merge-upstream/v6.6.61 from branch/tag: upstream/v6.6.61 into branch: cos-6.6

Changelog:
-------------------------------------------------------------

Aleksandr Loktionov (1):
      i40e: fix race condition by adding filter's intermediate sync state

Alex Deucher (3):
      drm/amdgpu: Adjust debugfs eviction and IB access permissions
      drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
      drm/amdgpu: Adjust debugfs register access permissions

Alexander Stein (2):
      arm64: dts: imx8qxp: Add VPU subsystem file
      arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs

Amelie Delaunay (1):
      ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove

Andrei Vagin (1):
      ucounts: fix counter leak in inc_rlimit_get_ucounts()

Andrew Kanner (1):
      ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()

Antonio Quartulli (1):
      drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

Benjamin Segall (1):
      posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone

Benoit Sevens (1):
      media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

Benoît Monin (1):
      USB: serial: option: add Quectel RG650V

Bjorn Andersson (1):
      rpmsg: glink: Handle rejected intent request better

Chen Ridong (1):
      security/keys: fix slab-out-of-bounds in key_task_permission

ChiYuan Huang (1):
      regulator: rtq2208: Fix uninitialized use of regulator_config

Corey Hickey (1):
      platform/x86/amd/pmc: Detect when STB is not available

Dan Carpenter (2):
      usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
      USB: serial: io_edgeport: fix use after free in debug printk

Daniel Maslowski (1):
      riscv/purgatory: align riscv_kernel_entry

Dario Binacchi (1):
      can: c_can: fix {rx,tx}_errors statistics

David Howells (1):
      rxrpc: Fix missing locking causing hanging calls

Diederik de Haas (4):
      arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
      arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
      arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
      arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes

Diogo Silva (1):
      net: phy: ti: add PHY_RST_AFTER_CLK_EN flag

Dmitry Baryshkov (1):
      thermal/drivers/qcom/lmh: Remove false lockdep backtrace

Emil Dahl Juhl (1):
      tools/lib/thermal: Fix sampling handler context ptr

Erik Schumacher (1):
      pwm: imx-tpm: Use correct MODULO value for EPWM mode

Filipe Manana (1):
      btrfs: reinitialize delayed ref list after deleting it from the list

Florian Westphal (1):
      netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx

Geert Uytterhoeven (2):
      arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
      arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator

Geliang Tang (1):
      mptcp: use sock_kfree_s instead of kfree

George Guo (1):
      netfilter: nf_tables: cleanup documentation

Greg Kroah-Hartman (2):
      Revert "wifi: mac80211: fix RCU list iterations"
      Linux 6.6.61

Heiko Stuebner (12):
      arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
      arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
      arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
      arm64: dts: rockchip: Remove undocumented supports-emmc property
      arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
      arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
      arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
      arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
      ARM: dts: rockchip: fix rk3036 acodec node
      ARM: dts: rockchip: drop grf reference from rk3036 hdmi
      ARM: dts: rockchip: Fix the spi controller on rk3036
      ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin

Hyunwoo Kim (2):
      hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
      vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

Icenowy Zheng (1):
      thermal/of: support thermal zones w/o trips subnode

Jack Wu (1):
      USB: serial: qcserial: add support for Sierra Wireless EM86xx

Jarosław Janik (1):
      Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"

Jinjie Ruan (2):
      ksmbd: Fix the missing xa_store error check
      net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()

Jiri Kosina (1):
      HID: core: zero-initialize the report buffer

Johan Jonker (2):
      net: arc: fix the device for dma_map_single/dma_unmap_single
      net: arc: rockchip: fix emac mdio node support

Johannes Thumshirn (1):
      scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer

Jyri Sarha (1):
      ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits

Lijo Lazar (1):
      drm/amdgpu: Fix DPX valid mode check on GC 9.4.3

Liu Peibao (1):
      i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set

Marc Kleine-Budde (3):
      can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
      can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
      can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes

Marc Zyngier (1):
      irqchip/gic-v3: Force propagation of the active state with a read-back

Mark Brown (1):
      arm64/sve: Discard stale CPU state when handling SVE traps

Mark Rutland (2):
      arm64: Kconfig: Make SME depend on BROKEN for now
      arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint

Mateusz Polchlopek (1):
      ice: change q_index variable type to s16 to store -1 value

Mauro Carvalho Chehab (10):
      media: stb0899_algo: initialize cfr before using it
      media: dvbdev: prevent the risk of out of memory access
      media: dvb_frontend: don't play tricks with underflow values
      media: adv7604: prevent underflow condition when reporting colorspace
      media: ar0521: don't overflow when checking PLL values
      media: s5p-jpeg: prevent buffer overflows
      media: cx24116: prevent overflows on SNR calculus
      media: pulse8-cec: fix data timestamp at pulse8_setup()
      media: v4l2-tpg: prevent the risk of a division by zero
      media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()

Mike Snitzer (1):
      nfs: avoid i_lock contention in nfs_clear_invalid_mapping

Ming-Hung Tsai (5):
      dm cache: correct the number of origin blocks to match the target length
      dm cache: fix flushing uninitialized delayed_work on cache_ctr error
      dm cache: fix out-of-bounds access to the dirty bitset when resizing
      dm cache: optimize dirty bit checking with find_next_bit when resizing
      dm cache: fix potential out-of-bounds access on the first resume

Mingcong Bai (1):
      ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022

Murad Masimov (1):
      ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()

Namjae Jeon (3):
      ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
      ksmbd: check outstanding simultaneous SMB operations
      ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp

NeilBrown (2):
      sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
      NFSv3: only use NFS timeout for MOUNT when protocols are compatible

Nícolas F. R. A. Prado (1):
      net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case

Pablo Neira Ayuso (1):
      netfilter: nf_tables: wait for rcu grace period on net_device removal

Peiyang Wang (1):
      net: hns3: fix kernel crash when uninstalling driver

Peng Fan (1):
      arm64: dts: imx8mp: correct sdhc ipg clk

Philo Lu (1):
      virtio_net: Add hash_key_length check

Pu Lehui (1):
      Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"

Qi Xi (1):
      fs/proc: fix compile warning about variable 'vmcore_mmap_ops'

Reinhard Speyerer (1):
      USB: serial: option: add Fibocom FG132 0x0112 composition

Rex Nie (1):
      usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier

Roberto Sassu (1):
      nfs: Fix KMSAN warning in decode_getfattr_attrs()

Roger Quadros (1):
      usb: dwc3: fix fault at system suspend if device was already runtime suspended

Roman Gushchin (1):
      signal: restore the override_rlimit logic

Sergey Bostandzhyan (1):
      arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus

Stefan Wahren (1):
      net: vertexcom: mse102x: Fix possible double free of TX skb

Suraj Gupta (1):
      dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value

Takashi Iwai (1):
      ALSA: usb-audio: Add quirk for HP 320 FHD Webcam

Trond Myklebust (1):
      filemap: Fix bounds checking in filemap_read()

Vitaly Lifshits (1):
      e1000e: Remove Meteor Lake SMBUS workarounds

Wei Fang (2):
      net: enetc: set MAC address to the VF net_device
      net: enetc: allocate vf_state during PF probes

Wentao Liang (1):
      drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path

Xin Long (1):
      sctp: properly validate chunk size in sctp_sf_ootb()

Xinqi Zhang (1):
      firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()

Zichen Xie (1):
      dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow

Zijun Hu (1):
      usb: musb: sunxi: Fix accessing an released usb phy

BUG=b/379238607
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.6.61.

Change-Id: I323bff362ca219ff8f69a445af09069b04e93a63
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>