merge-upstream/v6.1.70 from branch/tag: upstream/v6.1.70 into branch: cos-6.1

Changelog:
-------------------------------------------------------------

Alex Lu (1):
      Bluetooth: Add more enc key size check

Alexander Atanasov (1):
      scsi: core: Always send batch on reset or error handling command

Alexis Lothoré (1):
      pinctrl: at91-pio4: use dedicated lock class for IRQ

Alper Ak (1):
      USB: serial: option: add Quectel EG912Y module support

Andrew Davis (1):
      ARM: dts: dra7: Fix DRA7 L3 NoC node register size

Andy Shevchenko (1):
      HID: i2c-hid: acpi: Unify ACPI ID tables format

Aric Cyr (1):
      Revert "drm/amd/display: Do not set DRR on pipe commit"

Arnd Bergmann (3):
      kasan: disable kasan_non_canonical_hook() for HW tags
      Bluetooth: hci_event: shut up a false-positive warning
      x86/xen: add CPU dependencies for 32-bit build

Chen-Yu Tsai (1):
      wifi: cfg80211: Add my certificate

Christoffer Sandberg (1):
      Input: soc_button_array - add mapping for airplane mode button

Clint Taylor (1):
      drm/i915/mtl: Add MTL for remapping CCS FBs

Clément Villeret (1):
      ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA

David Howells (5):
      afs: Fix the dynamic root's d_delete to always delete unused dentries
      afs: Fix dynamic root lookup DNS check
      keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
      afs: Fix overwriting of result of DNS query
      afs: Fix use-after-free due to get/remove race in volume tree

David Lechner (1):
      iio: triggered-buffer: prevent possible freeing of wrong buffer

Dinghao Liu (1):
      net/mlx5e: fix a potential double-free in fs_udp_create_groups

Edward Adam Davis (1):
      wifi: mac80211: check if the existing link config remains unchanged

Eric Dumazet (3):
      net: sched: ife: fix potential use-after-free
      net/rose: fix races in rose_kill_by_device()
      net: check dev->gso_max_size in gso_features_check()

Fabio Estevam (1):
      dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp

Fedor Pchelkin (1):
      net: 9p: avoid freeing uninit memory in p9pdu_vreadf

Frédéric Danis (1):
      Bluetooth: L2CAP: Send reject on command corrupted request

Geert Uytterhoeven (1):
      reset: Fix crash when freeing non-existent optional resets

Geliang Tang (1):
      selftests: mptcp: join: fix subflow_send_ack lookup

Greg Kroah-Hartman (1):
      Linux 6.1.70

Hamza Mahfooz (1):
      drm/amd/display: fix hw rotated modes when PSR-SU is enabled

Haoran Liu (1):
      Input: ipaq-micro-keys - add error handling for devm_kmemdup

Heiko Carstens (1):
      s390/vx: fix save/restore of fpu kernel context

Heiko Stuebner (1):
      RISC-V: Fix do_notify_resume / do_work_pending prototype

Herve Codina (1):
      lib/vsprintf: Fix %pfwf when current node refcount == 0

Hyunwoo Kim (1):
      Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg

JP Kobryn (1):
      9p: prevent read overrun in protocol dump tracepoint

Javier Carrasco (1):
      iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table

Jeremie Knuesel (1):
      ALSA: usb-audio: Increase delay in MOTU M quirk

Jerome Brunet (1):
      ASoC: hdmi-codec: fix missing report for jack initial status

Jiri Olsa (1):
      bpf: Fix prog_array_map_poke_run map poke update

Johannes Berg (5):
      wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock
      wifi: mac80211: mesh: check element parsing succeeded
      wifi: mac80211: mesh_plink: fix matches_local logic
      wifi: cfg80211: fix certs build to not depend on file order
      wifi: cfg80211: fix CQM for non-range use

Jose Ignacio Tornos Martinez (1):
      net: usb: ax88179_178a: avoid failed operations when device is disconnected

Kent Gibson (1):
      gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()

Konrad Dybcio (1):
      interconnect: qcom: sm8250: Enable sync_state

Konstantin Meskhidze (1):
      ubifs: fix possible dereference after free

Krister Johansen (1):
      fuse: share lookup state between submount and its parent

Kunwu Chan (1):
      ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init

Li Lingfeng (1):
      dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client

Liu Jian (1):
      net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()

Luca Coelho (1):
      drm/i915/mtl: limit second scaler vertical scaling in ver >= 14

Luiz Augusto von Dentz (1):
      Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent

Léo Lam (1):
      wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x)

Marc Zyngier (3):
      KVM: arm64: vgic: Simplify kvm_vgic_destroy()
      KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy()
      KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy

Mario Limonciello (1):
      HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[]

Mark Glover (1):
      USB: serial: ftdi_sio: update Actisense PIDs constant names

Martin K. Petersen (1):
      Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity"

Mauricio Faria de Oliveira (2):
      loop: do not enforce max_loop hard limit by (new) default
      loop: deprecate autoloading callback loop_probe()

Maurizio Lombardi (1):
      nvme-pci: fix sleeping function called from interrupt context

Mike Tipton (1):
      interconnect: Treat xlate() returning NULL node as an error

Mikulas Patocka (1):
      dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()

Ming Lei (1):
      ublk: move ublk_cancel_dev() out of ub->mutex

Moshe Shemesh (1):
      net/mlx5: Fix fw tracer first block check

Nam Cao (1):
      pinctrl: starfive: jh7100: ignore disabled device tree nodes

Naohiro Aota (1):
      btrfs: zoned: no longer count fresh BG region as zone unusable

Paulo Alcantara (4):
      smb: client: fix OOB in cifsd when receiving compounded resps
      smb: client: fix potential OOB in cifs_dump_detail()
      smb: client: fix OOB in SMB2_query_info_init()
      smb: client: fix OOB in smbCalcSize()

Quan Nguyen (1):
      i2c: aspeed: Handle the coalesced stop conditions with the start conditions.

Rahul Rameshbabu (2):
      net/mlx5e: Correct snprintf truncation handling for fw_version buffer
      net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors

Reinhard Speyerer (1):
      USB: serial: option: add Quectel RM500Q R13 firmware support

Ronald Wahl (1):
      net: ks8851: Fix TX stall caused by TX buffer overrun

Rouven Czerwinski (1):
      net: rfkill: gpio: set GPIO direction

SeongJae Park (1):
      mm/damon/core: make damon_start() waits until kdamond_fn() starts

Shay Drory (1):
      net/mlx5: Re-organize mlx5_cmd struct

Shengjiu Wang (1):
      ASoC: fsl_sai: Fix channel swap issue on i.MX8MP

Shifeng Li (2):
      net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
      net/mlx5e: Fix a race in command alloc flow

Shigeru Yoshida (1):
      net: Return error from sk_stream_wait_connect() if sk_wait_event() fails

Slark Xiao (1):
      USB: serial: option: add Foxconn T99W265 with new baseline

Steven Rostedt (Google) (1):
      tracing / synthetic: Disable events after testing in synth_event_gen_test_init()

Su Hui (1):
      iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw

Suman Ghosh (1):
      octeontx2-pf: Fix graceful exit during PFC configuration failure

Tariq Toukan (2):
      net/mlx5: Introduce and use opcode getter in command interface
      net/mlx5: Prevent high-rate FW commands from populating all slots

Tasos Sahanidis (1):
      usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3

Thomas Gleixner (1):
      x86/alternatives: Sync core before enabling interrupts

Tony Lindgren (1):
      bus: ti-sysc: Flush posted write only after srst_udelay

Ville Syrjälä (5):
      drm/i915: Relocate intel_atomic_setup_scalers()
      drm/i915: Fix intel_atomic_setup_scalers() plane_state handling
      drm/i915/dpt: Only do the POT stride remap when using DPT
      drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original
      drm/i915: Reject async flips with bigjoiner

Vlad Buslov (2):
      Revert "net/mlx5e: fix double free of encap_header in update funcs"
      Revert "net/mlx5e: fix double free of encap_header"

Vladimir Oltean (1):
      net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above

Wadim Egorov (1):
      iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()

Wei Yongjun (1):
      scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()

Xiao Yao (1):
      Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE

Yaxiong Tian (1):
      thunderbolt: Fix memory leak in margining_port_remove()

Ying Hsu (1):
      Bluetooth: Fix deadlock in vhci_send_frame

Yury Norov (1):
      net: mana: select PAGE_POOL

Zhipeng Lu (1):
      ethernet: atheros: fix a memleak in atl1e_setup_ring_resources

xiongxin (1):
      gpio: dwapb: mask/unmask IRQ when disable/enale it

BUG=b/318333420
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.1.70.

Change-Id: I1a6f627a9edfb262c0b4e626aaa5ae25f67a3a9d
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>