merge-upstream/v6.6.85 from branch/tag: upstream/v6.6.85 into branch: cos-6.6

Changelog:
-------------------------------------------------------------

Alexander Stein (1):
      arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply

Alexandre Cassen (1):
      xfrm: fix tunnel mode TX datapath in packet offload mode

Andreas Kemnade (1):
      i2c: omap: fix IRQ storms

Ard Biesheuvel (1):
      efi/libstub: Avoid physical address 0x0 when doing random allocation

Arkadiusz Bokowy (1):
      Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters

Arnd Bergmann (1):
      ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP

Arthur Mongodin (1):
      mptcp: Fix data stream corruption in the address announcement

Benjamin Berg (1):
      wifi: iwlwifi: mvm: ensure offloading TID queue exists

Biju Das (1):
      can: rcar_canfd: Fix page entries in the AFL list

Christian Eggers (2):
      regulator: dummy: force synchronous probing
      regulator: check that dummy regulator has been probed before using it

Cosmin Ratiu (1):
      xfrm_output: Force software GSO only in tunnel mode

Dan Carpenter (3):
      Bluetooth: Fix error code in chan_alloc_skb_cb()
      net: atm: fix use after free in lec_send()
      accel/qaic: Fix integer overflow in qaic_validate_req()

David Lechner (1):
      ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX

David Rosca (2):
      drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
      drm/amdgpu: Fix JPEG video caps max size for navi1x and raven

Dietmar Eggemann (1):
      Revert "sched/core: Reduce cost of sched_move_task when config autogroup"

E Shattow (1):
      riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions

Fuad Tabba (1):
      KVM: arm64: Calculate cptr_el2 traps on activating traps

Gavrilov Ilia (1):
      xsk: fix an integer overflow in xp_create_and_assign_umem()

Geert Uytterhoeven (1):
      ARM: shmobile: smp: Enforce shmobile_smp_* alignment

Greg Kroah-Hartman (1):
      Linux 6.6.85

Gu Bowen (1):
      mmc: atmel-mci: Add missing clk_disable_unprepare()

Guillaume Nault (1):
      Revert "gre: Fix IPv6 link-local address generation."

Haibo Chen (2):
      can: flexcan: only change CAN state when link up in system PM
      can: flexcan: disable transceiver during system PM

Jeffrey Hugo (1):
      accel/qaic: Fix possible data corruption in BOs > 2G

Joe Hattori (1):
      firmware: imx-scu: fix OF node leak in .probe()

Josef Bacik (1):
      btrfs: make sure that WRITTEN is set on all metadata blocks

Junxian Huang (4):
      RDMA/hns: Fix soft lockup during bt pages loop
      RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
      RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
      RDMA/hns: Fix wrong value of max_sge_rd

Justin Iurman (1):
      net: lwtunnel: fix recursion loops

Justin Klaassen (1):
      arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S

Kamal Dasu (1):
      mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops

Kashyap Desai (1):
      RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx

Kuniyuki Iwashima (2):
      ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
      ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().

Lin Ma (1):
      net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES

Marek Vasut (2):
      soc: imx8m: Remove global soc_uid
      soc: imx8m: Use devm_* to simplify probe failure handling

Mario Limonciello (1):
      drm/amd/display: Use HW lock mgr for PSR1 when only one eDP

Mark Rutland (7):
      KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
      KVM: arm64: Remove host FPSIMD saving for non-protected KVM
      KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
      KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
      KVM: arm64: Refactor exit handlers
      KVM: arm64: Mark some header functions as inline
      KVM: arm64: Eagerly switch ZCR_EL{1,2}

Martin Tsai (1):
      drm/amd/display: should support dmub hw lock on Replay

MaĆ­ra Canal (1):
      drm/v3d: Don't run jobs that have errors flagged in its fence

Miri Korenblit (1):
      wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8

Namjae Jeon (1):
      ksmbd: fix incorrect validation for num_aces field of smb_acl

Nikita Zhandarovich (1):
      drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

Peng Fan (1):
      soc: imx8m: Unregister cpufreq and soc dev in cleanup path

Phil Elwell (2):
      ARM: dts: bcm2711: PL011 UARTs are actually r1p5
      ARM: dts: bcm2711: Don't mark timer regs unconfigured

Qasim Ijaz (1):
      RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()

Quentin Schulz (1):
      arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou

Raphael S. Carvalho (1):
      mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT

Saranya R (1):
      soc: qcom: pdr: Fix the potential deadlock

Saravanan Vajravel (1):
      RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path

Sebastian Andrzej Siewior (1):
      netfilter: nft_counter: Use u64_stats_t for statistic.

Shravya KN (1):
      bnxt_en: Fix receive ring space parameters when XDP is active

Stefan Eichenberger (3):
      arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
      arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
      ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6

Sven Eckelmann (1):
      batman-adv: Ignore own maximum aggregation size during RX

Vincent Mailhol (1):
      can: ucan: fix out of bound read in strscpy() source

Yao Zi (1):
      arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1

Ye Bin (1):
      proc: fix UAF in proc_get_inode()

Zi Yan (1):
      mm/migrate: fix shmem xarray update during migration

qianyi liu (1):
      drm/sched: Fix fence reference count leak

BUG=b/407181655
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.6.85.

Change-Id: I92c1ebe55b701467ce23cea7b7322f36513d1426
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>