)]}'
{
  "commit": "51d5c624a0a37c8501fb3a2ed66f0a2dee6ac48a",
  "tree": "885e5105f1277fe6847bb771b8e2b22c3f74d981",
  "parents": [
    "96557fbcea5c08d7884f0538f18c352ad0d05eb3",
    "f231f248323d6469c23792221863779f41c4a219"
  ],
  "author": {
    "name": "COS Kernel Merge Bot",
    "email": "cloud-image-merge-automation@prod.google.com",
    "time": "Mon Oct 20 02:02:01 2025 -0700"
  },
  "committer": {
    "name": "Kevin Berry",
    "email": "kpberry@google.com",
    "time": "Mon Oct 20 10:57:35 2025 -0700"
  },
  "message": "merge-upstream/v6.6.113 from branch/tag: upstream/v6.6.113 into branch: main-R121-cos-6.6\n\nChangelog:\n-------------------------------------------------------------\n\nAaron Kling (1):\n      cpufreq: tegra186: Set target frequency for all cpus in policy\n\nAdam Xue (1):\n      bus: mhi: host: Do not use uninitialized \u0027dev\u0027 pointer in mhi_init_irq_setup()\n\nAhmet Eray Karadag (1):\n      ext4: guard against EA inode refcount underflow in xattr update\n\nAleksa Sarai (1):\n      fscontext: do not consume log entries when returning -EMSGSIZE\n\nAlex Deucher (1):\n      drm/amdgpu: Add additional DCE6 SCL registers\n\nAlexandr Sapozhnikov (1):\n      net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()\n\nAlok Tiwari (1):\n      clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver\n\nAmir Mohammad Jahangirzad (1):\n      ACPI: debug: fix signedness issues in read/write helpers\n\nAnderson Nascimento (1):\n      btrfs: avoid potential out-of-bounds in btrfs_encode_fh()\n\nAndy Shevchenko (2):\n      mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type\n      ACPI: battery: Check for error code from devm_mutex_init() call\n\nAngeloGioacchino Del Regno (1):\n      clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m\n\nAnthony Yznaga (1):\n      sparc64: fix hugetlb for sun4u\n\nAskar Safin (1):\n      openat2: don\u0027t trigger automounts with RESOLVE_NO_XDEV\n\nBartosz Golaszewski (1):\n      gpio: wcd934x: mark the GPIO controller as sleeping\n\nBrian Masney (2):\n      clk: at91: peripheral: fix return value\n      clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()\n\nBrian Norris (1):\n      PCI/sysfs: Ensure devices are powered for config reads\n\nCatalin Marinas (1):\n      arm64: mte: Do not flag the zero page as PG_mte_tagged\n\nChen-Yu Tsai (1):\n      clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags()\n\nClément Le Goffic (1):\n      rtc: optee: fix memory leak on driver removal\n\nCorey Minyard (2):\n      Revert \"ipmi: fix msg stack when IPMI is disconnected\"\n      ipmi: Rework user message limit handling\n\nDan Carpenter (1):\n      net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()\n\nDaniel Borkmann (1):\n      bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}\n\nDaniel Tang (1):\n      ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT\n\nDeepanshu Kartikey (1):\n      ext4: validate ea_ino and size in check_xattrs\n\nDonet Tom (1):\n      mm/ksm: fix incorrect KSM counter handling in mm_struct during fork\n\nDuoming Zhou (1):\n      scsi: mvsas: Fix use-after-free bugs in mvs_work_queue\n\nDzmitry Sankouski (1):\n      power: supply: max77976_charger: fix constant current reporting\n\nEdward Adam Davis (1):\n      media: mc: Clear minor number before put device\n\nEkansh Gupta (1):\n      misc: fastrpc: Add missing dev_err newlines\n\nEric Biggers (2):\n      KEYS: trusted_tpm1: Compare HMAC values in constant time\n      sctp: Fix MAC comparison to be constant-time\n\nEric Dumazet (1):\n      tcp: take care of zero tp-\u003ewindow_clamp in tcp_set_rcvlowat()\n\nEric Woudstra (1):\n      bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()\n\nErick Karanja (1):\n      net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe\n\nEsben Haabendal (2):\n      rtc: interface: Ensure alarm irq is enabled when UIE is enabled\n      rtc: interface: Fix long-standing race when setting alarm\n\nFedor Pchelkin (1):\n      clk: tegra: do not overallocate memory for bpmp clocks\n\nFernando Fernandez Mancera (1):\n      netfilter: nft_objref: validate objref and objrefmap expressions\n\nFinn Thain (1):\n      fbdev: Fix logic error in \"offb\" name match\n\nFlorian Westphal (1):\n      netfilter: nf_tables: drop unused 3rd argument from validate callback ops\n\nGeorg Gottleuber (1):\n      nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk\n\nGreg Kroah-Hartman (1):\n      Linux 6.6.113\n\nGuenter Roeck (1):\n      ipmi: Fix handling of messages with provided receive message pointer\n\nGunnar Kudrjavets (1):\n      tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single\n\nHans de Goede (2):\n      mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value\n      mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag\n\nHaoxiang Li (1):\n      fs/ntfs3: Fix a resource leak bug in wnd_extend()\n\nHarini T (2):\n      mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call\n      mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes\n\nHarshit Agarwal (1):\n      sched/deadline: Fix race in push_dl_task()\n\nHerbert Xu (1):\n      crypto: essiv - Check ssize for decryption and in-place encryption\n\nHongbo Li (1):\n      irqchip/sifive-plic: Make use of __assign_bit()\n\nHuacai Chen (3):\n      LoongArch: Init acpi_gbl_use_global_lock to false\n      init: handle bootloader identifier in kernel parameters\n      ACPICA: Allow to skip Global Lock initialization\n\nIan Forbes (2):\n      drm/vmwgfx: Fix Use-after-free in validation\n      drm/vmwgfx: Fix copy-paste typo in validation\n\nIan Rogers (5):\n      perf evsel: Avoid container_of on a NULL leader\n      libperf event: Ensure tracing data is multiple of 8 sized\n      perf test: Don\u0027t leak workload gopipe in PERF_RECORD_*\n      perf evsel: Ensure the fallback message is always written to\n      perf test stat: Avoid hybrid assumption when virtualized\n\nIlya Leoshkevich (5):\n      s390/bpf: Change seen_reg to a mask\n      s390/bpf: Centralize frame offset calculations\n      s390/bpf: Describe the frame using a struct instead of constants\n      s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL\n      s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG\n\nJames Clark (1):\n      perf test: Add a test for default perf stat command\n\nJan Kara (4):\n      ext4: verify orphan file size is not too big\n      ext4: free orphan info with kvfree\n      writeback: Avoid softlockup when switching many inodes\n      writeback: Avoid excessively long inode switching times\n\nJason Andryuk (3):\n      xen/events: Cleanup find_virq() return codes\n      xen/events: Return -EEXIST for bound VIRQs\n      xen/events: Update virq_to_irq on migration\n\nJisheng Zhang (1):\n      pwm: berlin: Fix wrong register in suspend/resume\n\nJohan Hovold (2):\n      firmware: meson_sm: fix device leak at probe\n      lib/genalloc: fix device leak in of_gen_pool_get()\n\nJohn David Anglin (1):\n      parisc: Remove spurious if statement from raw_copy_from_user()\n\nKaFai Wan (1):\n      bpf: Avoid RCU context warning when unpinning htab with internal structs\n\nKrzysztof Kozlowski (1):\n      pinctrl: samsung: Drop unused S3C24xx driver data\n\nKuniyuki Iwashima (1):\n      tcp: Don\u0027t call reqsk_fastopen_remove() in tcp_conn_request().\n\nLance Yang (1):\n      selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled\n\nLaurent Pinchart (1):\n      media: mc: Fix MUST_CONNECT handling for pads with no links\n\nLeo Yan (6):\n      perf arm_spe: Correct setting remote access\n      perf arm-spe: Rename the common data source encoding\n      perf arm_spe: Correct memory level for remote access\n      perf session: Fix handling when buffer exceeds 2 GiB\n      tools build: Align warning options with perf\n      perf python: split Clang options when invoking Popen\n\nLi RongQing (1):\n      mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages\u003d0\n\nLichen Liu (1):\n      fs: Add \u0027initramfs_options\u0027 to set initramfs mount options\n\nLing Xu (1):\n      misc: fastrpc: Save actual DMA size in fastrpc_map structure\n\nLinus Walleij (1):\n      mtd: rawnand: fsmc: Default to autodetect buswidth\n\nLu Baolu (1):\n      iommu/vt-d: PRS isn\u0027t usable if PDS isn\u0027t supported\n\nLucas Zampieri (1):\n      irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume\n\nLukas Wunner (3):\n      xen/manage: Fix suspend error path\n      PCI/ERR: Fix uevent on failure to recover\n      PCI/AER: Support errors introduced by PCIe r6.0\n\nMa Ke (3):\n      media: lirc: Fix error handling in lirc_register()\n      of: unittest: Fix device reference count leak in of_unittest_pci_node_verify\n      sparc: fix error handling in scan_one_device()\n\nMarek Vasut (4):\n      drm/rcar-du: dsi: Fix 1/2/3 lane support\n      PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock\n      PCI: rcar-host: Drop PMSR spinlock\n      PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock\n\nMatthieu Baerts (NGI0) (2):\n      selftests: mptcp: join: validate C-flag + def limit\n      mptcp: pm: in-kernel: usable client side with C-flag\n\nMiaoqian Lin (2):\n      ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init\n      xtensa: simdisk: add input size check in proc_write_simdisk\n\nMichael Hennerich (2):\n      iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE\n      iio: frequency: adf4350: Fix prescaler usage.\n\nMichael Riesch (1):\n      dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required\n\nMuhammad Usama Anjum (1):\n      wifi: ath11k: HAL SRNG: don\u0027t deinitialize and re-initialize again\n\nNam Cao (2):\n      powerpc/powernv/pci: Fix underflow and leak issue\n      powerpc/pseries/msi: Fix potential underflow and leak issue\n\nNamhyung Kim (1):\n      perf tools: Add fallback for exclude_guest\n\nNamjae Jeon (1):\n      ksmbd: add max ip connections parameter\n\nNathan Chancellor (1):\n      lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older\n\nNick Morrow (1):\n      wifi: mt76: mt7921u: Add VID/PID for Netgear A7500\n\nNiklas Cassel (1):\n      PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()\n\nNiklas Schnelle (2):\n      PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV\n      PCI/AER: Fix missing uevent on recovery when a reset is requested\n\nOjaswin Mujoo (1):\n      ext4: correctly handle queries for metadata mappings\n\nOleg Nesterov (1):\n      kernel/sys.c: fix the racy usage of task_lock(tsk-\u003egroup_leader) in sys_prlimit64() paths\n\nOlga Kornievskaia (1):\n      nfsd: nfserr_jukebox in nlm_fopen should lead to a retry\n\nPali Rohár (1):\n      cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points\n\nPaulo Alcantara (1):\n      smb: client: fix missing timestamp updates after utime(2)\n\nPeter Ujfalusi (1):\n      ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size\n\nPhillip Lougher (2):\n      Squashfs: add additional inode sanity checking\n      Squashfs: reject negative file sizes in squashfs_read_inode()\n\nPratyush Yadav (2):\n      spi: cadence-quadspi: Flush posted register writes before INDAC access\n      spi: cadence-quadspi: Flush posted register writes before DAC access\n\nQianfeng Rong (3):\n      media: i2c: mt9v111: fix incorrect type for ret\n      iio: dac: ad5360: use int type to store negative error codes\n      iio: dac: ad5421: use int type to store negative error codes\n\nQu Wenruo (1):\n      btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()\n\nRafael J. Wysocki (6):\n      ACPI: property: Fix buffer properties extraction for subnodes\n      cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()\n      ACPI: battery: Add synchronization between interface updates\n      ACPI: property: Disregard references in data-only subnode lists\n      ACPI: property: Add code comments explaining what is going on\n      ACPI: property: Do not pass NULL handles to acpi_attach_data()\n\nRex Chen (1):\n      mmc: core: SPI mode remove cmd7\n\nRob Herring (Arm) (1):\n      rtc: x1205: Fix Xicor X1205 vendor prefix\n\nSam James (1):\n      parisc: don\u0027t reference obsolete termio struct for TC* constants\n\nSean Anderson (2):\n      iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK\n      iio: xilinx-ams: Unmask interrupts after updating alarms\n\nSean Christopherson (5):\n      rseq/selftests: Use weak symbol reference, not definition, to link with glibc\n      x86/umip: Check that the instruction opcode is at least two bytes\n      x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)\n      KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn\u0027t valid\n      KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2\n\nSean Nyekjaer (1):\n      iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume\n\nSeongJae Park (1):\n      mm/damon/vaddr: do not repeat pte_offset_map_lock() until success\n\nShin\u0027ichiro Kawasaki (1):\n      PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release\n\nShuhao Fu (1):\n      drm/nouveau: fix bad ret code in nouveau_bo_move_prep\n\nSiddharth Vadapalli (1):\n      PCI: keystone: Use devm_request_irq() to free \"ks-pcie-error-irq\" on exit\n\nSimon Schuster (1):\n      copy_sighand: Handle architectures where sizeof(unsigned long) \u003c sizeof(u64)\n\nStephan Gerhold (4):\n      arm64: dts: qcom: msm8916: Add missing MDSS reset\n      arm64: dts: qcom: msm8939: Add missing MDSS reset\n      arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees\n      media: venus: firmware: Use correct reset sequence for IRIS2\n\nSumit Kumar (1):\n      bus: mhi: ep: Fix chained transfer handling in read path\n\nTetsuo Handa (2):\n      minixfs: Verify inode mode when loading from disk\n      cramfs: Verify inode mode when loading from disk\n\nThadeu Lima de Souza Cascardo (1):\n      mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations\n\nThomas Fourier (5):\n      media: cx18: Add missing check after DMA map\n      media: pci: ivtv: Add missing check after DMA map\n      crypto: aspeed - Fix dma_unmap_sg() direction\n      crypto: atmel - Fix dma_unmap_sg() direction\n      crypto: rockchip - Fix dma_unmap_sg() nents value\n\nThomas Gleixner (1):\n      rseq: Protect event mask against membarrier IPI\n\nThomas Weißschuh (3):\n      fs: always return zero on success from replace_fd()\n      ACPI: battery: allocate driver data through devm_ APIs\n      ACPI: battery: initialize mutexes through devm_ APIs\n\nThorsten Blum (2):\n      scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()\n      NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()\n\nTiezhu Yang (1):\n      LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()\n\nTimur Kristóf (3):\n      drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs\n      drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6\n      drm/amd/display: Properly disable scaling on DCE6\n\nTomi Valkeinen (1):\n      media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()\n\nVarad Gautam (1):\n      asm-generic/io.h: Skip trace helpers if rwmmio events are disabled\n\nVibhore Vardhan (1):\n      arm64: dts: ti: k3-am62a-main: Fix main padcfg length\n\nVidya Sagar (1):\n      PCI: tegra194: Handle errors in BPMP response\n\nWang Jiang (1):\n      PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan()\n\nYang Shi (1):\n      arm64: kprobes: call set_memory_rox() for kprobe page\n\nYongjian Sun (1):\n      ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()\n\nYu Kuai (1):\n      blk-crypto: fix missing blktrace bio split events\n\nYuan Chen (1):\n      tracing: Fix race condition in kprobe initialization causing NULL pointer dereference\n\nYunseong Kim (1):\n      perf util: Fix compression checks returning -1 as bool\n\nZack Rusin (1):\n      drm/vmwgfx: Fix a null-ptr access in the cursor snooper\n\nZhang Yi (1):\n      ext4: fix an off-by-one issue during moving extents\n\nZhen Ni (2):\n      clocksource/drivers/clps711x: Fix resource leaks in error paths\n      memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe\n\ngaoxiang17 (1):\n      pid: Add a judgment for ns null in pid_nr_ns\n\nBUG\u003db/453570806\nTEST\u003dtryjob, validation and K8s e2e\nRELEASE_NOTE\u003dUpdated the Linux kernel to v6.6.113.\n\nChange-Id: Ie3cfd34f742cc74e69673fb7337d0fa6d0cda9f6\nSigned-off-by: COS Kernel Merge Bot \u003ccloud-image-merge-automation@prod.google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/114822\nReviewed-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\nTested-by: Kevin Berry \u003ckpberry@google.com\u003e\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Kevin Berry \u003ckpberry@google.com\u003e\n",
  "tree_diff": []
}