merge-upstream/v6.1.60 from branch/tag: upstream/v6.1.60 into branch: cos-6.1

Changelog:
-------------------------------------------------------------

Aaron Conole (2):
      selftests: openvswitch: Catch cases where the tests are killed
      selftests: openvswitch: Add version check for pyroute2

Albert Huang (1):
      net/smc: fix smc clc failed issue when netdevice not in init_net

Alexander Stein (1):
      gpio: vf610: make irq_chip immutable

Alisa-Dariana Roman (1):
      iio: adc: ad7192: Correct reference voltage

Anand Moon (2):
      usb: misc: onboard_usb_hub: add Genesys Logic GL852G hub support
      usb: misc: onboard_usb_hub: add Genesys Logic GL3523 hub support

Andy Shevchenko (1):
      Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"

Arkadiusz Bokowy (1):
      Bluetooth: vhci: Fix race when opening vhci device

Armin Wolf (1):
      platform/surface: platform_profile: Propagate error if profile registration fails

Arnd Bergmann (2):
      Bluetooth: avoid memcmp() out of bounds warning
      serial: 8250: omap: convert to modern PM ops

Artem Borisov (1):
      ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV

Avri Altman (1):
      mmc: core: Capture correct oemid-bits for eMMC cards

Ben Greear (1):
      wifi: iwlwifi: Ensure ack flag is properly cleared.

Benjamin Berg (1):
      wifi: cfg80211: avoid leaking stack data into trace

Benoît Monin (1):
      USB: serial: option: add entry for Sierra EM9191 with new firmware

Bibek Kumar Patro (1):
      mtd: rawnand: qcom: Unmap the right resource upon probe failure

Bjorn Helgaas (1):
      ice: Remove redundant pci_enable_pcie_error_reporting()

Borislav Petkov (AMD) (1):
      x86/sev: Disable MMIO emulation from user mode

Chen-Yu Tsai (1):
      drm/mediatek: Correctly free sg_table in gem prime vmap

Chengfeng Ye (1):
      gpio: timberdale: Fix potential deadlock on &tgpio->lock

Christoph Paasch (1):
      netlink: Correct offload_xstats size

Chunhai Guo (1):
      fs-writeback: do not requeue a clean inode having skipped pages

Clément Léger (1):
      tracing: relax trace_event_eval_update() execution with cond_resched()

Dai Ngo (1):
      nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op

Damien Le Moal (2):
      ata: libata-core: Fix compilation warning in ata_dev_config_ncq()
      ata: libata-eh: Fix compilation warning in ata_eh_link_report()

Dan Carpenter (2):
      net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
      ASoC: pxa: fix a memory leak in probe()

Dan Clash (1):
      audit,io_uring: io_uring openat triggers audit reference count underflow

David Thompson (1):
      pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency

Dinghao Liu (1):
      s390/cio: fix a memleak in css_alloc_subchannel

Dong Chenchen (1):
      net: xfrm: skip policies marked as dead while reinserting policies

Dust Li (1):
      net/smc: return the right falback reason when prefix checks fail

Edward AD (1):
      Bluetooth: hci_sock: fix slab oob read in create_monitor_event

Eric Dumazet (6):
      xfrm: fix a data-race in xfrm_lookup_with_ifid()
      xfrm: fix a data-race in xfrm_gen_index()
      xfrm: interface: use DEV_STATS_INC()
      tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
      tun: prevent negative ifindex
      ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr

Fabio Porcedda (1):
      USB: serial: option: add Telit LE910C4-WWX 0x1035 composition

Filipe Manana (5):
      btrfs: prevent transaction block reserve underflow when starting transaction
      btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
      btrfs: error out when COWing block using a stale transaction
      btrfs: error when COWing block from a root that is being deleted
      btrfs: error out when reallocating block for defrag using a stale transaction

Florian Fainelli (1):
      net: phy: bcm7xxx: Add missing 16nm EPHY statistics

Florian Westphal (1):
      netfilter: nft_payload: fix wrong mac header matching

Francis Laniel (2):
      selftests/ftrace: Add new test case which checks non unique symbol
      tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols

Gavrilov Ilia (1):
      net: pktgen: Fix interface flags printing

Geert Uytterhoeven (3):
      neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
      mtd: physmap-core: Restore map_rom fallback
      serial: 8250: omap: Move uart_write() inside PM section

Geliang Tang (1):
      mptcp: avoid sending RST when closing the initial subflow

Greg Kroah-Hartman (1):
      Linux 6.1.60

Gustavo A. R. Silva (1):
      wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len

Haibo Chen (3):
      mmc: core: sdio: hold retuning if sdio in 1-bit mode
      gpio: vf610: set value before the direction to avoid a glitch
      gpio: vf610: mask the gpio irq in system suspend and support wakeup

Hangbin Liu (1):
      ipv4/fib: send notify when delete source address routes

Hannes Reinecke (1):
      net/tls: split tls_rx_reader_lock

Hans de Goede (4):
      HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon mouse
      platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e
      platform/x86: asus-wmi: Only map brightness codes when using asus-wmi backlight control
      platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events

Heiner Kallweit (1):
      i2c: mux: Avoid potential false error message in i2c_mux_add_adapter

Hyeonggon Yoo (1):
      lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default

Icenowy Zheng (1):
      usb: misc: onboard_usb_hub: add Genesys Logic GL850G hub support

Ilan Peer (1):
      wifi: cfg80211: Fix 6GHz scan configuration

Ilpo Järvinen (2):
      serial: Move uart_change_speed() earlier
      serial: Rename uart_change_speed() to uart_change_line_settings()

Jakub Kicinski (4):
      net: avoid UAF on deleted altname
      net: fix ifname in netlink ntf during netns move
      net: check for altname conflicts when changing netdev's netns
      net: move altnames together with the netdevice

Javier Carrasco (1):
      usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub

Jeff Layton (1):
      overlayfs: set ctime when setting mtime and atime

Jesse Brandeburg (2):
      ice: fix over-shifted variable
      ice: reset first in crash dump kernels

Jianbo Liu (1):
      net/mlx5e: Don't offload internal port if filter device is out device

Jim Mattson (1):
      KVM: x86: Mask LVTPC when handling a PMI

Jinjie Ruan (1):
      net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register()

Jiri Wiesner (1):
      bonding: Return pointer to data after pull on skb

Joerg Roedel (2):
      x86/sev: Check IOBM for IOIO exceptions from user-space
      x86/sev: Check for user-space IOIO pointing to kernel space

Johan Hovold (6):
      regmap: fix NULL deref on lookup
      ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
      ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors
      ASoC: codecs: wcd938x: drop bogus bind error handling
      ASoC: codecs: wcd938x: fix unbind tear down order
      ASoC: codecs: wcd938x: fix resource leaks on bind errors

Johannes Berg (2):
      wifi: cfg80211: use system_unbound_wq for wiphy work
      wifi: mac80211: work around Cisco AP 9115 VHT MPDU length

Josef Bacik (2):
      btrfs: initialize start_slot in btrfs_log_prealloc_extents
      btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c

Josua Mayer (1):
      net: rfkill: gpio: prevent value glitch during probe

José Expósito (1):
      HID: input: map battery system charging

Juntong Deng (1):
      selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error

Kai Uwe Broulik (1):
      drm: panel-orientation-quirks: Add quirk for One Mix 2S

Kailang Yang (1):
      ALSA: hda/realtek - Fixed ASUS platform headset Mic issue

Kees Cook (2):
      sky2: Make sure there is at least one frag_addr available
      Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name

Keith Busch (2):
      nvme: sanitize metadata bounce buffer for reads
      nvme-pci: add BOGUS_NID for Intel 0a54 device

Kenneth Feng (1):
      drm/amd/pm: add unique_id for gc 11.0.3

Konstantin Komarov (1):
      fs/ntfs3: fix deadlock in mark_as_free_ex

Krzysztof Kozlowski (2):
      nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
      dt-bindings: mmc: sdhci-msm: correct minimum number of clocks

Kuniyuki Iwashima (1):
      tcp: Fix listen() warning with v4-mapped-v6 address.

Lee, Chun-Yi (2):
      Bluetooth: hci_event: Ignore NULL link key
      Bluetooth: Reject connection with the device which has same BD_ADDR

Luiz Augusto von Dentz (3):
      Bluetooth: hci_event: Fix coding style
      Bluetooth: hci_core: Fix build warnings
      Bluetooth: hci_event: Fix using memcmp when comparing keys

Luka Guzenko (1):
      ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx

Lukas Wunner (1):
      serial: Reduce spinlocked portion of uart_rs485_config()

Ma Ke (3):
      net: ipv4: fix return value check in esp_remove_trailer
      net: ipv6: fix return value check in esp_remove_trailer
      HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event

Maher Sanalla (1):
      net/mlx5: Handle fw tracer change ownership event based on MTRC

Manish Chopra (1):
      qed: fix LL2 RX buffer allocation

Martin Kurbanov (1):
      mtd: spinand: micron: correct bitmask for ecc status

Martino Fontana (1):
      HID: nintendo: reinitialize USB Pro Controller after resuming from suspend

Masami Hiramatsu (Google) (3):
      fprobe: Pass entry_data to handlers
      fprobe: Add nr_maxactive to specify rethook_node pool size
      fprobe: Fix to ensure the number of active retprobes is not zero

Matthieu Baerts (2):
      selftests: mptcp: join: correctly check for no RST
      selftests: mptcp: join: no RST when rm subflow/addr

Matti Vaittinen (1):
      iio: adc: ad7192: Simplify using devm_regulator_get_enable()

Maurizio Lombardi (2):
      nvmet-auth: complete a request only after freeing the dhchap pointers
      nvme-rdma: do not try to stop unallocated queues

Maxim Levitsky (2):
      x86: KVM: SVM: add support for Invalid IPI Vector interception
      x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested()

Michal Schmidt (1):
      i40e: prevent crash on probe if hw registers have invalid values

Michał Mirosław (1):
      regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()"

Miquel Raynal (3):
      mtd: rawnand: pl353: Ensure program page operations are successful
      mtd: rawnand: marvell: Ensure program page operations are successful
      mtd: rawnand: arasan: Ensure program page operations are successful

Muhammad Husaini Zulkifli (4):
      igc: remove I226 Qbv BaseTime restriction
      igc: Remove reset adapter task for i226 during disable tsn config
      igc: Add qbv_config_change_errors counter
      igc: Add condition for qbv_config_change_errors counter

Neal Cardwell (1):
      tcp: fix excessive TLP and RACK timeouts from HZ rounding

Niklas Schnelle (1):
      s390/pci: fix iommu bitmap allocation

Nuno Sá (1):
      iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs

Olga Kornievskaia (1):
      NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server

Pablo Neira Ayuso (3):
      netfilter: nft_set_rbtree: .deactivate fails if element has expired
      netfilter: nf_tables: do not remove elements if set backend implements .abort
      netfilter: nf_tables: revert do not remove elements if set backend implements .abort

Pablo Sun (1):
      mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw

Paolo Abeni (4):
      tcp: check mptcp-level constraints for backlog coalescing
      mptcp: more conservative check for zero probes
      tcp: allow again tcp_disconnect() when threads are waiting
      tcp_bpf: properly release resources on error paths

Pedro Tammela (1):
      net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve

Peter Zijlstra (1):
      perf: Disallow mis-matched inherited group reads

Phil Sutter (1):
      selftests: netfilter: Run nft_audit.sh in its own netns

Puliang Lu (1):
      USB: serial: option: add Fibocom to DELL custom modem FM101R-GL

Rahul Rameshbabu (1):
      HID: multitouch: Add required quirk for Synaptics 0xcd7e device

Renan Guilherme Lebre Ramos (1):
      platform/x86: touchscreen_dmi: Add info for the Positivo C4128B

Rocky Liao (1):
      Bluetooth: btusb: add shutdown function for QCA6174

Sagi Grimberg (1):
      nvmet-tcp: Fix a possible UAF in queue intialization setup

Sean Christopherson (3):
      x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer
      KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2}
      KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously

Shay Drory (1):
      net/mlx5: E-switch, register event handler before arming the event

Shinas Rasheed (1):
      octeon_ep: update BQL sent bytes before ringing doorbell

Srinivas Pandruvada (1):
      platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency

Stephen Boyd (1):
      drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary device

Sunil V L (1):
      ACPI: irq: Fix incorrect return value in acpi_register_gsi()

Sven van Ashbrook (1):
      mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend

Tan Tee Min (1):
      igc: enable Qbv configuration for 2nd GCL

Tony Lindgren (6):
      serial: 8250: omap: Fix imprecise external abort for omap_8250_pm()
      serial: 8250_omap: Fix errors with no_console_suspend
      ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
      phy: mapphone-mdm6600: Fix runtime disable on probe
      phy: mapphone-mdm6600: Fix runtime PM for remove
      phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins

Trond Myklebust (2):
      pNFS: Fix a hang in nfs4_evict_inode()
      pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats

Tzung-Bi Shih (1):
      iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data()

Ville Syrjälä (1):
      drm/i915: Retry gtt fault when out of fence registers

Vinicius Costa Gomes (1):
      igc: Fix race condition in PTP tx code

Wen Gong (1):
      wifi: mac80211: allow transmitting EAPOL frames with tainted key

Xuewen Yan (1):
      cpufreq: schedutil: Update next_freq when cpufreq_limits change

Ying Hsu (1):
      Bluetooth: Avoid redundant authentication

Zeng Heng (1):
      fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()

Zhang Changzhong (1):
      xfrm6: fix inet6_dev refcount underflow problem

Zhen Lei (2):
      kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[]
      kallsyms: Add helper kallsyms_on_each_match_symbol()

Ziqi Zhao (1):
      fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e()

Ziyang Xuan (1):
      Bluetooth: Fix a refcnt underflow problem for hci_conn

Zygo Blaxell (1):
      btrfs: fix stripe length calculation for non-zoned data chunk allocation

BUG=b/308097839
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.1.60.

Change-Id: I78abdc815cc72d27d9773087c434a704245de6fb
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>