merge-upstream/v6.12.70 from branch/tag: upstream/v6.12.70 into branch: cos-6.12

Changelog:
-------------------------------------------------------------

Andrew Cooper (1):
      x86/kfence: fix booting on 32bit non-PAE systems

Andrew Fasano (1):
      netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

Andrii Nakryiko (1):
      procfs: avoid fetching build ID while holding VMA lock

Andy Shevchenko (1):
      gpiolib-acpi: Update file references in the Documentation and MAINTAINERS

Arnd Bergmann (1):
      hwmon: (occ) Mark occ_init_attribute() as __printf

Baochen Qiang (1):
      wifi: mac80211: collect station statistics earlier when disconnect

Bert Karwatzki (1):
      Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"

Breno Leitao (5):
      spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer
      spi: tegra210-quad: Move curr_xfer read inside spinlock
      spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one
      spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
      spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer

Carlos Llamas (2):
      binder: fix BR_FROZEN_REPLY error log
      binderfs: fix ida_alloc_max() upper bound

Chaitanya Kulkarni (1):
      nvme-fc: release admin tagset if init fails

Chen Ni (1):
      net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi()

ChenXiaoSong (1):
      smb/client: fix memory leak in smb2_open_file()

Chenghao Duan (1):
      LoongArch: Enable exception fixup for specific ADE subcode

Chris Bainbridge (1):
      ASoC: amd: fix memory leak in acp3x pdm dma ops

Chris Chiu (1):
      HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list

Daniel Gomez (1):
      netfilter: replace -EEXIST with -EBUSY

Daniel Hodges (1):
      tipc: use kfree_sensitive() for session key material

Daniel Vogelbacher (1):
      ceph: fix oops due to invalid pointer for kfree() in parse_longname()

DaytonCL (1):
      HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL

Debarghya Kundu (1):
      gve: Fix stats report corruption on queue count change

Dennis Marttinen (1):
      HID: logitech: add HID++ support for Logitech MX Anywhere 3S

Devyn Liu (1):
      spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization

Dimitrios Katsaros (1):
      ASoC: tlv320adcx140: Propagate error codes during probe

Eric Dumazet (3):
      net: add skb_header_pointer_careful() helper
      net/sched: cls_u32: use skb_header_pointer_careful()
      macvlan: fix error recovery in macvlan_common_newlink()

Ethan Nelson-Moore (1):
      net: usb: sr9700: support devices with virtual driver CD

Felix Gu (1):
      spi: tegra: Fix a memory leak in tegra_slink_probe()

FengWei Shih (1):
      md: suspend array while updating raid_disks via sysfs

Filipe Manana (1):
      btrfs: fix reservation leak in some error paths when inserting inline extent

Gabor Juhos (1):
      pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state

Greg Kroah-Hartman (1):
      Linux 6.12.70

Hannes Reinecke (1):
      nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()

Hao Ge (1):
      mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single

Huacai Chen (1):
      LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED

Ilya Dryomov (1):
      rbd: check for EOD after exclusive lock is ensured to be held

Jacky Bai (1):
      pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset

Jacob Keller (1):
      drm/mgag200: fix mgag200_bmc_stop_scanout()

Jakub Kicinski (1):
      net: don't touch dev->stats in BPF redirect paths

Josh Poimboeuf (1):
      x86/vmware: Fix hypercall clobbers

Junrui Luo (2):
      dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
      dpaa2-switch: add bounds check for if_id in IRQ handler

Kairui Song (1):
      mm, shmem: prevent infinite loop on truncate race

Kang Chen (1):
      hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

Karthik Poosa (1):
      drm/xe/pm: Disable D3Cold for BMG only on specific platforms

Kaushlendra Kumar (3):
      platform/x86: intel_telemetry: Fix swapped arrays in PSS output
      regmap: maple: free entry on mas_store_gfp() failure
      platform/x86: intel_telemetry: Fix PSS event register mask

Kery Qi (1):
      ASoC: davinci-evm: Fix reference leak in davinci_evm_probe

Kwok Kin Ming (1):
      HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()

Lukas Gerlach (1):
      riscv: Sanitize syscall table indexing under speculation

Lukas Wunner (1):
      PCI/ERR: Ensure error recoverability at all times

Manivannan Sadhasivam (1):
      PCI: qcom: Remove ASPM L0s support for MSM8996 SoC

Marek Behún (1):
      net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module

Mario Limonciello (1):
      platform/x86: hp-bioscfg: Skip empty attribute names

Martin Hamilton (1):
      ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio

Matouš Lánský (1):
      ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55

Maurizio Lombardi (2):
      scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
      scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()

Max Yuan (1):
      gve: Correct ethtool rx_dropped calculation

Melissa Wen (1):
      drm/amd/display: fix wrong color value mapping on MCM shaper LUT

Ming Lei (1):
      ublk: fix deadlock when reading partition table

Miri Korenblit (2):
      wifi: mac80211: correctly check if CSA is active
      wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice

Moon Hee Lee (1):
      wifi: mac80211: ocb: skip rx_no_sta when interface is not joined

Paolo Abeni (1):
      net: gro: fix outer network offset

Perry Yuan (1):
      drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

Peter Åstrand (1):
      wifi: wlcore: ensure skb headroom before skb_push

Qu Wenruo (1):
      btrfs: reject new transactions if the fs is fully read-only

Radhi Bajahaw (1):
      ASoC: amd: yc: Fix microphone on ASUS M6500RE

Rafael J. Wysocki (1):
      platform/x86: toshiba_haps: Fix memory leaks in add/remove routines

Ricardo Neri (1):
      platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable

Rodrigo Lugathe da Conceição Alves (1):
      HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)

Rodrigo Vivi (1):
      drm/xe/pm: Also avoid missing outer rpm warning on system suspend

Ruslan Krupitsa (1):
      ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk

Russell King (Oracle) (4):
      net: phy: add phy_interface_weight()
      net: phy: add phy_interface_copy()
      net: sfp: pre-parse the module support
      net: sfp: convert sfp quirks to modify struct sfp_module_support

Sean Christopherson (1):
      KVM: Don't clobber irqfd routing type when deassigning irqfd

Sergey Senozhatsky (1):
      net: usb: r8152: fix resume reset deadlock

Sergey Shtylyov (1):
      ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update()

Shengjiu Wang (1):
      ASoC: simple-card-utils: Check device node before overwrite direction

Shigeru Yoshida (1):
      ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF

Shuicheng Lin (1):
      drm/xe/query: Fix topology query pointer advance

Siarhei Vishniakou (1):
      HID: playstation: Center initial joystick axes to prevent spurious events

Steven Rostedt (1):
      tracing: Fix ftrace event field alignments

Takashi Iwai (1):
      ALSA: aloop: Fix racy access at PCM trigger

Thomas Weissschuh (1):
      ARM: 9468/1: fix memset64() on big-endian

Tim Guttzeit (1):
      ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU

Todd Brandt (1):
      tools/power turbostat: fix GCC9 build regression

Veerendranath Jakkam (1):
      wifi: cfg80211: Fix bitrate calculation overflow for HE rates

Viacheslav Dubeyko (1):
      ceph: fix NULL pointer dereference in ceph_mds_auth_match()

Vishwaroop A (1):
      spi: tegra114: Preserve SPI mode bits in def_command1_reg

Werner Sembach (1):
      ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.

Wupeng Ma (1):
      ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free

Xu Yang (3):
      pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
      pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup
      pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains

YunJe Shin (1):
      nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

Zhang Lixu (2):
      HID: intel-ish-hid: Update ishtp bus match to support device ID table
      HID: intel-ish-hid: Reset enum_devices_done before enumeration

ZhangGuoDong (3):
      smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
      smb/server: fix refcount leak in smb2_open()
      smb/server: fix refcount leak in parse_durable_handle_context()

Zhiquan Li (1):
      KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures

Zilin Guan (3):
      net: liquidio: Initialize netdev pointer before queue setup
      net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
      net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

shechenglong (1):
      block,bfq: fix aux stat accumulation destination

BUG=b/483912992
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.12.70.

Change-Id: I3d24ab156e27640ca8f8ce0f95d775c9d77dc078
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/131662
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Robert Kolchmeyer <rkolchmeyer@google.com>
Reviewed-by: Kevin Berry <kpberry@google.com>