merge-upstream/v6.6.59 from branch/tag: upstream/v6.6.59 into branch: cos-6.6

Changelog:
-------------------------------------------------------------

Abhishek Mohapatra (1):
      RDMA/bnxt_re: Fix the max CQ WQEs for older adapters

Aleksa Sarai (1):
      openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)

Aleksandr Mishin (4):
      octeon_ep: Implement helper for iterating packets in Rx queue
      octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
      fsl/fman: Save device references taken in mac_probe()
      fsl/fman: Fix refcount handling of fman-related devices

Alexander Zubkov (1):
      RDMA/irdma: Fix misspelling of "accept*"

Alexey Klimov (2):
      ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
      ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string

Andrea Parri (1):
      riscv, bpf: Make BPF_CMPXCHG fully ordered

Andrei Matei (1):
      bpf: Simplify checking size of helper accesses

Andrey Shumilin (1):
      ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()

Andrii Nakryiko (3):
      uprobes: encapsulate preparation of uprobe args buffer
      uprobes: prepare uprobe args buffer lazily
      uprobes: prevent mutex_lock() under rcu_read_lock()

Anumula Murali Mohan Reddy (2):
      RDMA/core: Fix ENODEV error for iWARP test over vlan
      RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP

Armin Wolf (1):
      platform/x86: dell-wmi: Ignore suspend notifications

Bart Van Assche (1):
      RDMA/srpt: Make slab cache names unique

Bhargava Chenna Marreddy (1):
      RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages

Binbin Zhou (1):
      ASoC: loongson: Fix component check failed on FDT systems

Chancel Liu (1):
      ASoC: fsl_micfil: Add a flag to distinguish with different volume control types

Christian Heusel (1):
      ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]

Claudiu Beznea (3):
      irqchip/renesas-rzg2l: Align struct member names to tabs
      irqchip/renesas-rzg2l: Document structure members
      irqchip/renesas-rzg2l: Add support for suspend to RAM

Colin Ian King (2):
      octeontx2-af: Fix potential integer overflows on integer shifts
      ASoC: max98388: Fix missing increment of variable slot_found

Cosmin Ratiu (1):
      net/mlx5: Unregister notifier on eswitch init failure

Crag Wang (1):
      platform/x86: dell-sysman: add support for alienware products

Dan Carpenter (1):
      ACPI: PRM: Clean up guid type in struct prm_handler_info

Daniel Borkmann (4):
      vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
      bpf: Add MEM_WRITE attribute
      bpf: Fix overloading of MEM_UNINIT's meaning
      bpf: Remove MEM_UNINIT from skb/xdp MTU helpers

Dave Kleikamp (1):
      jfs: Fix sanity check in dbMount

David Lawrence Glanzman (1):
      ASoC: amd: yc: Add quirk for HP Dragonfly pro one

Dhananjay Ugwekar (1):
      cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems

Dimitar Kanaliev (1):
      bpf: Fix truncation bug in coerce_reg_to_size_sx()

Dmitry Antipov (2):
      net: sched: fix use-after-free in taprio_change()
      net: sched: use RCU read-side critical section in taprio_dump()

Dmitry Baryshkov (2):
      drm/msm/dpu: make sure phys resources are properly initialized
      drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()

Douglas Anderson (2):
      drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
      drm/msm: Allocate memory for disp snapshot with kvzalloc()

Eric Biggers (1):
      ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE

Eric Dumazet (3):
      netdevsim: use cond_resched() in nsim_dev_trap_report_work()
      genetlink: hold RCU in genlmsg_mcast()
      net: fix races in netdev_tx_sent_queue()/dev_watchdog()

Eyal Birger (2):
      xfrm: extract dst lookup parameters into a struct
      xfrm: respect ip protocols rules criteria when performing dst lookups

Fabrizio Castro (1):
      irqchip/renesas-rzg2l: Fix missing put_device

Florian Kauer (1):
      bpf: devmap: provide rxq after redirect

Florian Klink (1):
      ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin

Florian Westphal (1):
      netfilter: bpf: must hold reference on net namespace

Frank Li (1):
      XHCI: Separate PORT and CAPs macros into dedicated file

Gal Pressman (1):
      ravb: Remove setting of RX software timestamp

Gianfranco Trad (1):
      udf: fix uninit-value use in udf_get_fileshortad

Greg Kroah-Hartman (1):
      Linux 6.6.59

Haiyang Zhang (1):
      hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event

Hans de Goede (1):
      drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA

Heiko Carstens (1):
      s390: Initialize psw mask in perf_arch_fetch_caller_regs()

Heiner Kallweit (1):
      r8169: avoid unsolicited interrupts

Henrique Carvalho (1):
      smb: client: Handle kstrdup failures for passwords

Huacai Chen (3):
      LoongArch: Get correct cores_per_package for SMT systems
      LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
      LoongArch: Make KASAN usable for variable cpu_vabits

Ian Forbes (1):
      drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check

Ilkka Koskinen (1):
      KVM: arm64: Fix shift-out-of-bounds bug

Jakub Boehm (1):
      net: plip: fix break; causing plip to never transmit

Javier Carrasco (3):
      iio: frequency: {admv4420,adrf6780}: format Kconfig entries
      iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
      iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig

Jessica Zhang (1):
      drm/msm/dpu: don't always program merge_3d block

Jinjie Ruan (1):
      posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()

Jiri Olsa (6):
      bpf: Fix memory leak in bpf_core_apply
      bpf: Add missed value to kprobe perf link info
      bpf: Add cookie to perf_event bpf_link_info records
      selftests/bpf: Use bpf_link__destroy in fill_link_info tests
      selftests/bpf: Add cookies check for perf_event fill_link_info test
      bpf,perf: Fix perf_event_detach_bpf_prog error handling

Jiri Slaby (SUSE) (2):
      xhci: dbgtty: remove kfifo_out() wrapper
      xhci: dbgtty: use kfifo from tty_port struct

John Keeping (1):
      usb: gadget: f_uac2: fix non-newline-terminated function name

Jonathan Marek (2):
      drm/msm/dsi: improve/fix dsc pclk calculation
      drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation

Jordan Rome (1):
      bpf: Fix iter/task tid filtering

Josh Poimboeuf (1):
      cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()

José Relvas (1):
      ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593

Justin Chen (1):
      firmware: arm_scmi: Queue in scmi layer for mailbox implementation

Kai Shen (1):
      net/smc: Fix memory leak when using percpu refs

Kailang Yang (1):
      ALSA: hda/realtek: Update default depop procedure

Kalesh AP (7):
      RDMA/bnxt_re: Fix a possible memory leak
      RDMA/bnxt_re: Add a check for memory allocation
      RDMA/bnxt_re: Fix out of bound check
      RDMA/bnxt_re: Return more meaningful error
      RDMA/bnxt_re: Fix the GID table length
      RDMA/bnxt_re: Avoid creating fence MR for newer adapters
      RDMA/bnxt_re: Fix unconditional fence for newer adapters

Kevin Groeneveld (1):
      usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store

Koba Ko (1):
      ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context

Kuniyuki Iwashima (1):
      tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().

Lad Prabhakar (1):
      ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing

Lee Jones (1):
      usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant

Leo Yan (1):
      tracing: Consider the NULL character when validating the event length

Li RongQing (1):
      net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid

Lin Ma (1):
      net: wwan: fix global oob in wwan_rtnl_policy

Linus Torvalds (1):
      task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK

Luiz Augusto von Dentz (2):
      Bluetooth: SCO: Fix UAF on sco_sock_timeout
      Bluetooth: ISO: Fix UAF on iso_sock_timeout

Maher Sanalla (1):
      net/mlx5: Check for invalid vector index on EQ creation

Marc Zyngier (1):
      KVM: arm64: Don't eagerly teardown the vgic on init error

Mario Limonciello (2):
      drm/amd: Guard against bad data for ATIF ACPI method
      drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too

Mark Rutland (1):
      arm64: Force position-independent veneers

Martin Kletzander (1):
      x86/resctrl: Avoid overflow in MB settings in bw_validate()

Masami Hiramatsu (Google) (4):
      tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
      tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
      tracing/probes: Support $argN in return probe (kprobe and fprobe)
      tracing: probes: Fix to zero initialize a local variable

Mateusz Guzik (1):
      exec: don't WARN for racy path_noexec check

Mathias Nyman (1):
      xhci: dbc: honor usb transfer size boundaries.

Matthew Wilcox (Oracle) (5):
      mm: convert collapse_huge_page() to use a folio
      mm/khugepaged: use a folio more in collapse_file()
      khugepaged: inline hpage_collapse_alloc_folio()
      khugepaged: convert alloc_charge_hpage to alloc_charge_folio
      khugepaged: remove hpage from collapse_file()

Maurizio Lombardi (1):
      nvme-pci: fix race condition between reset and nvme_dev_disable()

Michal Luczaj (4):
      bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
      vsock: Update rx_bytes on read_skb()
      vsock: Update msg_count on read_skb()
      bpf, vsock: Drop static vsock_bpf_prot initialization

Michel Alex (1):
      net: phy: dp83822: Fix reset pin definitions

Mikel Rychliski (1):
      tracing/probes: Fix MAX_TRACE_ARGS limit handling

Mikhail Lobanov (1):
      iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.

Miquel Raynal (2):
      ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
      ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties

Murad Masimov (1):
      ALSA: hda/cs8409: Fix possible NULL dereference

Naohiro Aota (1):
      btrfs: zoned: fix zone unusable accounting for freed reserved extent

Niklas Cassel (1):
      ata: libata: Set DID_TIME_OUT for commands that actually timed out

Niklas Schnelle (1):
      s390/pci: Handle PCI error codes other than 0x3a

Niklas Söderlund (1):
      net: ravb: Only advertise Rx/Tx timestamps if hardware supports it

Oliver Neukum (2):
      net: usb: usbnet: fix race in probe failure
      net: usb: usbnet: fix name regression

Pablo Neira Ayuso (1):
      netfilter: xtables: fix typo causing some targets not to load on IPv6

Pali Rohár (1):
      cifs: Validate content of NFS reparse point buffer

Paritosh Dixit (1):
      net: stmmac: dwmac-tegra: Fix link bring-up sequence

Paul Moore (1):
      selinux: improve error checking in sel_write_load()

Paulo Alcantara (1):
      smb: client: fix OOBs when building SMB2_IOCTL request

Pawan Gupta (1):
      x86/lam: Disable ADDRESS_MASKING in most cases

Peter Rashleigh (2):
      net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
      net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x

Petr Vaganov (1):
      xfrm: fix one more kernel-infoleak in algo dumping

Pranjal Ramajor Asha Kanojiya (1):
      accel/qaic: Fix the for loop used to walk SG table

Praveen Kumar Kannoju (1):
      net/sched: adjust device watchdog timer to detect stopped queue at right time

Qiao Ma (1):
      uprobe: avoid out-of-bounds memory access of fetching args

Roger Quadros (1):
      usb: dwc3: core: Fix system suspend on TI AM62 platforms

Ryusuke Konishi (1):
      nilfs2: fix kernel bug due to missing clearing of buffer delay flag

Sabrina Dubroca (2):
      macsec: don't increment counters for an unrelated SA
      xfrm: validate new SA's prefixlen using SA family when sel.family is unset

Saravanan Vajravel (1):
      RDMA/bnxt_re: Fix incorrect AVID type in WQE structure

Sean Christopherson (1):
      KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Sebastian Andrzej Siewior (1):
      task_work: Add TWA_NMI_CURRENT as an additional notify mode.

Selvin Xavier (3):
      RDMA/bnxt_re: Support new 5760X P7 devices
      RDMA/bnxt_re: Update the BAR offsets
      RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications

Shay Drory (1):
      net/mlx5: Fix command bitmask initialization

Shenghao Yang (3):
      net: dsa: mv88e6xxx: group cycle counter coefficients
      net: dsa: mv88e6xxx: read cycle counter period from hardware
      net: dsa: mv88e6xxx: support 4000ps cycle counter period

Shengjiu Wang (1):
      ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit

Shubham Panwar (1):
      ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue

Srinivasan Shanmugam (1):
      drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring

Su Hui (2):
      firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
      smb: client: fix possible double free in smb2_set_ea()

Thadeu Lima de Souza Cascardo (1):
      usb: typec: altmode should keep reference to parent

Thomas Weißschuh (1):
      LoongArch: Don't crash in stack_top() for tasks without vDSO

Timo Grautstueck (1):
      lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW

Toke Høiland-Jørgensen (2):
      bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
      bpf: fix kfunc btf caching for modules

Tony Ambardar (1):
      selftests/bpf: Fix cross-compiling urandom_read

Tyrone Wu (3):
      bpf: fix unpopulated name_len field in perf_event link info
      selftests/bpf: fix perf_event link info name_len assertion
      bpf: Fix link info netfilter flags to populate defrag flag

Vincent Guittot (1):
      cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()

Vishal Moola (Oracle) (1):
      mm/khugepaged: convert alloc_charge_hpage() to use folios

Vladimir Oltean (1):
      net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers

Waiman Long (1):
      sched/core: Disable page allocation in task_tick_mm_cid()

Wang Hai (7):
      net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
      net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
      net: systemport: fix potential memory leak in bcm_sysport_xmit()
      net: bcmasp: fix potential memory leak in bcmasp_xmit()
      scsi: target: core: Fix null-ptr-deref in target_alloc_device()
      net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
      be2net: fix potential memory leak in be_xmit()

William Butler (1):
      nvme-pci: set doorbell config before unquiescing

Xin Long (1):
      ipv4: give an IPv4 dev to blackhole_netdev

Yang Erkun (1):
      nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net

Yang Shi (1):
      mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point

Ye Bin (1):
      Bluetooth: bnep: fix wild-memory-access in proto_unregister

Yuan Can (1):
      powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()

Yue Haibing (1):
      btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()

Zhao Mengmeng (3):
      udf: refactor udf_current_aext() to handle error
      udf: refactor udf_next_aext() to handle error
      udf: refactor inode_bmap() to handle error

Zichen Xie (1):
      ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()

liwei (1):
      cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception

BUG=b/376813909
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.6.59.

Change-Id: I77ba5caf224655fb4646aca3b0eb54218fe19e9a
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>