Merge 6.1.138 into android14-6.1-lts

Changes in 6.1.138
	Revert "rndis_host: Flag RNDIS modems as WWAN devices"
	ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
	drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
	EDAC/altera: Test the correct error reg offset
	EDAC/altera: Set DDR and SDMMC interrupt mask before registration
	i2c: imx-lpi2c: Fix clock count when probe defers
	arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
	parisc: Fix double SIGFPE crash
	perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
	amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
	irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
	mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
	wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
	dm-integrity: fix a warning on invalid table line
	dm: always update the array size in realloc_argv on success
	iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
	iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
	platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug
	ksmbd: fix use-after-free in kerberos authentication
	cpufreq: Avoid using inconsistent policy->min and policy->max
	cpufreq: Fix setting policy limits when frequency tables are used
	tracing: Fix oob write in trace_seq_to_buffer()
	xfs: fix error returns from xfs_bmapi_write
	xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
	xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
	xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
	xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
	xfs: validate recovered name buffers when recovering xattr items
	xfs: revert commit 44af6c7e
	xfs: match lock mode in xfs_buffered_write_iomap_begin()
	xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional
	xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset
	xfs: convert delayed extents to unwritten when zeroing post eof blocks
	xfs: allow symlinks with short remote targets
	xfs: make sure sb_fdblocks is non-negative
	xfs: fix freeing speculative preallocations for preallocated files
	xfs: allow unlinked symlinks and dirs with zero size
	xfs: restrict when we try to align cow fork delalloc to cowextsz hints
	KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
	dm-bufio: don't schedule in atomic context
	ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
	wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
	vxlan: vnifilter: Fix unlocked deletion of default FDB entry
	net/mlx5: E-Switch, Initialize MAC Address for Default GID
	net/mlx5: E-switch, Fix error handling for enabling roce
	net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
	net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
	net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
	net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
	net_sched: drr: Fix double list add in class with netem as child qdisc
	net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
	net_sched: ets: Fix double list add in class with netem as child qdisc
	net_sched: qfq: Fix double list add in class with netem as child qdisc
	ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
	net: dlink: Correct endianness handling of led_mode
	net: dsa: felix: fix broken taprio gate states after clock jump
	net: ipv6: fix UDPv6 GSO segmentation with NAT
	bnxt_en: Fix coredump logic to free allocated buffer
	bnxt_en: Fix out-of-bound memcpy() during ethtool -w
	bnxt_en: Fix ethtool -d byte order for 32-bit values
	nvme-tcp: fix premature queue removal and I/O failover
	net: lan743x: Fix memleak issue when GSO enabled
	net: fec: ERR007885 Workaround for conventional TX
	net: hns3: store rx VLAN tag offload state for VF
	net: hns3: fix an interrupt residual problem
	net: hns3: fixed debugfs tm_qset size
	net: hns3: defer calling ptp_clock_register()
	net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
	net: vertexcom: mse102x: Fix LEN_MASK
	net: vertexcom: mse102x: Add range check for CMD_RTS
	net: vertexcom: mse102x: Fix RX error handling
	md: move initialization and destruction of 'io_acct_set' to md.c
	PCI: imx6: Skip controller_id generation logic for i.MX7D
	sch_htb: make htb_qlen_notify() idempotent
	sch_drr: make drr_qlen_notify() idempotent
	sch_hfsc: make hfsc_qlen_notify() idempotent
	sch_qfq: make qfq_qlen_notify() idempotent
	sch_ets: make est_qlen_notify() idempotent
	Revert "x86/kexec: Allocate PGD for x86_64 transition page tables separately"
	firmware: arm_scmi: Balance device refcount when destroying devices
	firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
	ARM: dts: opos6ul: add ksz8081 phy properties
	net: phy: microchip: force IRQ polling mode for lan88xx
	Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
	irqchip/gic-v2m: Mark a few functions __init
	irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
	dm: fix copying after src array boundaries
	iommu/arm-smmu-v3: Use the new rb tree helpers
	iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
	drm/amd/display: phase2 enable mst hdcp multiple displays
	drm/amd/display: Clean up style problems in amdgpu_dm_hdcp.c
	drm/amd/display: Change HDCP update sequence for DM
	drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp
	drm/amd/display: Fix slab-use-after-free in hdcp
	ASoC: Use of_property_read_bool()
	ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties
	Linux 6.1.138

Change-Id: I8f925d0c86ef5afce8775e0a7d2a2ba4bf287427
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>