merge-upstream/v6.1.136 from branch/tag: upstream/v6.1.136 into branch: main-R113-cos-6.1

Changelog:
-------------------------------------------------------------

Adam Xue (1):
      USB: serial: option: add Sierra Wireless EM9291

Al Viro (1):
      qibfs: fix _another_ leak

Alexander Stein (1):
      usb: host: max3421-hcd: Add missing spi_device_id table

Alexander Usyskin (1):
      mei: me: add panther lake H DID

Alexei Starovoitov (1):
      bpf: Fix deadlock between rcu_tasks_trace and event_mutex.

Alexey Nepomnyashih (1):
      xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()

Alexis Lothoré (2):
      net: dsa: mv88e6xxx: pass directly chip structure to mv88e6xxx_phy_is_internal
      net: dsa: mv88e6xxx: add field to specify internal phys layout

Anastasia Kovaleva (1):
      scsi: core: Clear flags for scsi_cmnd that did not complete

Andy Shevchenko (2):
      usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
      usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield

Arnd Bergmann (2):
      dma/contiguous: avoid warning about unused size_bytes
      ntb: reduce stack usage in idt_scan_mws

Basavaraj Natikar (1):
      ntb_hw_amd: Add NTB PCI ID for new gen CPU

Breno Leitao (2):
      spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
      spi: tegra210-quad: add rate limiting and simplify timeout error message

Chenyuan Yang (2):
      pinctrl: renesas: rza2: Fix potential NULL pointer dereference
      usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

Claudiu Beznea (6):
      clk: renesas: rzg2l: Use u32 for flag and mux_flags
      clk: renesas: rzg2l: Add struct clk_hw_data
      clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
      clk: renesas: rzg2l: Refactor SD mux driver
      clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
      clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable

Cong Wang (2):
      net_sched: hfsc: Fix a UAF vulnerability in class handling
      net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too

Craig Hesling (1):
      USB: serial: simple: add OWON HDS200 series oscilloscope support

Daniel Wagner (2):
      nvmet-fc: take tgtport reference only once
      nvmet-fc: put ref when assoc->del_work is already scheduled

Dave Kleikamp (1):
      jfs: define xtree root and page independently

Dominique Martinet (1):
      9p/net: fix improper handling of bogus negative read/write replies

Edward Adam Davis (1):
      fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size

Evgeny Pimenov (1):
      ASoC: qcom: Fix sc7280 lpass potential buffer overflow

Fedor Pchelkin (3):
      usb: chipidea: ci_hdrc_imx: fix usbmisc handling
      usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
      usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling

Fernando Fernandez Mancera (1):
      x86/i8253: Call clockevent_i8253_disable() with interrupts disabled

Frode Isaksen (1):
      usb: dwc3: gadget: check that event count does not exceed event buffer length

Greg Kroah-Hartman (1):
      Linux 6.1.136

Gregory CLEMENT (1):
      MIPS: cm: Detect CM quirks from device tree

Halil Pasic (1):
      virtio_console: fix missing byte order handling for cols and rows

Hannes Reinecke (3):
      nvme: requeue namespace scan on missed AENs
      nvme: re-read ANA log page after ns scan completes
      nvme: fixup scan failure for non-ANA multipath controllers

Haoxiang Li (4):
      auxdisplay: hd44780: Fix an API misuse in hd44780.c
      mcb: fix a double free bug in chameleon_parse_gdd()
      s390/sclp: Add check for get_zeroed_page()
      s390/tty: Fix a potential memory leak bug

Heiko Stuebner (1):
      clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()

Henry Martin (2):
      cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
      cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()

Herbert Xu (1):
      crypto: null - Use spin lock instead of mutex

Herve Codina (1):
      backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

Huacai Chen (1):
      USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)

Ian Abbott (1):
      comedi: jr3_pci: Fix synchronous deletion of timer

Igor Pylypiv (1):
      scsi: pm80xx: Set phy_attached to zero when device is gone

Jakub Kicinski (1):
      net/sched: act_mirred: don't override retval if we already lost the skb

Jason Andryuk (1):
      xen: Change xen-acpi-processor dom0 dependency

Jean-Marc Eurin (1):
      ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls

John Stultz (1):
      sound/virtio: Fix cancel_sync warnings on uninitialized work_structs

Jonathan Cameron (1):
      iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check

Josh Poimboeuf (8):
      objtool: Silence more KCOV warnings
      objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
      objtool, lkdtm: Obfuscate the do_nothing() pointer
      objtool: Stop UNRET validation on UD2
      x86/bugs: Use SBPB in write_ibpb() if applicable
      x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
      x86/bugs: Don't fill RSB on context switch with eIBRS
      objtool: Silence more KCOV warnings, part 2

Justin Iurman (1):
      net: lwtunnel: disable BHs when required

Lad Prabhakar (1):
      clk: renesas: r9a07g043: Fix HP clock source for RZ/Five

Lukas Stockmann (1):
      rtc: pcf85063: do a SW reset if POR failed

Luo Gengkun (1):
      perf/x86: Fix non-sampling (counting) events on certain x86 platforms

Ma Ke (1):
      PCI: Fix reference leak in pci_register_host_bridge()

Marc Zyngier (1):
      cpufreq: cppc: Fix invalid return value in .get() callback

Marek Behún (7):
      net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
      net: dsa: mv88e6xxx: fix VTU methods for 6320 family
      crypto: atmel-sha204a - Set hwrng quality to lowest possible
      net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
      net: dsa: mv88e6xxx: enable PVT for 6321 switch
      net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
      net: dsa: mv88e6xxx: enable STU methods for 6320 family

Mario Limonciello (1):
      ACPI: EC: Set ec_no_wakeup for Lenovo Go S

Mark Brown (1):
      selftests/mm: generate a temporary mountpoint for cgroup filesystem

Meir Elisha (1):
      md/raid1: Add check for missing source disk in process_checks()

Miao Li (2):
      usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
      usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive

Michael Ehrenreich (1):
      USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe

Michal Pecio (1):
      usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running

Mika Westerberg (1):
      thunderbolt: Scan retimers after device router has been enumerated

Mike Looijmans (1):
      usb: dwc3: xilinx: Prevent spike in reset signal

Ming Lei (1):
      selftests: ublk: fix test_stripe_04

Ming Wang (1):
      LoongArch: Return NULL from huge_pte_offset() for invalid PMD

Mostafa Saleh (1):
      ubsan: Fix panic from test_ubsan_out_of_bounds

Ojaswin Mujoo (1):
      ext4: make block validity check resistent to sb bh corruption

Oleg Nesterov (1):
      sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP

Oleksij Rempel (1):
      net: selftests: initialize TCP header and skb payload with zero

Oliver Neukum (6):
      USB: storage: quirk for ADATA Portable HDD CH94
      USB: VLI disk crashes if LPM is used
      USB: wdm: handle IO errors in wdm_wwan_port_start
      USB: wdm: close race between wdm_open and wdm_wwan_port_stop
      USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
      USB: wdm: add annotation

Pali Rohár (1):
      PCI: Assign PCI domain IDs by ida_alloc()

Peter Griffin (1):
      scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()

Petr Tesarik (1):
      LoongArch: Remove a bogus reference to ZONE_DMA

Ping-Ke Shih (2):
      wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
      wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb

Qingfang Deng (1):
      net: phy: leds: fix memory leak

Qiuxu Zhuo (1):
      selftests/mincore: Allow read-ahead pages to reach the end of the file

Qu Wenruo (1):
      btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()

Ralph Siemsen (1):
      usb: cdns3: Fix deadlock when using NCM gadget

Rengarajan S (2):
      misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
      misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack

Richard Zhu (3):
      phy: freescale: imx8m-pcie: Add i.MX8MP PCIe PHY support
      phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
      phy: freescale: imx8m-pcie: Add one missing error return

Rob Herring (1):
      PCI: Fix use-after-free in pci_bus_release_domain_nr()

Rob Herring (Arm) (1):
      of: resolver: Simplify of_resolve_phandles() using __free()

Roman Li (2):
      drm/amd/display: Fix gpu reset in multidisplay config
      drm/amd/display: Force full update in gpu reset

Russell King (Oracle) (2):
      net: dsa: add support for mac_prepare() and mac_finish() calls
      net: dsa: mv88e6xxx: move link forcing to mac_prepare/mac_finish

Ryo Takakura (1):
      serial: sifive: lock port in startup()/shutdown() callbacks

Sean Christopherson (4):
      iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
      KVM: SVM: Allocate IR data using atomic allocation
      KVM: x86: Explicitly treat routing entry type changes as changes
      KVM: x86: Reset IRTE to host control if *new* route isn't postable

Sebastian Andrzej Siewior (1):
      xdp: Reset bpf_redirect_info before running a xdp's BPF prog.

Sergey Shtylyov (1):
      of: module: add buffer overflow check in of_modalias()

Sergiu Cuciurean (1):
      iio: adc: ad7768-1: Fix conversion result sign

Srinivas Kandagatla (2):
      ASoC: qcom: q6dsp: add support to more display ports
      ASoC: qcom: q6afe-dai: fix Display Port Playback stream name

Stefan Eichenberger (1):
      phy: freescale: imx8m-pcie: assert phy reset and perst in power off

Stephan Gerhold (1):
      serial: msm: Configure correct working mode before starting earlycon

Steven Rostedt (2):
      tracing: Add __print_dynamic_array() helper
      tracing: Verify event formats that have "%*p.."

Steven Rostedt (Google) (4):
      tracing: Add __cpumask to denote a trace event field that is a cpumask_t
      tracing: Fix cpumask() example typo
      tracing: Add __string_len() example
      tracing: Remove pointer (asterisk) and brackets from cpumask_t field

Tamura Dai (1):
      spi: spi-imx: Add check for spi_imx_setupxfer()

Thomas Bogendoerfer (1):
      MIPS: cm: Fix warning if MIPS_CM is disabled

Thomas Weißschuh (1):
      KVM: s390: Don't use %pK through tracepoints

Thorsten Leemhuis (1):
      module: sign with sha512 instead of sha1 by default

Théo Lebrun (1):
      usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func

Tiezhu Yang (1):
      LoongArch: Make regs_irqs_disabled() more clear

Tung Nguyen (1):
      tipc: fix NULL pointer dereference in tipc_mon_reinit_self()

Uwe Kleine-König (2):
      auxdisplay: hd44780: Convert to platform remove callback returning void
      backlight: led_bl: Convert to platform remove callback returning void

Vinicius Costa Gomes (1):
      dmaengine: dmatest: Fix dmatest waiting less when interrupted

Vladimir Oltean (1):
      net: dsa: mv88e6xxx: don't dispose of Global2 IRQ mappings from mdiobus code

Xiaogang Chen (1):
      udmabuf: fix a buf size overflow issue during udmabuf creation

Xingui Yang (1):
      scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes

Yu-Chun Lin (1):
      parisc: PDT: Fix missing prototype warning

Yuli Wang (1):
      LoongArch: Select ARCH_USE_MEMTEST

Yunlong Xing (1):
      loop: aio inherit the ioprio of original request

Zijun Hu (1):
      of: resolver: Fix device node refcount leakage in of_resolve_phandles()

BUG=b/415241942
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.1.136.

Change-Id: I5f45a3b7035cbbd74155001f6b5ff87de4ea9fda
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>