Merge 6.1.143 into android14-6.1-lts

Changes in 6.1.143
	cifs: Correctly set SMB1 SessionKey field in Session Setup Request
	cifs: Fix cifs_query_path_info() for Windows NT servers
	NFSv4: Always set NLINK even if the server doesn't support it
	NFSv4.2: fix listxattr to return selinux security label
	mailbox: Not protect module_put with spin_lock_irqsave
	mfd: max14577: Fix wakeup source leaks on device unbind
	leds: multicolor: Fix intensity setting while SW blinking
	NFSv4: xattr handlers should check for absent nfs filehandles
	hwmon: (pmbus/max34440) Fix support for max34451
	ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension
	rust: module: place cleanup_module() in .exit.text section
	dmaengine: xilinx_dma: Set dma_device directions
	PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
	md/md-bitmap: fix dm-raid max_write_behind setting
	amd/amdkfd: fix a kfd_process ref leak
	bcache: fix NULL pointer in cache_set_flush()
	iio: pressure: zpa2326: Use aligned_s64 for the timestamp
	um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
	um: use proper care when taking mmap lock during segfault
	coresight: Only check bottom two claim bits
	usb: dwc2: also exit clock_gating when stopping udc while suspended
	iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
	usb: potential integer overflow in usbg_make_tpg()
	tty: serial: uartlite: register uart driver in init
	usb: common: usb-conn-gpio: use a unique name for usb connector device
	usb: Add checks for snprintf() calls in usb_alloc_dev()
	usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
	usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
	usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
	ALSA: hda: Ignore unsol events for cards being shut down
	ALSA: hda: Add new pci id for AMD GPU display HD audio controller
	ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
	ceph: fix possible integer overflow in ceph_zero_objects()
	ovl: Check for NULL d_inode() in ovl_dentry_upper()
	btrfs: handle csum tree error with rescue=ibadroots correctly
	drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
	Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
	fs/jfs: consolidate sanity checking in dbMount
	jfs: validate AG parameters in dbMount() to prevent crashes
	media: imx-jpeg: Remove unnecessary memset() after dma_alloc_coherent()
	media: imx-jpeg: Add a timeout mechanism for each frame
	media: imx-jpeg: Support to assign slot for encoder/decoder
	media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
	media: imx-jpeg: Reset slot data pointers when freed
	media: imx-jpeg: Cleanup after an allocation error
	ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe()
	ASoC: codec: wcd9335: Convert to GPIO descriptors
	ASoC: codecs: wcd9335: Fix missing free of regulator supplies
	f2fs: don't over-report free space or inodes in statvfs
	fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
	drivers: hv, hyperv_fb: Untangle and refactor Hyper-V panic notifiers
	Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages
	Drivers: hv: move panic report code from vmbus to hv early init code
	Drivers: hv: Change hv_free_hyperv_page() to take void * argument
	Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails
	Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary
	Drivers: hv: vmbus: Add utility function for querying ring size
	uio_hv_generic: Query the ringbuffer size for device
	uio_hv_generic: Align ring size to system page
	PCI: apple: Use helper function for_each_child_of_node_scoped()
	PCI: apple: Set only available ports up
	vgacon: switch vgacon_scrolldelta() and vgacon_restore_screen()
	vgacon: remove unneeded forward declarations
	tty: vt: make init parameter of consw::con_init() a bool
	tty: vt: sanitize arguments of consw::con_clear()
	tty: vt: make consw::con_switch() return a bool
	dummycon: Trigger redraw when switching consoles with deferred takeover
	af_unix: Don't call skb_get() for OOB skb.
	af_unix: Don't leave consecutive consumed OOB skbs.
	i2c: tiny-usb: disable zero-length read messages
	i2c: robotfuzz-osif: disable zero-length read messages
	ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
	s390/pkey: Prevent overflow in size calculation for memdup_user()
	atm: clip: prevent NULL deref in clip_push()
	ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
	attach_recursive_mnt(): do not lock the covering tree when sliding something under it
	libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
	wifi: mac80211: fix beacon interval calculation overflow
	af_unix: Don't set -ECONNRESET for consumed OOB skb.
	vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
	um: ubd: Add missing error check in start_io_thread()
	net: enetc: Correct endianness handling in _enetc_rd_reg64
	atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
	ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
	net: selftests: fix TCP packet checksum
	drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
	drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
	staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
	dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
	serial: imx: Restore original RXTL for console to fix data loss
	Bluetooth: L2CAP: Fix L2CAP MTU negotiation
	dm-raid: fix variable in journal device check
	btrfs: fix a race between renames and directory logging
	btrfs: update superblock's device bytes_used when dropping chunk
	HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
	HID: wacom: fix memory leak on kobject creation failure
	HID: wacom: fix memory leak on sysfs attribute creation failure
	HID: wacom: fix kobject reference count leak
	scsi: megaraid_sas: Fix invalid node index
	drm/etnaviv: Protect the scheduler's pending list with its lock
	drm/tegra: Assign plane type before registration
	drm/tegra: Fix a possible null pointer dereference
	drm/udl: Unregister device before cleaning up on disconnect
	drm/msm/gpu: Fix crash when throttling GPU immediately during boot
	drm/amdkfd: Fix race in GWS queue scheduling
	drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
	drm/bridge: cdns-dsi: Fix phy de-init and flag it so
	drm/bridge: cdns-dsi: Fix connecting to next bridge
	drm/bridge: cdns-dsi: Check return value when getting default PHY config
	drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
	drm/amd/display: Add null pointer check for get_first_active_display()
	drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
	drm/amdgpu: Add kicker device detection
	ksmbd: Use unsafe_memcpy() for ntlm_negotiate
	ksmbd: remove unsafe_memcpy use in session setup
	fs: omfs: Use flexible-array member in struct omfs_extent
	fbdev: hyperv_fb: Convert comma to semicolon
	eth: bnxt: fix one of the W=1 warnings about fortified memcpy()
	bnxt_en: Fix W=1 warning in bnxt_dcb.c from fortify memcpy()
	bnxt_en: Fix W=stringop-overflow warning in bnxt_dcb.c
	media: uvcvideo: Rollback non processed entities on error
	s390/entry: Fix last breaking event handling in case of stack corruption
	Kunit to check the longest symbol length
	x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
	Revert "ipv6: save dontfrag in cork"
	nvme: always punt polled uring_cmd end_io work to task_work
	io_uring/kbuf: account ring io_buffer_list memory
	firmware: arm_scmi: Add a common helper to check if a message is supported
	firmware: arm_scmi: Ensure that the message-id supports fastchannel
	arm64: Restrict pagetable teardown to avoid false warning
	ARM: 9354/1: ptrace: Use bitfield helpers
	Linux 6.1.143

Change-Id: I0a3849c163d09eb7e71c1fff320340f1d4e430e4
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>