Merge tag 'android14-6.1.124_r00' into android14-6.1

This merges the android14-6.1.124_r00 tag into the android14-6.1 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* e280ed497fae Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
* 6a643e39f76e Revert "ipip,ip_tunnel,sit: Add FOU support for externally controlled ipip devices"
* 528ab9320029 Revert "ip_tunnel: annotate data-races around t->parms.link"
* 02dc81da43e5 Revert "ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()"
* 11a2f6348b9b Revert "ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()"
* 302342ed43ed Revert "ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()"
* 5713068b261d Revert "net: Fix netns for ip_tunnel_init_flow()"
* 50cda709eb9e Revert "usb: xhci: Limit Stop Endpoint retries"
* 0ab35d883a97 Revert "xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic"
*   4ff68760c1d4 Merge 6.1.124 into android14-6.1-lts
|\
| * c63962be84ef Linux 6.1.124
| * 677294e4da96 zram: check comp is non-NULL before calling comp_destroy
| * 91b493f15d65 mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
| * cbdb6a4c6a66 mptcp: fix recvbuffer adjust on sleeping rcvmsg
| * 09ba95321a26 mptcp: fix TCP options overflow.
| * bfb701192129 mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
| * a3f8ee15228c mm/readahead: fix large folio support in async readahead
| * 887890bbdbc2 dt-bindings: display: adi,adv7533: Drop single lane support
| * e64d0a11a277 drm: adv7511: Drop dsi single lane support
| * 7af63ef5fe4d net/sctp: Prevent autoclose integer overflow in sctp_association_init()
| * eef34c0151f7 sky2: Add device ID 11ab:4373 for Marvell 88E8075
| * 0310cbad163a pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
| * 346db03e9926 RDMA/uverbs: Prevent integer overflow issue
| * 9e431c67f31e kcov: mark in_softirq_really() as __always_inline
| * cff1de87ed14 ALSA: seq: oss: Fix races at processing SysEx messages
| * 12539ac4a671 ALSA hda/realtek: Add quirk for Framework F111:000C
| * 1f8da43e127c modpost: fix the missed iteration for the max bit in do_input()
| * 7635c2d787bb modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
| * b7350b18cb21 usb: xhci: Avoid queuing redundant Stop Endpoint commands
| * 1164026a4077 ARC: build: Try to guess GCC variant of cross compiler
| * 9336ec56cb11 irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
| * 028a68886ead Bluetooth: hci_core: Fix sleeping function called from invalid context
| * 31dc29b5d11d net: usb: qmi_wwan: add Telit FE910C04 compositions
| * ca2c565a7c06 ksmbd: retry iterate_dir in smb2_query_dir
| * 42de6037837b bpf: fix potential error return
| * ced1bd92971d sound: usb: format: don't warn that raw DSD is unsupported
| * 7881f1b3b924 sound: usb: enable DSD output for ddHiFi TC44C
| * 7815958273f3 ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
| * 1ea629e7bb2f btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
| * 465b18e1c518 drm/amdkfd: Correct the migration DMA map direction
| * c217d67b29f0 wifi: mac80211: wake the queues in case of failure in resume
| * 66376f1a73cb btrfs: fix use-after-free when COWing tree bock and tracing is enabled
| * 9caa20798090 btrfs: rename and export __btrfs_cow_block()
| * eba25e21dce7 ila: serialize calls to nf_register_net_hooks()
| * 5d336714db32 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
| * d91b4a9baa01 af_packet: fix vlan_get_tci() vs MSG_PEEK
| * 81d26fee2c7a net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
| * ad2ad4cd11af net: restrict SO_REUSEPORT to inet sockets
| * ac9cfef69565 net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
| * 32e1e748a85b RDMA/rtrs: Ensure 'ib_sge list' is accessible
| * b8ab9bd0c885 net: wwan: t7xx: Fix FSM command timeout issue
| * 274cb294fa04 net: mv643xx_eth: fix an OF node reference leak
| * 847c4daa21c7 eth: bcmsysport: fix call balance of priv->clk handling routines
| * 956f00d8701e ALSA: usb-audio: US16x08: Initialize array before use
| * 94dde4fd7ec9 net: llc: reset skb->transport_header
| * 607774a13764 netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
| * 3f1f094e0f5f drm/i915/dg1: Fix power gate sequence.
| * 78a110332ae2 netrom: check buffer length before accessing it
| * d4b3978fdf68 net: Fix netns for ip_tunnel_init_flow()
| * 9b8f85c4d594 ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
| * d6ff1c86117a ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
| * 5fb41d9ba9e9 ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
| * c3c53b16928e ip_tunnel: annotate data-races around t->parms.link
| * 19bbca7bc55b ipip,ip_tunnel,sit: Add FOU support for externally controlled ipip devices
| * de3f999bf8ae net: fix memory leak in tcp_conn_request()
| * 28f1e04d91f6 net: stmmac: restructure the error path of stmmac_probe_config_dt()
| * 51c8cfd00e09 net: stmmac: don't create a MDIO bus if unnecessary
| * 40b78dbdf58d net: stmmac: platform: provide devm_stmmac_probe_config_dt()
| * b46cff87746a RDMA/hns: Fix missing flush CQE for DWQE
| * 3f0a3e857d8a RDMA/hns: Fix warning storm caused by invalid input in IO path
| * 5a824c30df92 RDMA/hns: Fix mapping error of zero-hop WQE buffer
| * b32e9f4a7825 RDMA/hns: Remove unused parameters and variables
| * 8e16c8b48486 RDMA/hns: Refactor mtr find
| * ba4014276bfc net: dsa: microchip: Fix LAN937X set_ageing_time function
| * 9d00ab0e0d50 net: dsa: microchip: add ksz_rmw8() function
| * f7954e857540 net: dsa: microchip: Fix KSZ9477 set_ageing_time function
| * 24789601467c drm/bridge: adv7511_audio: Update Audio InfoFrame properly
| * 02c46a2d138d RDMA/bnxt_re: Fix the locking while accessing the QP table
| * 1dcaac7a61b8 RDMA/bnxt_re: Fix max_qp_wrs reported
| * c68c136652ed RDMA/bnxt_re: Fix reporting hw_ver in query_device
| * c50ff899af69 RDMA/bnxt_re: Add check for path mtu in modify_qp
| * cbc35242a97a RDMA/mlx5: Enforce same type port association for multiport RoCE
| * 6c6f477f6456 net: mctp: handle skb cleanup on sock_queue failures
| * 116b937eb4bb xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
| * ae1a08850a04 usb: xhci: Limit Stop Endpoint retries
| * 1ae96fb8d7b3 xhci: retry Stop Endpoint on buggy NEC controllers
| * 326147e4c267 thunderbolt: Don't display nvm_version unless upgrade supported
| * 616747731f81 thunderbolt: Add support for Intel Panther Lake-M/P
| * f26009a0d4a8 thunderbolt: Add support for Intel Lunar Lake
| * 631b1e09e213 tracing: Have process_string() also allow arrays
| * a40de0330af4 btrfs: fix use-after-free in btrfs_encoded_read_endio()
| * c79324d42fa4 selinux: ignore unknown extended permissions
| * 16fea758ade3 x86/hyperv: Fix hv tsc page based sched_clock for hibernation
* | 2e60b675e3ff ANDROID: GKI: add blk_mq_quiesce_queue_nowait to virtual_device build symbol list
* | 7d8965fde5f8 Revert "tracing: Constify string literal data member in struct trace_event_call"
* | 51d8dc4e9227 Merge 6.1.123 into android14-6.1-lts
|\|
| * 7dc732d24ff7 Linux 6.1.123
| * 1599e0fa15ef ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
| * acddb8762014 Revert "rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()"
| * 36775f42e039 nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
| * 459ef4a242b0 btrfs: sysfs: fix direct super block member reads
| * bb8e287f596b btrfs: avoid monopolizing a core when activating a swap file
| * 6abbbd8286b6 power: supply: gpio-charger: Fix set charge current limits
| * 990730ddbdbe i2c: microchip-core: fix "ghost" detections
| * b106ced61235 i2c: imx: add imx7d compatible string for applying erratum ERR007805
| * 906fb74685d9 i2c: microchip-core: actually use repeated sends
| * 623733136171 io_uring/sqpoll: fix sqpoll error handling races
| * 3d15f4c24495 tracing: Prevent bad count for tracing_cpumask_write
| * f2a16d2ba4a6 tracing: Constify string literal data member in struct trace_event_call
| * 581d8a5ac119 freezer, sched: Report frozen tasks as 'D' instead of 'R'
| * b0ce4e8fedbd sched/core: Report correct state for TASK_IDLE | TASK_FREEZABLE
| * da719022a474 pmdomain: core: Add missing put_device()
| * 10d40c46db96 ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
| * 8fb5edd2027b ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i
| * 4e8074bb33d1 bpf: Check validity of link->type in bpf_link_show_fdinfo()
| * db84cb4c8c56 net/mlx5e: Don't call cleanup on profile rollback failure
| * 7b93728274f7 MIPS: mipsregs: Set proper ISA level for virt extensions
| * b016bb8f415e MIPS: Probe toolchain support of -msym32
| * 53e049204d29 vmalloc: fix accounting with i915
| * 45883477b19e blk-mq: register cpuhp callback after hctx is added to xarray table
| * 9e323f856cf4 virtio-blk: don't keep queue frozen during system suspend
| * f61b2e5e7821 drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
| * ade7aeb0da22 scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
| * 47c629d393fb scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
| * ba3c90162b06 platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
| * 048abad5a8e4 regmap: Use correct format specifier for logging range errors
| * 2ea605f61e9a smb: server: Fix building with GCC 15
| * 385c4fdbffa6 ALSA: hda/conexant: fix Z60MR100 startup pop issue
| * edadc693bfcc scsi: megaraid_sas: Fix for a potential deadlock
| * 7aafb0c40088 scsi: qla1280: Fix hw revision numbering for ISP1020/1040
| * e53deb6f425b watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
| * 83f5ba098aac tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
| * 7357ad7d1fad stddef: make __struct_group() UAPI C++-friendly
| * 8b2282b50845 powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
| * 6ea15205d7e2 mtd: rawnand: fix double free in atmel_pmecc_create_user()
| * fdba6d5e4553 dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
| * f03e6bb31c83 dmaengine: apple-admac: Avoid accessing registers in probe
| * c2610aba67ed dmaengine: tegra: Return correct DMA status when paused
| * e1f1aa97183f dmaengine: dw: Select only supported masters for ACPI devices
| * 341be7bdc75c dmaengine: mv_xor: fix child node refcount handling in early exit
| * eb71df41669b phy: rockchip: naneng-combphy: fix phy reset
| * a19b50556332 phy: usb: Toggle the PHY power during init
| * 8c6ef358ba23 phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
| * 0f46864e9d5b phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
| * 5c23b6b47bd7 phy: core: Fix that API devm_phy_put() fails to release the phy
| * be2c737d4af2 phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
| * dff3974372f4 phy: core: Fix an OF node refcount leakage in _of_phy_get()
| * 138a5c773649 phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
| * aeace7d4c05e mtd: rawnand: arasan: Fix missing de-registration of NAND
| * b4b49cbd5b3e mtd: rawnand: arasan: Fix double assertion of chip-select
| * eabe5f73aafe mtd: diskonchip: Cast an operand to prevent potential overflow
| * 61ddaac44efa nfsd: restore callback functionality for NFSv4.0
| * 9a57119d1182 bpf: Check negative offsets in __bpf_skb_min_len()
| * be848bde4a7f tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
| * 2a572e308f67 tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
| * b480e57d1389 mm/vmstat: fix a W=1 clang compiler warning
| * 3876e3a1c31a media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
* | 7ec8f74da454 Merge 6.1.122 into android14-6.1-lts
|/
* 563edd786f0a Linux 6.1.122
* bd050bb5769c drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
* 71a7e2f5b667 io_uring/rw: avoid punting to io-wq directly
* 57cd0416d496 io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
* 72060434a14c io_uring/rw: split io_read() into a helper
* 400a2ae671fa epoll: Add synchronous wakeup support for ep_poll_callback
* 6c450489f9c8 udf: Fix directory iteration for longer tail extents
* 91542d131b41 ceph: validate snapdirname option length when mounting
* 28ca6f1d1913 of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
* 76db8a75f047 of: Fix error path in of_parse_phandle_with_args_map()
* 4fa2c639fc09 udmabuf: also check for F_SEAL_FUTURE_WRITE
* ef942d233643 nilfs2: prevent use of deleted inode
* 48d2fb14f9bf nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
* 4c300be8835c of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
* cd126daadfe2 of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
* 61f3036bc246 NFS/pnfs: Fix a live lock between recalled layouts and layoutget
* 534d59ab3801 io_uring: check if iowq is killed before queuing
* c034ce2668ae io_uring: Fix registered ring file refcount leak
* 48d07e3a18cd selftests/bpf: Use asm constraint "m" for LoongArch
* f3ff759ec636 tracing: Add "%s" check in test_event_printk()
* 5a03ebbe0983 tracing: Add missing helper functions in event pointer dereference check
* ce8d36310367 tracing: Fix test_event_printk() to process entire print argument
* 7ed4db315094 KVM: x86: Play nice with protected guests in complete_hypercall_exit()
* 718fe694a334 Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
* 0323e6b113ce btrfs: tree-checker: reject inline extent items with 0 ref count
* ac3b5366b9b7 zram: fix uninitialized ZRAM not releasing backing device
* b9ca6cf45ad2 zram: refuse to use zero sized block device as backing device
* 2d9a4ff1a538 sh: clk: Fix clk_enable() to return 0 on NULL clk
* a8a1a7949d88 hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
* 51f810827e6d hwmon: (tmp513) Fix Current Register value interpretation
* 8e58bf4ac248 hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers
* 11fa4e178e62 hwmon: (tmp513) Use SI constants from units.h
* 7df25973b659 hwmon: (tmp513) Simplify with dev_err_probe()
* d2aa3d50147e hwmon: (tmp513) Don't use "proxy" headers
* 65501a4fd84e drm/amdgpu: don't access invalid sched
* c7fe4305cd75 i915/guc: Accumulate active runtime on gt reset
* 7bfe589bbb5c i915/guc: Ensure busyness counter increases motonically
* 7966c6ed13ff i915/guc: Reset engine utilization buffer before registration
* 1e9307c9b5ad drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
* 69fbb01e8917 drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
* a3301461f375 thunderbolt: Improve redrive mode handling
* b540c716c87e USB: serial: option: add Telit FE910C04 rmnet compositions
* 12b2347df6aa USB: serial: option: add MediaTek T7XX compositions
* a81a361bd1bb USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
* 327401545310 USB: serial: option: add MeiG Smart SLM770A
* 1f76595c7a14 USB: serial: option: add TCL IK512 MBIM & ECM
* d7205a72aca2 hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
* ab765320c07e efivarfs: Fix error on non-existent file
* a72ff366d88b i2c: riic: Always round-up when calculating bus period
* ecc0e323dd89 chelsio/chtls: prevent potential integer overflow on 32bit
* 15b3121a6816 KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
* f1dec8bc31aa mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
* 26429dc63e28 net: mdiobus: fix an OF node reference leak
* 7134f6372c80 netfilter: ipset: Fix for recursive locking warning
* 2d5b7d2c4390 net: ethernet: bgmac-platform: fix an OF node reference leak
* e6fc9ff94548 net: hinic: Fix cleanup in create_rxqs/txqs()
* 11561dfe9a16 ionic: use ee->offset when returning sprom data
* da93a12876f8 ionic: Fix netdev notifier unregister on failure
* d10321be26ff netdevsim: prevent bad user input in nsim_dev_health_break_write()
* 59c4ca8d8d79 net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
* d7d1f986ebb2 net/smc: check return value of sock_recvmsg when draining clc data
* e1cc8be2a785 net/smc: check smcd_v2_ext_offset when receiving proposal msg
* 62056d1592e6 net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
* a76434c8bfcb net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
* bec2f52866d5 net/smc: protect link down work from execute after lgr freed
* 7334f371d11a cxl/region: Fix region creation for greater than x2 switches
* 2dfa38be6478 i2c: pnx: Fix timeout in wait functions
* 090cd7dfc3dd p2sb: Do not scan and remove the P2SB device when it is unhidden
* 8fc1667bf9dd p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
* d552e2e06872 p2sb: Introduce the global flag p2sb_hidden_by_bios
* da3d454cd56d p2sb: Factor out p2sb_read_from_cache()
* 1e41911ab2f3 platform/x86: p2sb: Make p2sb_get_devfn() return void
* 45bbb2a63e00 PCI: Introduce pci_resource_n()
* 684e26014693 usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
* 3469c3e32cfe MIPS: Loongson64: DTS: Fix msi node for ls7a
* f6720b1362d0 PCI: Add ACS quirk for Broadcom BCM5760X NIC
* 626b6fc9a0bf ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
* 0aeb5803fb21 ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
* 498e9f29d1c1 usb: cdns3: Add quirk flag to enable suspend residency
* ee98649645b9 PCI: vmd: Create domain symlink before pci_bus_add_devices()
* f858b0fab28d PCI: Use preserve_config in place of pci_flags
* 9906dbe6001f PCI/AER: Disable AER service on suspend
* 489422e2beff net: sched: fix ordering of qlen adjustment

Change-Id: Ica347cdcd7663b7503c7ae65eda60924ec64f415
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>