Merge 6.1.154 into android14-6.1-lts

Changes in 6.1.154
	ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
	wifi: mac80211: increase scan_ies_len for S1G
	wifi: mac80211: fix incorrect type for ret
	pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
	cgroup: split cgroup_destroy_wq into 3 workqueues
	btrfs: fix invalid extref key setup when replaying dentry
	um: virtio_uml: Fix use-after-free after put_device in probe
	dpaa2-switch: fix buffer pool seeding for control traffic
	qed: Don't collect too many protection override GRC elements
	mptcp: set remote_deny_join_id0 on SYN recv
	net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
	i40e: remove redundant memory barrier when cleaning Tx descs
	bonding: don't set oif to bond dev when getting NS target destination
	tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
	tls: make sure to abort the stream if headers are bogus
	Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
	net: liquidio: fix overflow in octeon_init_instr_queue()
	cnic: Fix use-after-free bugs in cnic_delete_task
	octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
	ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
	ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
	nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
	power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
	power: supply: bq27xxx: restrict no-battery detection to bq27000
	LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
	LoongArch: Check the return value when creating kobj
	iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
	btrfs: tree-checker: fix the incorrect inode ref size check
	ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
	ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
	mmc: mvsdio: Fix dma_unmap_sg() nents value
	KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
	rds: ib: Increment i_fastreg_wrs before bailing out
	selftests: mptcp: avoid spurious errors on TCP disconnect
	ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
	io_uring: backport io_should_terminate_tw()
	io_uring: include dying ring in task_work "should cancel" state
	ASoC: wm8940: Correct typo in control name
	ASoC: wm8974: Correct PLL rate rounding
	ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
	drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
	drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
	crypto: af_alg: Indent the loop in af_alg_sendmsg()
	crypto: af_alg - Set merge to zero early in af_alg_sendmsg
	smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
	mptcp: pm: nl: announce deny-join-id0 flag
	selftests: mptcp: userspace pm: validate deny-join-id0 flag
	phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning
	phy: Use device_get_match_data()
	phy: ti: omap-usb2: fix device leak at unbind
	xhci: dbc: decouple endpoint allocation from initialization
	xhci: dbc: Fix full DbC transfer ring after several reconnects
	mptcp: propagate shutdown to subflows when possible
	selftests: mptcp: connect: catch IO errors on listen side
	net: rfkill: gpio: add DT support
	net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
	ASoC: qcom: q6apm-lpass-dai: close graphs before opening a new one
	ASoC: q6apm-lpass-dai: close graph on prepare errors
	ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
	crypto: af_alg: Convert af_alg_sendpage() to use MSG_SPLICE_PAGES
	crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
	Linux 6.1.154

Change-Id: Ib151697f5310368e792f0fea0bdd2f73585769a3
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>