Merge 6.6.88 into android15-6.6-lts

GKI (arm64) relevant 88 out of 389 changes, affecting 98 files +1007/-516
  09c2dcda tipc: fix memory leak in tipc_link_xmit [1 file, +1/-0]
  2f9761a9 codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() [2 files, +3/-8]
  abd07987 rtnl: add helper to check if rtnl group has listeners [1 file, +7/-0]
  aa258dbf rtnl: add helper to check if a notification is needed [1 file, +15/-0]
  28f2cd14 net/sched: cls_api: conditional notification of events [1 file, +12/-0]
  8b158a0d tc: Ensure we have enough buffer space when sending filter netlink notifications [1 file, +45/-21]
  c5ed0ead net: ethtool: Don't call .cleanup_data when prepare_data fails [1 file, +5/-3]
  00d44fe2 net_sched: sch_sfq: use a temporary work area for validating configuration [1 file, +44/-12]
  d2718324 net_sched: sch_sfq: move the limit validation [1 file, +6/-4]
  6509e2e1 ipv6: Align behavior across nexthops during path selection [1 file, +4/-4]
  323960a1 fs: consistently deref the files table with rcu_dereference_raw() [1 file, +17/-9]
  4ec80a68 umount: Allow superblock owners to force umount [1 file, +2/-1]
  f14d29b8 perf: arm_pmu: Don't disable counter in armpmu_add() [1 file, +3/-5]
  150d1cbd arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD [1 file, +2/-0]
  035c6e60 media: uvcvideo: Add quirk for Actions UVC05 [1 file, +9/-0]
  63f51608 ALSA: usb-audio: Fix CME quirk for UF series keyboards [1 file, +74/-6]
  4fc5c175 f2fs: don't retry IO for corrupted data scenario [1 file, +4/-0]
  809bf3a7 net: usb: asix_devices: add FiberGecko DeviceID [1 file, +17/-0]
  95f17738 page_pool: avoid infinite loop to schedule delayed worker [1 file, +7/-1]
  8b5e5aac f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() [1 file, +8/-1]
  1dbece9c ext4: protect ext4_release_dquot against freezing [1 file, +17/-0]
  b7cc9e3a Revert "f2fs: rebuild nat_bits during umount" [3 files, +59/-95]
  362a90ce ext4: ignore xattrs past end [1 file, +10/-1]
  06f20cd7 cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk [3 files, +19/-0]
  d537859e net: vlan: don't propagate flags on open [1 file, +4/-27]
  e7115019 tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER [1 file, +3/-1]
  80646463 Bluetooth: hci_uart: fix race during initialization [1 file, +2/-1]
  fb95ab35 Bluetooth: qca: simplify WCN399x NVM loading [1 file, +6/-7]
  f5b168c3 drm: allow encoder mode_set even when connectors change for crtc [1 file, +1/-1]
  bfea2e6f drm: panel-orientation-quirks: Add support for AYANEO 2S [1 file, +2/-2]
  14dc1527 drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB [1 file, +18/-0]
  118f95e3 drm: panel-orientation-quirks: Add quirk for AYA NEO Slide [1 file, +6/-0]
  49ef9e47 drm: panel-orientation-quirks: Add new quirk for GPD Win 2 [1 file, +6/-0]
  1e27e605 drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) [1 file, +12/-0]
  100cf2fa drm/bridge: panel: forbid initializing a panel with unknown connector type [1 file, +4/-1]
  61d1a829 drivers: base: devres: Allow to release group on device release [1 file, +7/-0]
  14345d5d tracing: probe-events: Add comments about entry data storing code [1 file, +28/-0]
  d5cba773 bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags [1 file, +44/-36]
  480faed2 ext4: don't treat fhandle lookup of ea_inode as FS corruption [1 file, +48/-20]
  892d24d7 arm64: cputype: Add MIDR_CORTEX_A76AE [1 file, +2/-0]
  1577657f arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list [1 file, +1/-0]
  3ca6b0c9 arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB [2 files, +102/-102]
  db8a6579 arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list [1 file, +3/-0]
  5085e023 KVM: arm64: Tear down vGIC on failed vCPU creation [1 file, +5/-1]
  c3d68e38 media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() [1 file, +2/-2]
  35c4a652 io_uring/kbuf: reject zero sized provided buffers [1 file, +2/-0]
  2eeb1085 ext4: fix off-by-one error in do_split [1 file, +1/-1]
  a5464ac3 f2fs: fix to avoid atomicity corruption of atomic file [2 files, +5/-3]
  6871a676 i3c: Add NULL pointer check in i3c_master_queue_ibi() [1 file, +3/-0]
  c88f7328 jbd2: remove wrong sb->s_sequence check [1 file, +0/-1]
  388ba878 mailbox: tegra-hsp: Define dimensioning masks in SoC data [1 file, +60/-12]
  8db1206d arm64: mm: Correct the update of max_pfn [1 file, +2/-1]
  e09661ac mm/rmap: reject hugetlb folios in folio_make_device_exclusive() [1 file, +1/-1]
  402769cd mm: make page_mapped_in_vma() hugetlb walk aware [1 file, +9/-4]
  f4bc11b3 mm: fix lazy mmu docs and usage [1 file, +8/-6]
  e351ffc4 mm/mremap: correctly handle partial mremap() of VMA starting at 0 [1 file, +5/-5]
  37618317 mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock [1 file, +1/-1]
  0b83b941 mm/userfaultfd: fix release hang over concurrent GUP [1 file, +25/-26]
  c6fefcb7 sctp: detect and prevent references to a freed transport in sendmsg [3 files, +18/-9]
  233b9cef tracing: Do not add length to print format in synthetic events [1 file, +0/-1]
  f46260c3 dm-verity: fix prefetch-vs-suspend race [1 file, +8/-0]
  77e3fd88 of/irq: Fix device node refcount leakage in API of_irq_parse_one() [1 file, +27/-32]
  37ff581d of/irq: Fix device node refcount leakage in API of_irq_parse_raw() [1 file, +8/-0]
  eac3d341 of/irq: Fix device node refcount leakages in of_irq_count() [1 file, +3/-1]
  b4873284 of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() [1 file, +5/-1]
  46877332 of/irq: Fix device node refcount leakages in of_irq_init() [1 file, +3/-0]
  6176fa57 PCI: Fix reference leak in pci_alloc_child_bus() [1 file, +4/-1]
  41179756 arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists [1 file, +14/-1]
  02e1bcdf Bluetooth: hci_uart: Fix another race during initialization [2 files, +15/-6]
  fd1621f3 Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address [1 file, +3/-2]
  9e311495 Bluetooth: l2cap: Check encryption key size on incoming connection [1 file, +2/-1]
  549cbbd1 block: fix resource leak in blk_register_queue() error path [1 file, +2/-0]
  411b7005 writeback: fix false warning in inode_to_wb() [1 file, +1/-0]
  3d6102ae Revert "PCI: Avoid reset when disabled via sysfs" [1 file, +0/-4]
  600a099b Bluetooth: l2cap: Process valid commands in too long frame [1 file, +17/-1]
  f8530400 loop: properly send KOBJ_CHANGED uevent for disk device [1 file, +2/-2]
  2912683a loop: LOOP_SET_FD: send uevents for partitions [1 file, +2/-1]
  006b67ac mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() [1 file, +2/-2]
  c3b3987b mm: fix filemap_get_folios_contig returning batches of identical folios [1 file, +1/-0]
  23385f56 mm: fix apply_to_existing_page_range() [1 file, +2/-2]
  0874b629 ovl: don't allow datadir only [1 file, +5/-0]
  596cbe63 string: Add load_unaligned_zeropad() code path to sized_strscpy() [1 file, +10/-3]
  89baf6bb tracing: Fix filter string testing [1 file, +2/-2]
  f6ec5271 virtiofs: add filesystem context source name check [1 file, +3/-0]
  7e2449ee io_uring/net: fix accept multishot handling [1 file, +2/-0]
  8c8d0e80 cpufreq: Reference count policy in cpufreq_update_limits() [1 file, +8/-0]
  4f687721 Fix mmu notifiers for range-based invalidates [1 file, +12/-10]
  202bca49 xdp: Reset bpf_redirect_info before running a xdp's BPF prog. [1 file, +8/-1]

Changes in 6.6.88
	selftests/futex: futex_waitv wouldblock test should fail
	drm/i915/mocs: use to_gt() instead of direct &i915->gt
	drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
	drm/i915/dg2: wait for HuC load completion before running selftests
	drm/i915: Disable RPG during live selftest
	ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
	objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
	tipc: fix memory leak in tipc_link_xmit
	codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
	net: tls: explicitly disallow disconnect
	octeontx2-pf: qos: fix VF root node parent queue index
	rtnl: add helper to check if rtnl group has listeners
	rtnl: add helper to check if a notification is needed
	net/sched: cls_api: conditional notification of events
	tc: Ensure we have enough buffer space when sending filter netlink notifications
	net: ethtool: Don't call .cleanup_data when prepare_data fails
	drm/tests: modeset: Fix drm_display_mode memory leak
	drm/tests: helpers: Add atomic helpers
	drm/tests: Add helper to create mock plane
	drm/tests: Add helper to create mock crtc
	drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
	drm/tests: helpers: Fix compiler warning
	drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
	drm/tests: cmdline: Fix drm_display_mode memory leak
	drm/tests: modes: Fix drm_display_mode memory leak
	drm/tests: probe-helper: Fix drm_display_mode memory leak
	net: libwx: handle page_pool_dev_alloc_pages error
	ata: sata_sx4: Add error handling in pdc20621_i2c_read()
	drm/i915/huc: Fix fence not released on early probe errors
	nvmet-fcloop: swap list_add_tail arguments
	net_sched: sch_sfq: use a temporary work area for validating configuration
	net_sched: sch_sfq: move the limit validation
	ipv6: Align behavior across nexthops during path selection
	net: ppp: Add bound checking for skb data on ppp_sync_txmung
	nft_set_pipapo: fix incorrect avx2 match of 5th field octet
	iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
	fs: consistently deref the files table with rcu_dereference_raw()
	umount: Allow superblock owners to force umount
	pm: cpupower: bench: Prevent NULL dereference on malloc failure
	x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
	x86/ia32: Leave NULL selector values 0~3 unchanged
	x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
	perf: arm_pmu: Don't disable counter in armpmu_add()
	arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
	xen/mcelog: Add __nonstring annotations for unterminated strings
	zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault
	ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
	HID: pidff: Convert infinite length from Linux API to PID standard
	HID: pidff: Do not send effect envelope if it's empty
	HID: pidff: Add MISSING_DELAY quirk and its detection
	HID: pidff: Add MISSING_PBO quirk and its detection
	HID: pidff: Add PERMISSIVE_CONTROL quirk
	HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
	HID: pidff: Add FIX_WHEEL_DIRECTION quirk
	HID: Add hid-universal-pidff driver and supported device ids
	HID: pidff: Add PERIODIC_SINE_ONLY quirk
	HID: pidff: Fix null pointer dereference in pidff_find_fields
	ALSA: hda: intel: Fix Optimus when GPU has no sound
	ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
	ASoC: fsl_audmix: register card device depends on 'dais' property
	media: uvcvideo: Add quirk for Actions UVC05
	mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
	ALSA: usb-audio: Fix CME quirk for UF series keyboards
	ASoC: amd: Add DMI quirk for ACP6X mic support
	ASoC: amd: yc: update quirk data for new Lenovo model
	wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
	f2fs: don't retry IO for corrupted data scenario
	scsi: target: spc: Fix RSOC parameter data header size
	net: usb: asix_devices: add FiberGecko DeviceID
	page_pool: avoid infinite loop to schedule delayed worker
	jfs: Fix uninit-value access of imap allocated in the diMount() function
	fs/jfs: cast inactags to s64 to prevent potential overflow
	fs/jfs: Prevent integer overflow in AG size calculation
	jfs: Prevent copying of nlink with value 0 from disk inode
	jfs: add sanity check for agwidth in dbMount
	ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
	net: sfp: add quirk for 2.5G OEM BX SFP
	wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
	f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
	ahci: add PCI ID for Marvell 88SE9215 SATA Controller
	ext4: protect ext4_release_dquot against freezing
	Revert "f2fs: rebuild nat_bits during umount"
	ext4: ignore xattrs past end
	cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
	scsi: st: Fix array overflow in st_setup()
	wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
	net: vlan: don't propagate flags on open
	tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
	Bluetooth: hci_uart: fix race during initialization
	Bluetooth: qca: simplify WCN399x NVM loading
	drm: allow encoder mode_set even when connectors change for crtc
	drm/amd/display: Update Cursor request mode to the beginning prefetch always
	drm/amd/display: add workaround flag to link to force FFE preset
	drm: panel-orientation-quirks: Add support for AYANEO 2S
	drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
	drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
	drm: panel-orientation-quirks: Add new quirk for GPD Win 2
	drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
	drm/bridge: panel: forbid initializing a panel with unknown connector type
	drivers: base: devres: Allow to release group on device release
	drm/amdkfd: clamp queue size to minimum
	drm/amdkfd: Fix mode1 reset crash issue
	drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
	drm/amdkfd: debugfs hang_hws skip GPU with MES
	drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
	drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
	drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
	PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
	drm/amdgpu: grab an additional reference on the gang fence v2
	fbdev: omapfb: Add 'plane' value check
	tracing: probe-events: Add comments about entry data storing code
	ktest: Fix Test Failures Due to Missing LOG_FILE Directories
	tpm, tpm_tis: Workaround failed command reception on Infineon devices
	pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
	pwm: rcar: Improve register calculation
	pwm: fsl-ftm: Handle clk_get_rate() returning 0
	bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
	ext4: don't treat fhandle lookup of ea_inode as FS corruption
	dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
	media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization
	media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
	media: i2c: adv748x: Fix test pattern selection mask
	media: venus: hfi: add a check to handle OOB in sfr region
	media: venus: hfi: add check to handle incorrect queue size
	media: vim2m: print device name after registering device
	media: siano: Fix error handling in smsdvb_module_init()
	xenfs/xensyms: respect hypervisor's "next" indication
	arm64: cputype: Add MIDR_CORTEX_A76AE
	arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
	arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
	arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
	KVM: arm64: Tear down vGIC on failed vCPU creation
	spi: cadence-qspi: Fix probe on AM62A LP SK
	mtd: rawnand: brcmnand: fix PM resume warning
	tpm, tpm_tis: Fix timeout handling when waiting for TPM status
	media: streamzap: prevent processing IR data on URB failure
	media: visl: Fix ERANGE error when setting enum controls
	media: platform: stm32: Add check for clk_enable()
	media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
	media: i2c: ccs: Set the device's runtime PM status correctly in remove
	media: i2c: ccs: Set the device's runtime PM status correctly in probe
	media: i2c: ov7251: Set enable GPIO low in probe
	media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
	media: venus: hfi_parser: add check to avoid out of bound access
	media: venus: hfi_parser: refactor hfi packet parsing logic
	media: i2c: imx219: Rectify runtime PM handling in probe and remove
	mptcp: sockopt: fix getting IPV6_V6ONLY
	mtd: Add check for devm_kcalloc()
	net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
	mtd: Replace kcalloc() with devm_kcalloc()
	clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
	wifi: mt76: Add check for devm_kstrdup()
	wifi: mac80211: fix integer overflow in hwmp_route_info_get()
	io_uring/kbuf: reject zero sized provided buffers
	ASoC: q6apm: add q6apm_get_hw_pointer helper
	ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
	ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
	ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
	bus: mhi: host: Fix race between unprepare and queue_buf
	ext4: fix off-by-one error in do_split
	f2fs: fix to avoid atomicity corruption of atomic file
	vdpa/mlx5: Fix oversized null mkey longer than 32bit
	udf: Fix inode_getblk() return value
	tpm: do not start chip while suspended
	soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
	smb311 client: fix missing tcon check when mounting with linux/posix extensions
	i3c: master: svc: Use readsb helper for reading MDB
	i3c: Add NULL pointer check in i3c_master_queue_ibi()
	jbd2: remove wrong sb->s_sequence check
	leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
	leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
	mfd: ene-kb3930: Fix a potential NULL pointer dereference
	mailbox: tegra-hsp: Define dimensioning masks in SoC data
	locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
	lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
	mptcp: fix NULL pointer in can_accept_new_subflow
	mptcp: only inc MPJoinAckHMacFailure for HMAC failures
	mtd: inftlcore: Add error check for inftl_read_oob()
	mtd: rawnand: Add status chack in r852_ready()
	arm64: mm: Correct the update of max_pfn
	arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
	backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
	btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers
	btrfs: zoned: fix zone activation with missing devices
	btrfs: zoned: fix zone finishing with missing devices
	iommufd: Fix uninitialized rc in iommufd_access_rw()
	sparc/mm: disable preemption in lazy mmu mode
	sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
	mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
	mm: make page_mapped_in_vma() hugetlb walk aware
	mm: fix lazy mmu docs and usage
	mm/mremap: correctly handle partial mremap() of VMA starting at 0
	mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
	mm/userfaultfd: fix release hang over concurrent GUP
	mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
	mm/hugetlb: move hugetlb_sysctl_init() to the __init section
	sctp: detect and prevent references to a freed transport in sendmsg
	x86/xen: fix balloon target initialization for PVH dom0
	tracing: Do not add length to print format in synthetic events
	thermal/drivers/rockchip: Add missing rk3328 mapping entry
	cifs: avoid NULL pointer dereference in dbg call
	cifs: fix integer overflow in match_server()
	cifs: Ensure that all non-client-specific reparse points are processed by the server
	clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
	clk: qcom: gdsc: Release pm subdomains in reverse add order
	clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
	clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
	crypto: ccp - Fix check for the primary ASP device
	dm-ebs: fix prefetch-vs-suspend race
	dm-integrity: set ti->error on memory allocation failure
	dm-verity: fix prefetch-vs-suspend race
	dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
	dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
	ftrace: Add cond_resched() to ftrace_graph_set_hash()
	gpio: tegra186: fix resource handling in ACPI probe path
	gpio: zynq: Fix wakeup source leaks on device unbind
	gve: handle overflow when reporting TX consumed descriptors
	KVM: x86: Explicitly zero-initialize on-stack CPUID unions
	KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
	ntb: use 64-bit arithmetic for the MSI doorbell mask
	of/irq: Fix device node refcount leakage in API of_irq_parse_one()
	of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
	of/irq: Fix device node refcount leakages in of_irq_count()
	of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
	of/irq: Fix device node refcount leakages in of_irq_init()
	PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
	PCI: Fix reference leak in pci_alloc_child_bus()
	phy: freescale: imx8m-pcie: assert phy reset and perst in power off
	pinctrl: qcom: Clear latched interrupt status when changing IRQ type
	selftests: mptcp: close fd_in before returning in main_loop
	selftests: mptcp: fix incorrect fd checks in main_loop
	arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
	x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT
	ACPI: platform-profile: Fix CFI violation when accessing sysfs files
	iommufd: Fail replace if device has not been attached
	x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
	media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
	Bluetooth: hci_uart: Fix another race during initialization
	HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
	scsi: hisi_sas: Enable force phy when SATA disk directly connected
	wifi: at76c50x: fix use after free access in at76_disconnect
	wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
	wifi: mac80211: Purge vif txq in ieee80211_do_stop()
	wifi: wl1251: fix memory leak in wl1251_tx_work
	scsi: iscsi: Fix missing scsi_host_put() in error path
	md/raid10: fix missing discard IO accounting
	md/md-bitmap: fix stats collection for external bitmaps
	ASoC: dwc: always enable/disable i2s irqs
	ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
	ovl: remove unused forward declaration
	RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
	RDMA/hns: Fix wrong maximum DMA segment size
	ASoC: cs42l43: Reset clamp override on jack removal
	RDMA/core: Silence oversized kvmalloc() warning
	Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
	Bluetooth: btrtl: Prevent potential NULL dereference
	Bluetooth: l2cap: Check encryption key size on incoming connection
	Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
	igc: fix PTM cycle trigger logic
	igc: increase wait time before retrying PTM
	igc: move ktime snapshot into PTM retry loop
	igc: handle the IGC_PTP_ENABLED flag correctly
	igc: cleanup PTP module if probe fails
	igc: add lock preventing multiple simultaneous PTM transactions
	test suite: use %zu to print size_t
	pds_core: fix memory leak in pdsc_debugfs_add_qcq()
	net: mctp: Set SOCK_RCU_FREE
	block: fix resource leak in blk_register_queue() error path
	net: openvswitch: fix nested key length validation in the set() action
	net: ngbe: fix memory leak in ngbe_probe() error path
	net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np
	net: ethernet: ti: am65-cpsw: fix port_np reference counting
	ata: libata-sata: Save all fields from sense data descriptor
	cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
	netlink: specs: rt-link: add an attr layer around alt-ifname
	netlink: specs: rt-link: adjust mctp attribute naming
	net: b53: enable BPDU reception for management port
	net: bridge: switchdev: do not notify new brentries as changed
	net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
	net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
	net: dsa: clean up FDB, MDB, VLAN entries on unbind
	net: dsa: free routing table on probe failure
	net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
	ptp: ocp: fix start time alignment in ptp_ocp_signal_set
	net: ti: icss-iep: Add pwidth configuration for perout signal
	net: ti: icss-iep: Add phase offset configuration for perout signal
	net: ti: icss-iep: Fix possible NULL pointer dereference for perout request
	net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps
	net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
	riscv: Properly export reserved regions in /proc/iomem
	kunit: qemu_configs: SH: Respect kunit cmdline
	riscv: KGDB: Do not inline arch_kgdb_breakpoint()
	riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
	cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
	writeback: fix false warning in inode_to_wb()
	Revert "PCI: Avoid reset when disabled via sysfs"
	ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
	ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
	ASoC: qcom: Fix sc7280 lpass potential buffer overflow
	asus-laptop: Fix an uninitialized variable
	nfs: add missing selections of CONFIG_CRC32
	nfsd: decrease sc_count directly if fail to queue dl_recall
	i2c: atr: Fix wrong include
	ftrace: fix incorrect hash size in register_ftrace_direct()
	Bluetooth: l2cap: Process valid commands in too long frame
	Bluetooth: vhci: Avoid needless snprintf() calls
	btrfs: correctly escape subvol in btrfs_show_options()
	crypto: caam/qi - Fix drv_ctx refcount bug
	hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
	i2c: cros-ec-tunnel: defer probe if parent EC is not present
	isofs: Prevent the use of too small fid
	loop: properly send KOBJ_CHANGED uevent for disk device
	loop: LOOP_SET_FD: send uevents for partitions
	mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
	mm: fix filemap_get_folios_contig returning batches of identical folios
	mm: fix apply_to_existing_page_range()
	ovl: don't allow datadir only
	ksmbd: Fix dangling pointer in krb_authenticate
	ksmbd: fix use-after-free in smb_break_all_levII_oplock()
	ksmbd: Prevent integer overflow in calculation of deadtime
	ksmbd: fix the warning from __kernel_write_iter
	Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free"
	Revert "smb: client: fix TCP timers deadlock after rmmod"
	riscv: Avoid fortify warning in syscall_get_arguments()
	selftests/mm: generate a temporary mountpoint for cgroup filesystem
	smb3 client: fix open hardlink on deferred close file error
	string: Add load_unaligned_zeropad() code path to sized_strscpy()
	tracing: Fix filter string testing
	virtiofs: add filesystem context source name check
	x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches
	x86/cpu/amd: Fix workaround for erratum 1054
	x86/boot/sev: Avoid shared GHCB page for early memory acceptance
	scsi: megaraid_sas: Block zero-length ATA VPD inquiry
	scsi: ufs: exynos: Ensure consistent phy reference counts
	RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
	perf/x86/intel: Allow to update user space GPRs from PEBS records
	perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
	perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
	perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
	drm/repaper: fix integer overflows in repeat functions
	drm/msm/a6xx: Fix stale rpmh votes from GPU
	drm/amd: Handle being compiled without SI or CIK support better
	drm/amd/pm: Prevent division by zero
	drm/amd/pm/powerplay: Prevent division by zero
	drm/amd/pm/smu11: Prevent division by zero
	drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
	drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
	drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
	drm/amdgpu/dma_buf: fix page_link check
	drm/nouveau: prime: fix ttm_bo_delayed_delete oops
	drm/sti: remove duplicate object names
	drm/i915/gvt: fix unterminated-string-initialization warning
	io_uring/net: fix accept multishot handling
	cpufreq: Reference count policy in cpufreq_update_limits()
	kbuild: Add '-fno-builtin-wcslen'
	md: fix mddev uaf while iterating all_mddevs list
	mptcp: sockopt: fix getting freebind & transparent
	selftests: mptcp: add mptcp_lib_wait_local_port_listen
	misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
	misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
	misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
	Fix mmu notifiers for range-based invalidates
	efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32
	x86/xen: move xen_reserve_extra_memory()
	x86/xen: fix memblock_reserve() usage on PVH
	x86/tdx: Fix arch_safe_halt() execution for TDX VMs
	x86/split_lock: Fix the delayed detection logic
	nvme-rdma: unquiesce admin_q before destroy it
	powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
	LoongArch: Eliminate superfluous get_numa_distances_cnt()
	usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
	usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
	btrfs: fix qgroup reserve leaks in cow_file_range
	wifi: rtw89: pci: add pre_deinit to be called after probe complete
	wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
	drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
	landlock: Add the errata interface
	nvmet-fc: Remove unused functions
	xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
	sign-file,extract-cert: move common SSL helper functions to a header
	sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
	sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
	MIPS: dec: Declare which_prom() as static
	MIPS: cevt-ds1287: Add missing ds1287.h include
	MIPS: ds1287: Match ds1287_set_base_clock() function types
	btrfs: fix the length of reserved qgroup to free
	drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled
	ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
	Linux 6.6.88

Change-Id: If6bf5aebb0b162c5227915245583270c84c3adc8
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>