)]}'
{
  "commit": "836a6ee09df17b9d85d6ed88d6d2d32ec7f72f51",
  "tree": "954e4e9d34adb042f21325448c11391a276ec8e4",
  "parents": [
    "abb376464d0dd257a6dfc9aa4d05afbcd3ee0314",
    "814637ca257f4faf57a73fd4e38888cce88b5911"
  ],
  "author": {
    "name": "COS Kernel Merge Bot",
    "email": "cloud-image-merge-automation@prod.google.com",
    "time": "Fri Apr 11 02:18:54 2025 -0700"
  },
  "committer": {
    "name": "COS Kernel Merge Bot",
    "email": "cloud-image-merge-automation@prod.google.com",
    "time": "Fri Apr 11 02:18:55 2025 -0700"
  },
  "message": "merge-upstream/v6.6.87 from branch/tag: upstream/v6.6.87 into branch: main-R121-cos-6.6\n\nChangelog:\n-------------------------------------------------------------\n\nAcs, Jakub (1):\n      ext4: fix OOB read when checking dotdot dir\n\nAl Viro (3):\n      spufs: fix a leak on spufs_new_file() failure\n      spufs: fix gang directory lifetimes\n      spufs: fix a leak in spufs_create_context()\n\nAlex Deucher (1):\n      drm/amdgpu/gfx11: fix num_mec\n\nAlex Hung (1):\n      drm/amd/display: Check link_index before accessing dc-\u003elinks[]\n\nAlexandre Ghiti (1):\n      riscv: Fix hugetlb retrieval of number of ptes in case of !present pte\n\nAlistair Popple (1):\n      fuse: fix dax truncate/punch_hole fault path\n\nAndrii Nakryiko (1):\n      libbpf: Fix hypothetical STT_SECTION extern NULL deref case\n\nAndy Shevchenko (1):\n      pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()\n\nAngeloGioacchino Del Regno (2):\n      drm/mediatek: mtk_hdmi: Unregister audio platform device on failure\n      drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member\n\nAngelos Oikonomopoulos (1):\n      arm64: Don\u0027t call NULL in do_compat_alignment_fixup()\n\nAnshuman Khandual (1):\n      arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig\n\nAntheas Kapenekakis (1):\n      ALSA: hda/realtek: Fix Asus Z13 2025 audio\n\nAntoine Tenart (1):\n      net: decrease cached dst counters in dst_release\n\nArmin Wolf (1):\n      platform/x86: dell-ddv: Fix temperature calculation\n\nArnaldo Carvalho de Melo (5):\n      perf units: Fix insufficient array space\n      perf python: Fixup description of sample.id event member\n      perf python: Decrement the refcount of just created event on failure\n      perf python: Don\u0027t keep a raw_data pointer to consumed ring buffer space\n      perf python: Check if there is space to copy all the event\n\nArnd Bergmann (2):\n      x86/platform: Only allow CONFIG_EISA for 32-bit\n      mdacon: rework dependency list\n\nArtur Weber (1):\n      power: supply: max77693: Fix wrong conversion of charge input threshold value\n\nAtish Patra (1):\n      RISC-V: KVM: Disable the kernel perf counter during configure\n\nBarnabás Czémán (1):\n      clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock\n\nBart Van Assche (1):\n      fs/procfs: fix the comment above proc_pid_wchan()\n\nBenjamin Berg (3):\n      x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()\n      um: remove copy_from_kernel_nofault_allowed\n      um: hostfs: avoid issues on inode number reuse by host\n\nBenjamin Gaignard (1):\n      media: verisilicon: HEVC: Initialize start_bit field\n\nBoris Ostrovsky (1):\n      x86/microcode/AMD: Fix __apply_microcode_amd()\u0027s return value\n\nChao Gao (1):\n      x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures\n\nCheng Xu (1):\n      RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()\n\nChenyuan Yang (1):\n      thermal: int340x: Add NULL check for adev\n\nChiara Meiohas (1):\n      RDMA/mlx5: Fix calculation of total invalidated pages\n\nChristophe JAILLET (2):\n      PCI: histb: Fix an error handling path in histb_pcie_probe()\n      ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()\n\nChuck Lever (1):\n      NFSD: Skip sending CB_RECALL_ANY when the backchannel isn\u0027t up\n\nCong Wang (1):\n      net_sched: skbprio: Remove overly strict queue assertions\n\nCyan Yang (1):\n      selftests/mm/cow: fix the incorrect error handling\n\nDan Carpenter (4):\n      PCI: Remove stray put_device() in pci_register_host_bridge()\n      drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()\n      fs/ntfs3: Fix a couple integer overflows on 32bit systems\n      fs/ntfs3: Prevent integer overflow in hdr_first_de()\n\nDaniel Bárta (1):\n      ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0\n\nDaniel Stodden (1):\n      PCI/ASPM: Fix link state exit during switch upstream function removal\n\nDanila Chernetsov (1):\n      fbdev: sm501fb: Add some geometry checks.\n\nDave Marquardt (1):\n      net: ibmveth: make veth_pool_store stop hanging\n\nDavid E. Box (1):\n      platform/x86/intel/vsec: Add Diamond Rapids support\n\nDavid Hildenbrand (2):\n      x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()\n      kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page()\n\nDavid Laight (1):\n      objtool: Fix verbose disassembly if CROSS_COMPILE isn\u0027t set\n\nDavid Oberhollenzer (1):\n      net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy\n\nDebin Zhu (1):\n      netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets\n\nDmitry Baryshkov (1):\n      drm/msm/dpu: don\u0027t use active in atomic_check()\n\nDmitry Panchenko (1):\n      platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet\n\nDouglas Anderson (1):\n      drm/mediatek: dp: drm_err \u003d\u003e dev_err in HPD path to avoid NULL ptr\n\nDouglas Raillard (2):\n      tracing: Ensure module defining synth event cannot be unloaded while tracing\n      tracing: Fix synth event printk format for str fields\n\nEmmanuel Grumbach (2):\n      wifi: iwlwifi: mvm: use the right version of the rate API\n      wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state\n\nEric Sandeen (1):\n      watch_queue: fix pipe accounting mismatch\n\nFabrizio Castro (3):\n      pinctrl: renesas: rza2: Fix missing of_node_put() call\n      pinctrl: renesas: rzg2l: Fix missing of_node_put() call\n      pinctrl: renesas: rzv2m: Fix missing of_node_put() call\n\nFeng Tang (1):\n      PCI/portdrv: Only disable pciehp interrupts early when needed\n\nFeng Yang (1):\n      ring-buffer: Fix bytes_dropped calculation issue\n\nFernando Fernandez Mancera (1):\n      ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS\n\nFlorian Westphal (1):\n      netfilter: nf_tables: don\u0027t unregister hook when table is dormant\n\nGeert Uytterhoeven (1):\n      drm/bridge: ti-sn65dsi86: Fix multiple instances\n\nGeetha sowjanya (2):\n      octeontx2-af: Fix mbox INTR handler when num VFs \u003e 64\n      octeontx2-af: Free NIX_AF_INT_VEC_GEN irq\n\nGiovanni Gherdovich (1):\n      ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid\n\nGreg Kroah-Hartman (1):\n      Linux 6.6.87\n\nGuilherme G. Piccoli (1):\n      x86/tsc: Always save/restore TSC sched_clock() on suspend/resume\n\nGuillaume Nault (1):\n      tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().\n\nHans Zhang (1):\n      PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload\n\nHans de Goede (1):\n      ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers\n\nHengqi Chen (3):\n      LoongArch: BPF: Fix off-by-one error in build_prologue()\n      LoongArch: BPF: Don\u0027t override subprog\u0027s return value\n      LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC\n\nHenry Martin (2):\n      ASoC: imx-card: Add NULL check in imx_card_probe()\n      arcnet: Add NULL check in com20020pci_probe()\n\nHerbert Xu (1):\n      crypto: nx - Fix uninitialised hv_nxc on error\n\nHermes Wu (1):\n      drm/bridge: it6505: fix HDCP V match check is not performed correctly\n\nHerton R. Krzesinski (1):\n      x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs\n\nHou Tao (1):\n      bpf: Use preempt_count() directly in bpf_send_signal_common()\n\nHuacai Chen (1):\n      LoongArch: Increase ARCH_DMA_MINALIGN up to 16\n\nIan Rogers (2):\n      perf stat: Fix find_stat for mixed legacy/non-legacy events\n      perf evlist: Add success path to evlist__create_syswide_maps\n\nIcenowy Zheng (2):\n      nvme-pci: clean up CMBMSC when registering CMB fails\n      nvme-pci: skip CMB blocks incompatible with PCI P2P DMA\n\nIdo Schimmel (2):\n      ipv6: Start path selection from the first nexthop\n      ipv6: Do not consider link down nexthops in path selection\n\nIlkka Koskinen (1):\n      coresight: catu: Fix number of pages while using 64k pages\n\nIlpo Järvinen (1):\n      PCI: pciehp: Don\u0027t enable HPIE when resuming in poll mode\n\nIvan Orlov (1):\n      kunit/overflow: Fix UB in overflow_allocation_test\n\nJames Clark (1):\n      perf pmu: Don\u0027t double count common sysfs and json events\n\nJann Horn (3):\n      x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret\u003d1\n      x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment\n      x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs\n\nJayesh Choudhary (1):\n      ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible\n\nJerome Brunet (4):\n      clk: amlogic: gxbb: drop incorrect flag on 32k clock\n      clk: amlogic: g12b: fix cluster A parent data\n      clk: amlogic: gxbb: drop non existing 32k clock parent\n      clk: amlogic: g12a: fix mmc A peripheral clock\n\nJie Zhan (1):\n      cpufreq: governor: Fix negative \u0027idle_time\u0027 handling in dbs_update()\n\nJim Quinlan (3):\n      PCI: brcmstb: Use internal register to change link capability\n      PCI: brcmstb: Fix error path after a call to regulator_bulk_get()\n      PCI: brcmstb: Fix potential premature regulator disabling\n\nJiri Kosina (1):\n      HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER\n\nJiri Slaby (SUSE) (1):\n      tty: n_tty: use uint for space returned by tty_write_room()\n\nJoe Hattori (2):\n      media: platform: allgro-dvt: unregister v4l2_device on the error path\n      soundwire: slave: fix an OF node reference leak in soundwire slave device\n\nJohannes Berg (1):\n      wifi: iwlwifi: fw: allocate chained SG tables for dump\n\nJonathan Cameron (2):\n      iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio\n      iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.\n\nJosef Bacik (1):\n      btrfs: handle errors from btrfs_dec_ref() properly\n\nJosh Poimboeuf (6):\n      x86/traps: Make exc_double_fault() consistently noreturn\n      objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()\n      objtool: Fix segfault in ignore_unreachable_insn()\n      sched/smt: Always inline sched_smt_active()\n      context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()\n      rcu-tasks: Always inline rcu_irq_work_resched()\n\nJosé Expósito (1):\n      drm/vkms: Fix use after free and double free on init error\n\nJuhan Jin (1):\n      riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra\n\nKai-Heng Feng (1):\n      PCI: Use downstream bridges for distributing resources\n\nKan Liang (1):\n      perf/x86/intel: Avoid disable PMU if !cpuc-\u003eenabled in sample read\n\nKarel Balej (1):\n      mmc: sdhci-pxav3: set NEED_RSP_BUSY capability\n\nKees Bakker (1):\n      RDMA/mana_ib: Ensure variable err is initialized\n\nKeith Busch (1):\n      nvme-pci: fix stuck reset on concurrent DPC and HP\n\nKevin Loughlin (1):\n      x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()\n\nKonstantin Andreev (1):\n      smack: dont compile ipv6 code unless ipv6 is configured\n\nKuniyuki Iwashima (1):\n      udp: Fix memory accounting leak.\n\nLama Kayal (1):\n      net/mlx5e: SHAMPO, Make reserved size independent of page size\n\nLaurentiu Mihalcea (1):\n      clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents\n\nLeo Yan (1):\n      perf arm-spe: Fix load-store operation checking\n\nLi Lingfeng (1):\n      nfsd: put dl_stid if fail to queue dl_recall\n\nLin Ma (2):\n      netfilter: nft_tunnel: fix geneve_opt type confusion addition\n      net: fix geneve_opt length integer overflow\n\nLubomir Rintel (1):\n      rndis_host: Flag RNDIS modems as WWAN devices\n\nLuca Weiss (3):\n      remoteproc: qcom_q6v5_pas: Make single-PD handling more robust\n      remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226\n      remoteproc: qcom_q6v5_mss: Handle platforms with one power domain\n\nMaher Sanalla (1):\n      IB/mad: Check available slots before posting receive WRs\n\nMarcus Meissner (1):\n      perf tools: annotate asm_pure_loop.S\n\nMarijn Suijten (2):\n      drm/msm/dsi: Use existing per-interface slice count in DSC timing\n      drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host\n\nMario Limonciello (2):\n      ucsi_ccg: Don\u0027t show failed to get FW build information error\n      drm/amd: Keep display off while going into S4\n\nMark Zhang (1):\n      rtnetlink: Allocate vfinfo size for VF GUIDs when supported\n\nMarkus Elfring (2):\n      fbdev: au1100fb: Move a variable assignment behind a null pointer check\n      ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()\n\nMasami Hiramatsu (Google) (2):\n      tracing/hist: Add poll(POLLIN) support on hist file\n      tracing/hist: Support POLLPRI event for poll on histogram\n\nMatthias Proske (1):\n      wifi: brcmfmac: keep power during suspend if board requires it\n\nMaud Spierings (1):\n      dt-bindings: vendor-prefixes: add GOcontroll\n\nMiaoqian Lin (2):\n      ksmbd: use aead_request_free to match aead_request_alloc\n      mmc: omap: Fix memory leak in mmc_omap_new_slot\n\nMichael Kelley (1):\n      x86/hyperv: Fix output argument to hypercall that changes page visibility\n\nMike Christie (1):\n      vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint\n\nMike Rapoport (Microsoft) (1):\n      x86/mm/pat: cpa-test: fix length for CPA_ARRAY test\n\nMurad Masimov (2):\n      acpi: nfit: fix narrowing conversion in acpi_nfit_ctl\n      media: streamzap: fix race between device disconnection and urb callback\n\nNaman Jain (1):\n      x86/hyperv/vtl: Stop kernel from probing VTL0 low memory\n\nNamjae Jeon (6):\n      ksmbd: fix multichannel connection failure\n      ksmbd: fix r_count dec/increment mismatch\n      cifs: fix incorrect validation for num_aces field of smb_acl\n      ksmbd: add bounds check for durable handle context\n      ksmbd: fix use-after-free in ksmbd_sessions_deregister()\n      ksmbd: fix session use-after-free in multichannel connection\n\nNavon John Lukose (1):\n      ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx\n\nNikita Shubin (1):\n      ntb: intel: Fix using link status DB\u0027s\n\nNikita Zhandarovich (1):\n      mfd: sm501: Switch to BIT() to mitigate integer overflows\n\nNiklas Neronin (1):\n      usb: xhci: correct debug message page size calculation\n\nNishanth Aravamudan (1):\n      PCI: Avoid reset when disabled via sysfs\n\nNorbert Szetei (2):\n      ksmbd: add bounds check for create lease context\n      ksmbd: validate zero num_subauth before sub_auth is accessed\n\nOleg Nesterov (1):\n      exec: fix the racy usage of fs_struct-\u003ein_exec\n\nOliver Hartkopp (1):\n      can: statistics: use atomic access in hot path\n\nPablo Neira Ayuso (1):\n      netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only\n\nPalmer Dabbelt (1):\n      RISC-V: errata: Use medany for relocatable builds\n\nPatrisious Haddad (1):\n      RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow\n\nPaul Menzel (1):\n      ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP\n\nPeng Fan (2):\n      remoteproc: core: Clear table_sz when rproc_shutdown\n      dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister\n\nPeter Geis (1):\n      clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent\n\nPeter Zijlstra (2):\n      lockdep/mm: Fix might_fault() lockdep check of current-\u003emm-\u003emmap_lock\n      perf/core: Fix perf_pmu_register() vs. perf_init_event()\n\nPeter Zijlstra (Intel) (1):\n      perf/x86/intel: Apply static call for drain_pebs\n\nPrathamesh Shete (1):\n      pinctrl: tegra: Set SFIO mode to Mux Register\n\nQasim Ijaz (2):\n      isofs: fix KMSAN uninit-value bug in do_isofs_readdir()\n      jfs: fix slab-out-of-bounds read in ea_get()\n\nQiuxu Zhuo (4):\n      EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids\n      EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer\n      EDAC/ie31200: Fix the DIMM size mask for several SoCs\n      EDAC/ie31200: Fix the error path order of ie31200_init()\n\nRafael J. Wysocki (2):\n      PM: sleep: Adjust check before setting power.must_resume\n      PM: sleep: Fix handling devices with direct_complete set on errors\n\nRan Xiaokai (1):\n      tracing/osnoise: Fix possible recursive locking for cpus_read_lock()\n\nRemi Pommarel (1):\n      leds: Fix LED_OFF brightness race\n\nRichard Fitzgerald (1):\n      firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success\n\nRoger Quadros (1):\n      memory: omap-gpmc: drop no compatible check\n\nRoman Gushchin (1):\n      RDMA/core: Don\u0027t expose hw_counters outside of init net namespace\n\nRoman Smirnov (1):\n      jfs: add index corruption check to DT_GETPAGE()\n\nSagi Grimberg (1):\n      nvme-tcp: fix possible UAF in nvme_tcp_poll\n\nSaket Kumar Bhaskar (1):\n      selftests/bpf: Select NUMA_NO_NODE to create map\n\nSebastian Andrzej Siewior (1):\n      lockdep: Don\u0027t disable interrupts on RT in disable_irq_nosync_lockdep.*()\n\nShrikanth Hegde (1):\n      sched/deadline: Use online cpus for validating runtime\n\nSimon Tatham (2):\n      affs: generate OFS sequence numbers starting at 1\n      affs: don\u0027t write overlarge OFS data block size fields\n\nSourabh Jain (1):\n      kexec: initialize ELF lowest address to ULONG_MAX\n\nSrinivas Pandruvada (1):\n      platform/x86: ISST: Correct command storage data length\n\nSrinivasan Shanmugam (1):\n      drm/amdkfd: Fix Circular Locking Dependency in \u0027svm_range_cpu_invalidate_pagetables\u0027\n\nStanislav Spassov (1):\n      x86/fpu: Fix guest FPU state buffer allocation size\n\nStanley Chu (1):\n      i3c: master: svc: Fix missing the IBI rules\n\nStefan Binding (2):\n      ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA\n      ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA\n\nStefano Garzarella (1):\n      vsock: avoid timeout during connect() if the socket is closing\n\nSteven Rostedt (2):\n      tracing: Switch trace_events_hist.c code over to use guard()\n      tracing: Do not use PERF enums when perf is not defined\n\nSteven Rostedt (Google) (1):\n      tracing: Allow creating instances with specified system events\n\nTakashi Iwai (2):\n      ALSA: hda/realtek: Always honor no_shutup_pins\n      ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA\n\nTanya Agarwal (1):\n      lib: 842: Improve error handling in sw842_compress()\n\nTao Chen (1):\n      perf/ring_buffer: Allow the EPOLLRDNORM flag for poll\n\nTasos Sahanidis (1):\n      hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}\n\nTengda Wu (2):\n      tracing: Correct the refcount if the hist/hist_debug file fails to open\n      tracing: Fix use-after-free in print_graph_function_flags during tracer switching\n\nThadeu Lima de Souza Cascardo (1):\n      drm/amd/display: avoid NPD when ASIC does not support DMUB\n\nTheodore Ts\u0027o (1):\n      ext4: don\u0027t over-report free space or inodes in statvfs\n\nThippeswamy Havalige (1):\n      PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe\n\nThomas Richter (1):\n      perf bench: Fix perf bench syscall loop count\n\nTianyu Lan (1):\n      x86/hyperv: Fix check of return value from snp_set_vmsa()\n\nTim Schumacher (1):\n      selinux: Chain up tool resolving errors in install_policy.sh\n\nTobias Waldekranz (1):\n      net: mvpp2: Prevent parser TCAM memory corruption\n\nTomi Valkeinen (1):\n      drm: xlnx: zynqmp: Fix max dma segment size\n\nTrond Myklebust (2):\n      NFSv4: Don\u0027t trigger uneccessary scans for return-on-close delegations\n      NFS: Shut down the nfs_client only after all the superblocks\n\nUlf Hansson (1):\n      mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD\n\nUwe Kleine-König (2):\n      iio: adc: ad4130: Fix comparison of channel setups\n      iio: adc: ad7124: Fix comparison of channel configs\n\nVasiliy Kovalev (1):\n      ocfs2: validate l_tree_depth to avoid out-of-bounds access\n\nViktor Malik (1):\n      selftests/bpf: Fix string read in strncmp benchmark\n\nVitaliy Shevtsov (2):\n      ASoC: cs35l41: check the return value from spi_setup()\n      drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()\n\nVitaly Lifshits (1):\n      e1000e: change k1 configuration on MTP and later platforms\n\nVladimir Lypak (1):\n      clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock\n\nVladis Dronov (1):\n      x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled\n\nWaiman Long (1):\n      locking/semaphore: Use wake_q to wake up processes outside lock critical section\n\nWang Zhaolong (1):\n      smb: client: Fix netns refcount imbalance causing leaks and use-after-free\n\nWayne Lin (1):\n      drm/dp_mst: Fix drm RAD print\n\nWenkai Lin (3):\n      crypto: hisilicon/sec2 - fix for aead authsize alignment\n      crypto: hisilicon/sec2 - fix for sec spec check\n      crypto: hisilicon/sec2 - fix for aead auth key length\n\nWentao Guan (1):\n      HID: i2c-hid: improve i2c_hid_get_report error message\n\nWill McVicker (1):\n      clk: samsung: Fix UBSAN panic in samsung_clk_init()\n\nYajun Deng (1):\n      ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans\n\nYeoreum Yun (1):\n      perf/core: Fix child_total_time_enabled accounting bug at task exit\n\nYing Lu (1):\n      usbnet:fix NPE during rx_complete\n\nYuanfang Zhang (1):\n      coresight-etm4x: add isb() before reading the TRCSTATR\n\nYuezhang Mo (1):\n      exfat: fix the infinite loop in exfat_find_last_cluster()\n\nYuli Wang (1):\n      LoongArch: Rework the arch_kgdb_breakpoint() implementation\n\nZijun Hu (1):\n      of: property: Increase NR_FWNODE_REFERENCE_ARGS\n\nzuoqian (1):\n      cpufreq: scpi: compare kHz instead of Hz\n\n谢致邦 (XIE Zhibang) (2):\n      staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES\n      LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig\n\nBUG\u003db/409954071\nTEST\u003dtryjob, validation and K8s e2e\nRELEASE_NOTE\u003dUpdated the Linux kernel to v6.6.87.\n\nChange-Id: Idc9d4969b527ea1e8c1bcd9b4807e0a0510f2018\nSigned-off-by: COS Kernel Merge Bot \u003ccloud-image-merge-automation@prod.google.com\u003e\n",
  "tree_diff": []
}