configured()

Huacai Chen (3):
      LoongArch: Save and restore CSR.CNTC for hibernation
      LoongArch: Fix MAX_REG_OFFSET calculation
      LoongArch: Explicitly specify code model in Makefile

Hugo Villeneuve (1):
      Input: cyttsp5 - ensure minimum reset pulse width

Hyejeong Choi (1):
      dma-buf: insert memory barrier before updating num_fences

Ido Schimmel (2):
      vxlan: vnifilter: Fix unlocked deletion of default FDB entry
      mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices

Jacob Keller (1):
      igc: fix lock order in igc_ptp_reset

James Morse (6):
      arm64: insn: Add support for encoding DSB
      arm64: proton-pack: Expose whether the platform is mitigated by firmware
      arm64: proton-pack: Expose whether the branchy loop k value
      arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
      arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
      arm64: proton-pack: Add new CPUs 'k' values for branch mitigation

Jan Kara (4):
      ocfs2: switch osb->disable_recovery to enum
      ocfs2: implement handshaking with ocfs2 recovery thread
      ocfs2: stop quota recovery before disabling quotas
      udf: Make sure i_lenExtents is uptodate on inode eviction

Jason Andryuk (1):
      xenbus: Use kref to track req lifetime

Jason Gunthorpe (1):
      iommu/arm-smmu-v3: Use the new rb tree helpers

Jens Axboe (2):
      io_uring: always arm linked timeouts prior to issue
      io_uring: ensure deferred completions are posted for multishot

Jeongjun Park (1):
      tracing: Fix oob write in trace_seq_to_buffer()

Jeremy Linton (1):
      ACPI: PPTT: Fix processor subtable walk

Jethro Donaldson (2):
      smb: client: fix zero length for mkdir POSIX create context
      smb: client: fix memory leak during error handling for POSIX mkdir

Jian Shen (2):
      net: hns3: store rx VLAN tag offload state for VF
      net: hns3: defer calling ptp_clock_register()

Jim Lin (1):
      usb: host: tegra: Prevent host controller crash when OTG port is used

Joachim Priesner (1):
      ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset

John Ernberg (1):
      xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it

Jonas Gorski (6):
      net: dsa: b53: allow leaky reserved multicast
      net: dsa: b53: fix clearing PVID of a port
      net: dsa: b53: fix flushing old pvid VLAN on pvid change
      net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
      net: dsa: b53: always rejoin default untagged VLAN on bridge leave
      net: dsa: b53: fix learning on VLAN unaware bridges

Jonathan Bell (1):
      xhci: Use more than one Event Ring segment

Jonathan Cameron (5):
      iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
      iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
      iio: adc: dln2: Use aligned_s64 for timestamp
      iio: adc: ad7266: Fix potential timestamp alignment issue.
      iio: adc: ad7768-1: Fix insufficient alignment of timestamp.

Jozsef Kadlecsik (1):
      netfilter: ipset: fix region locking in hash types

Julian Anastasov (1):
      ipvs: fix uninit-value for saddr in do_output_route4

Kees Cook (8):
      binfmt_elf: elf_bss no longer used by load_elf_binary()
      binfmt_elf: Leave a gap between .bss and brk
      selftests/exec: Build both static and non-static load_address tests
      binfmt_elf: Calculate total_size earlier
      binfmt_elf: Honor PT_LOAD alignment for static PIE
      binfmt_elf: Move brk for static PIE even if ASLR disabled
      nvme-pci: make nvme_pci_npages_prp() __always_inline
      wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request

Keith Busch (2):
      nvme-pci: fix queue unquiesce check on slot_reset
      nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable

Kelsey Maes (1):
      can: mcp251xfd: fix TDC setting for low data bit rates

Kevin Baker (1):
      drm/panel: simple: Update timings for AUO G101EVN010

Kirill A. Shutemov (1):
      mm/page_alloc: fix race condition in unaccepted memory handling

Li Lingfeng (1):
      nfs: handle failure of nfs_get_lock_context in unlock path

Lode Willems (1):
      Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller

LongPing Wei (1):
      dm-bufio: don't schedule in atomic context

Lothar Rubusch (1):
      iio: accel: adxl367: fix setting odr for activity time update

Louis-Alexis Eyraud (2):
      net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
      net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised

Luiz Augusto von Dentz (1):
      Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags

Lukas Wunner (2):
      xhci: Set DESI bits in ERDP register correctly
      xhci: Clean up stale comment on ERST_SIZE macro

Luke Parkin (2):
      firmware: arm_scmi: Add support for debug metrics at the interface
      firmware: arm_scmi: Track basic SCMI communication debug metrics

Ma Jun (1):
      drm/amdgpu: Fix the runtime resume failure issue

Ma Ke (1):
      phy: Fix error handling in tegra_xusb_port_init

Ma Wupeng (1):
      hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio

Madhavan Srinivasan (2):
      powerpc/boot: Check for ld-option support
      powerpc/boot: Fix dash warning

Manuel Fombuena (1):
      Input: synaptics - enable InterTouch on Dynabook Portege X30-D

Maor Gottlieb (1):
      net/mlx5: E-Switch, Initialize MAC Address for Default GID

Marc Kleine-Budde (2):
      can: mcan: m_can_class_unregister(): fix order of unregistration calls
      can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls

Marc Zyngier (1):
      usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()

Mario Limonciello (4):
      platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles
      drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp
      drm/amd: Stop evicting resources on APUs in suspend
      drm/amd: Add Suspend/Hibernate notification callback support

Masami Hiramatsu (Google) (1):
      tracing: probes: Fix a possible race in trace_probe_log APIs

Mathias Nyman (6):
      xhci: split free interrupter into separate remove and free parts
      xhci: add support to allocate several interrupters
      xhci: Add helper to set an interrupters interrupt moderation interval
      xhci: support setting interrupt moderation IMOD for secondary interrupters
      xhci: Limit time spent with xHC interrupts disabled during bus resume
      xhci: fix possible null pointer dereference at secondary interrupter removal

Mathieu Othacehe (1):
      net: cadence: macb: Fix a possible deadlock in macb_halt_tx.

Matt Johnston (1):
      net: mctp: Don't access ifa_index when missing

Mattias Barthel (1):
      net: fec: ERR007885 Workaround for conventional TX

Maíra Canal (1):
      drm/v3d: Add job to pending list if the reset was skipped

Michael Chan (1):
      bnxt_en: Fix ethtool -d byte order for 32-bit values

Michael Kelley (5):
      hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages
      hv_netvsc: Preserve contiguous PFN grouping in the page buffer array
      hv_netvsc: Remove rmsg_pgcnt
      Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges
      Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer()

Michael Liang (1):
      nvme-tcp: fix premature queue removal and I/O failover

Michal Suchanek (1):
      tpm: tis: Double the timeout B to 4s

Mikael Gonella-Bolduc (1):
      Input: cyttsp5 - fix power control issue on wakeup

Mikhail Lobanov (1):
      KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

Mikulas Patocka (1):
      dm-integrity: fix a warning on invalid table line

Mingcong Bai (1):
      iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)

Muhammad Usama Anjum (1):
      selftests/exec: load_address: conform test to TAP format output

Murad Masimov (1):
      wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release

Namjae Jeon (1):
      ksmbd: prevent rename with empty string

Nathan Chancellor (1):
      net: qede: Initialize qede_ll_ops with designated initializer

Nathan Lynch (1):
      dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"

Neeraj Sanjay Kale (1):
      Bluetooth: btnxpuart: Fix kernel panic during FW release

Nicolas Chauvet (1):
      ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera

Nicolin Chen (1):
      iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids

Niklas Neronin (1):
      usb: xhci: check if 'requested segments' exceeds ERST capacity

Niravkumar L Rabara (2):
      EDAC/altera: Test the correct error reg offset
      EDAC/altera: Set DDR and SDMMC interrupt mask before registration

Norbert Szetei (1):
      ksmbd: prevent out-of-bounds stream writes by validating *pos

Oliver Hartkopp (1):
      can: gw: fix RCU/BH usage in cgw_create_job()

Oliver Neukum (1):
      USB: usbtmc: use interruptible sleep in usbtmc_read

Paul Aurich (1):
      smb: client: Avoid race in open_cached_dir with lease breaks

Paul Chaignon (1):
      bpf: Scrub packet on bpf_redirect_peer

Pauli Virtanen (1):
      Bluetooth: L2CAP: copy RX timestamp to new fragments

Pavel Paklov (1):
      iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid

Pawan Gupta (14):
      x86/bhi: Do not set BHI_DIS_S in 32-bit mode
      x86/speculation: Simplify and make CALL_NOSPEC consistent
      x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
      x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
      Documentation: x86/bugs/its: Add ITS documentation
      x86/its: Enumerate Indirect Target Selection (ITS) bug
      x86/its: Add support for ITS-safe indirect thunk
      x86/its: Add support for ITS-safe return thunk
      x86/its: Enable Indirect Target Selection mitigation
      x86/its: Add "vmexit" option to skip mitigation on some CPUs
      x86/its: Add support for RSB stuffing mitigation
      x86/its: Align RETs in BHB clear sequence to avoid thunking
      x86/ibt: Keep IBT disabled during alternative patching
      x86/its: Fix build error for its_static_thunk()

Pawel Laszczak (2):
      usb: cdnsp: Fix issue with resuming from L1
      usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version

Pengtao He (1):
      net/tls: fix kernel panic when alloc_page failed

Peter Collingbourne (1):
      bpf, arm64: Fix address emission with tag-based KASAN enabled

Peter Gonda (1):
      KVM: SVM: Update SEV-ES shutdown intercepts with more metadata

Peter Zijlstra (2):
      x86/its: Use dynamic thunks for indirect branches
      x86/its: FineIBT-paranoid vs ITS

Philipp Stanner (1):
      drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()

Prashanth K (2):
      usb: gadget: f_ecm: Add get_status callback
      usb: gadget: Use get_status callback to set remote wakeup capability

Puranjay Mohan (1):
      bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG

Qasim Ijaz (1):
      HID: thrustmaster: fix memory leak in thrustmaster_interrupts()

RD Babiera (1):
      usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition

Rafael J. Wysocki (2):
      cpufreq: Avoid using inconsistent policy->min and policy->max
      cpufreq: Fix setting policy limits when frequency tables are used

Rahul Rameshbabu (1):
      tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get operation

Richard Zhu (1):
      PCI: imx6: Skip controller_id generation logic for i.MX7D

Rob Herring (Arm) (1):
      ASoC: Use of_property_read_bool()

Robin Murphy (1):
      iommu: Handle race with default domain setup

Ronald Wahl (1):
      dmaengine: ti: k3-udma: Add missing locking

Runhua He (1):
      platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL)

Ruslan Piasetskyi (1):
      mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe

Ryan Matthews (1):
      Revert "PCI: imx6: Skip controller_id generation logic for i.MX7D"

Samuel Holland (1):
      riscv: Pass patch_text() the length in bytes

Sathesh B Edara (1):
      octeon_ep: Fix host hang issue during device reboot

Sean Christopherson (2):
      perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
      KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

Sean Heelan (2):
      ksmbd: fix use-after-free in kerberos authentication
      ksmbd: Fix UAF in __close_file_table_ids

Sebastian Andrzej Siewior (1):
      clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()

Shannon Nelson (5):
      pds_core: check health in devcmd wait
      pds_core: delete VF dev on reset
      pds_core: make pdsc_auxbus_dev_del() void
      pds_core: specify auxiliary_device to be created
      pds_core: remove write-after-free of client_id

Sheetal (1):
      ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence

Shouye Liu (1):
      platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug

Shruti Parab (2):
      bnxt_en: Fix coredump logic to free allocated buffer
      bnxt_en: Fix out-of-bound memcpy() during ethtool -w

Shuai Xue (9):
      dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs
      dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines
      dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups
      dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals
      dmaengine: idxd: Add missing cleanups in cleanup internals
      dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call
      dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
      dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe
      dmaengine: idxd: Refactor remove call with idxd_cleanup() helper

Shyam Saini (3):
      kernel: param: rename locate_module_kobject
      kernel: globalize lookup_or_create_module_kobject()
      drivers: base: handle module_kobject creation

Silvano Seva (2):
      iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
      iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo

Simon Horman (1):
      net: dlink: Correct endianness handling of led_mode

Simon Xue (1):
      iio: adc: rockchip: Fix clock initialization sequence

Stefan Wahren (4):
      net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
      net: vertexcom: mse102x: Fix LEN_MASK
      net: vertexcom: mse102x: Add range check for CMD_RTS
      net: vertexcom: mse102x: Fix RX error handling

Stephan Gerhold (1):
      irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs

Stephen Smalley (1):
      fs/xattr.c: fix simple_xattr_list to always include security.* xattrs

Steve Siwinski (1):
      scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer

Steven Rostedt (2):
      tracing: Do not take trace_event_sem in print_event_fields()
      tracing: samples: Initialize trace_array_printk() with the correct function

Subbaraya Sundeep (1):
      octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy

Sudeep Holla (1):
      firmware: arm_ffa: Skip Rx buffer ownership release if not acquired

Sébastien Szymanski (1):
      ARM: dts: opos6ul: add ksz8081 phy properties

Takashi Iwai (3):
      ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
      ALSA: seq: Fix delivery of UMP events to group ports
      ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info

Thangaraj Samynathan (1):
      net: lan743x: Fix memleak issue when GSO enabled

Thorsten Blum (1):
      MIPS: Fix MAX_REG_OFFSET

Tianyang Zhang (1):
      LoongArch: Prevent cond_resched() occurring within kernel-fpu

Tiezhu Yang (2):
      LoongArch: uprobes: Remove user_{en,dis}able_single_step()
      LoongArch: uprobes: Remove redundant code about resume_era

Tom Lendacky (1):
      memblock: Accept allocated memory before use in memblock_double_array()

Trond Myklebust (1):
      NFSv4/pnfs: Reset the layout state after a layoutreturn

Tudor Ambarus (1):
      dm: fix copying after src array boundaries

Tvrtko Ursulin (1):
      drm/fdinfo: Protect against driver unbind

Veerendranath Jakkam (1):
      wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation

Vicki Pfau (2):
      Input: xpad - fix Share button on Xbox One controllers
      Input: xpad - fix two controller table values

Victor Nogueira (4):
      net_sched: drr: Fix double list add in class with netem as child qdisc
      net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
      net_sched: ets: Fix double list add in class with netem as child qdisc
      net_sched: qfq: Fix double list add in class with netem as child qdisc

Vishal Badole (1):
      amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload

Vladimir Oltean (4):
      net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
      net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
      net: dsa: felix: fix broken taprio gate states after clock jump
      net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING

Waiman Long (1):
      cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks

Wang Zhaolong (1):
      ksmbd: fix memory leak in parse_lease_state()

Wayne Chang (2):
      usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
      phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking

Wayne Lin (7):
      drm/amd/display: Shift DMUB AUX reply command if necessary
      drm/amd/display: Fix the checking condition in dmub aux handling
      drm/amd/display: Remove incorrect checking in dmub aux handler
      drm/amd/display: Fix wrong handling for AUX_DEFER case
      drm/amd/display: Copy AUX read reply data whenever length > 0
      drm/amd/display: Correct the reply value when AUX write incomplete
      drm/amd/display: Avoid flooding unnecessary info messages

Wei Yang (2):
      mm/memblock: pass size instead of end to memblock_set_node()
      mm/memblock: repeat setting reserved region nid if array is doubled

Wentao Liang (2):
      wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
      ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()

Will Deacon (1):
      arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays

Wojciech Dubowik (1):
      arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2

Xuanqiang Luo (1):
      ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()

Yemike Abhilash Chandra (1):
      dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy

Yonglong Liu (1):
      net: hns3: fix an interrupt residual problem

Zhigang Luo (1):
      drm/amdgpu: trigger flr_work if reading pf2vf data failed

Zhu Yanjun (1):
      RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug

Zi Yan (1):
      mm/migrate: correct nr_failed in migrate_pages_sync()

pengdonglin (2):
      ftrace: Fix preemption accounting for stacktrace trigger command
      ftrace: Fix preemption accounting for stacktrace filter command

BUG=b/419750319
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.6.92.

Change-Id: I3fe35957eefc2f398d6b9ccdbda0af70e63b1cf5
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>