merge-upstream/v6.1.31 from branch/tag: upstream/v6.1.31 into branch: cos-6.1

Changelog:
-------------------------------------------------------------

Adam Stylinski (1):
      ALSA: hda/ca0132: add quirk for EVGA X299 DARK

Alan Stern (4):
      fbdev: udlfb: Fix endpoint check
      USB: core: Add routines for endpoint checks in old drivers
      USB: sisusbvga: Add endpoint checks
      media: radio-shark: Add endpoint checks

Alex Deucher (1):
      drm/radeon: reintroduce radeon_dp_work_func content

Alexander Stein (2):
      regulator: pca9450: Fix BUCK2 enable_mask
      ARM: dts: imx6qdl-mba6: Add missing pvcie-supply regulator

Amadeusz Sławiński (1):
      ASoC: Intel: avs: Access path components under lock

Anton Protopopov (1):
      bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps

Bin Li (1):
      ALSA: hda/realtek: Enable headset onLenovo M70/M90

Carlos Llamas (5):
      Revert "binder_alloc: add missing mmap_lock calls when using the VMA"
      Revert "android: binder: stop saving a pointer to the VMA"
      binder: add lockless binder_alloc_(set|get)_vma()
      binder: fix UAF caused by faulty buffer cleanup
      binder: fix UAF of alloc->vma in race with munmap()

Cezary Rojewski (2):
      ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
      ASoC: Intel: avs: Fix declaration of enum avs_channel_config

Christian Loehle (1):
      mmc: block: ensure error propagation for non-blk

Christophe JAILLET (2):
      forcedeth: Fix an error handling path in nv_probe()
      3c589_cs: Fix an error handling path in tc589_probe()

Daisuke Nojiri (1):
      power: supply: sbs-charger: Fix INHIBITED bit for Status reg

Dan Carpenter (3):
      coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
      xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
      platform/mellanox: mlxbf-pmc: fix sscanf() error checking

Dave Hansen (1):
      x86/mm: Avoid incomplete Global INVLPG flushes

Dave Jiang (1):
      cxl: Wait Memory_Info_Valid before access memory related info

David Arcari (1):
      platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain

David Epping (1):
      net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE

Erez Shitrit (1):
      net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs

Etienne Carriere (1):
      optee: fix uninited async notif value

Evan Quan (1):
      drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7

Finn Thain (1):
      m68k: Move signal frame following exception on 68020/030

Frank Li (1):
      dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type

Gavrilov Ilia (1):
      ipv6: Fix out-of-bounds access in ipv6_find_tlv()

Greg Kroah-Hartman (1):
      Linux 6.1.31

Gregory Oakes (1):
      watchdog: sp5100_tco: Immediately trigger upon starting.

Haibo Chen (1):
      mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works

Hans de Goede (13):
      platform/x86: hp-wmi: Fix cast to smaller integer type warning
      power: supply: axp288_fuel_gauge: Fix external_power_changed race
      power: supply: bq25890: Fix external_power_changed race
      power: supply: leds: Fix blink to LED on transition
      power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
      power: supply: bq27xxx: Fix I2C IRQ race on remove
      power: supply: bq27xxx: Fix poll_interval handling and races on remove
      power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status()
      power: supply: bq27xxx: Move bq27xxx_battery_update() down
      power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes
      power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize
      power: supply: bq25890: Call power_supply_changed() after updating input current or voltage
      power: supply: bq24190: Call power_supply_changed() after updating input current

Hao Ge (1):
      fs: fix undefined behavior in bit shift for SB_NOUSER

Hardik Garg (1):
      selftests/memfd: Fix unknown type name build failure

Helge Deller (6):
      parisc: Use num_present_cpus() in alternative patching code
      parisc: Handle kgdb breakpoints only in kernel context
      parisc: Fix flush_dcache_page() for usage from irq context
      parisc: Allow to reboot machine after system halt
      parisc: Enable LOCKDEP support
      parisc: Handle kprobes breakpoints only in kernel context

Horatiu Vultur (1):
      lan966x: Fix unloading/loading of the driver

Hugo Villeneuve (1):
      arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay

Jack Xiao (3):
      drm/amd/amdgpu: update mes11 api def
      drm/amdgpu/mes11: enable reg active poll
      drm/amd/amdgpu: limit one queue per gang

Jakub Kicinski (1):
      net/mlx5e: do as little as possible in napi poll when budget is 0

Jarkko Sakkinen (3):
      tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume
      tpm: Re-enable TPM chip boostrapping non-tpm_tis TPM drivers
      tpm: Prevent hwrng from activating during resume

Jiaxun Yang (2):
      irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
      irqchip/mips-gic: Use raw spinlock for gic_lock

Jocelyn Falempe (1):
      drm/mgag200: Fix gamma lut not initialized.

Jonatas Esteves (1):
      drm/amd/pm: Fix output of pp_od_clk_voltage

Josef Bacik (1):
      btrfs: use nofs when cleaning up aborted transactions

Kan Liang (1):
      perf/x86/uncore: Correct the number of CHAs on SPR

Kang Chen (1):
      power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe

Kees Cook (1):
      skbuff: Proactively round up to kmalloc bucket size

Kuniyuki Iwashima (1):
      udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().

Lino Sanfilippo (3):
      tpm, tpm_tis: Avoid cache incoherency in test for interrupts
      tpm, tpm_tis: Only handle supported interrupts
      tpm, tpm_tis: startup chip before testing for interrupts

Linyu Yuan (1):
      usb: dwc3: fix gadget mode suspend interrupt handler issue

Matthew Auld (1):
      drm: fix drmm_mutex_init()

Matthias Kaehlcke (1):
      ASoC: rt5682: Disable jack detection interrupt during suspend

Max Filippov (2):
      xtensa: fix signal delivery to FDPIC process
      xtensa: add __bswap{si,di}2 helpers

Maximilian Heyne (1):
      x86/pci/xen: populate MSI sysfs entries

Peter Collingbourne (1):
      arm64: Also reset KASAN tag if page is not PG_mte_tagged

Po-Hsu Lin (1):
      selftests: fib_tests: mute cleanup error message

Pratyush Yadav (1):
      net: fix skb leak in __skb_tstamp_tx()

Rahul Rameshbabu (1):
      net/mlx5e: Fix SQ wake logic in ptp napi_poll context

Ravulapati Vishnu Vardhan Rao (1):
      ASoC: lpass: Fix for KASAN use_after_free out of bounds

Roberto Sassu (1):
      ocfs2: Switch to security_inode_init_security()

Robin Chen (1):
      drm/amd/display: hpd rx irq not working with eDP interface

Roi Dayan (1):
      net/mlx5: Fix error message when failing to allocate device memory

Sen Chu (1):
      regulator: mt6359: add read check for PMIC MT6359

Shay Drory (4):
      net/mlx5: Handle pairing of E-switch via uplink un/load APIs
      net/mlx5: Collect command failures data only for known commands
      net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
      net/mlx5: Devcom, serialize devcom registration

Steffen Bätz (1):
      net: dsa: mv88e6xxx: Add RGMII delay to 88E6320

Steve French (1):
      cifs: mapchars mount option ignored

Steve Wahl (1):
      platform/x86: ISST: Remove 8 socket limit

Sudeep Holla (3):
      firmware: arm_ffa: Check if ffa_driver remove is present before executing
      firmware: arm_ffa: Fix FFA device names for logical partitions
      firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors

Sunil Goutham (1):
      octeontx2-pf: Fix TSOv6 offload

Taehee Yoo (1):
      net: fix stack overflow when LRO is disabled for virtual interfaces

Takashi Iwai (1):
      ALSA: hda: Fix unhandled register update during auto-suspend period

Tetsuo Handa (1):
      debugobjects: Don't wake up kswapd from fill_pool()

Trond Myklebust (1):
      SUNRPC: Don't change task->tk_status after the call to rpc_exit_task

Tudor Ambarus (1):
      net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize

Vernon Lovejoy (1):
      x86/show_trace_log_lvl: Ensure stack pointer is aligned, again

Vlad Buslov (2):
      net/mlx5e: Fix deadlock in tc route query code
      net/mlx5e: Use correct encap attribute during invalidation

Wen Gu (1):
      net/smc: Reset connection when trying to use SMCRv2 fails.

Will Deacon (1):
      bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields

Xin Long (1):
      sctp: fix an issue that plpmtu can never go to complete state

Yevgeny Kliteynik (1):
      net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE

Zev Weiss (1):
      gpio: mockup: Fix mode of debugfs files

Zhang Rui (1):
      x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms

BUG=b/285093431
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.1.31.

Change-Id: I7ddf822af424fa4454e98b5f8f00d53459a5d8a5
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>