Merge 6.6.26 into android15-6.6

Changes in 6.6.26
	drm/i915/display: Use i915_gem_object_get_dma_address to get dma address
	drm/i915: Pre-populate the cursor physical dma address
	scripts/bpf_doc: Use silent mode when exec make cmd
	s390/bpf: Fix bpf_plt pointer arithmetic
	bpf, arm64: fix bug in BPF_LDX_MEMSX
	dma-buf: Fix NULL pointer dereference in sanitycheck()
	arm64: bpf: fix 32bit unconditional bswap
	nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
	tools: ynl: fix setting presence bits in simple nests
	mlxbf_gige: stop PHY during open() error paths
	wifi: iwlwifi: mvm: rfi: fix potential response leaks
	wifi: iwlwifi: disable multi rx queue for 9000
	wifi: iwlwifi: mvm: include link ID when releasing frames
	ALSA: hda: cs35l56: Set the init_done flag before component_add()
	ice: Refactor FW data type and fix bitmap casting issue
	ice: realloc VSI stats arrays
	ice: fix memory corruption bug with suspend and rebuild
	ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
	igc: Remove stale comment about Tx timestamping
	s390/qeth: handle deferred cc1
	net: hsr: hsr_slave: Fix the promiscuous mode in offload mode
	tcp: properly terminate timers for kernel sockets
	net: wwan: t7xx: Split 64bit accesses to fix alignment issues
	selftests: vxlan_mdb: Fix failures with old libnet
	ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
	net: hns3: fix index limit to support all queue stats
	net: hns3: fix kernel crash when devlink reload during pf initialization
	net: hns3: mark unexcuted loopback test result as UNEXECUTED
	tls: recv: process_rx_list shouldn't use an offset with kvec
	tls: adjust recv return with async crypto and failed copy to userspace
	tls: get psock ref after taking rxlock to avoid leak
	mlxbf_gige: call request_irq() after NAPI initialized
	bpf: Protect against int overflow for stack access size
	cifs: Fix duplicate fscache cookie warnings
	netfilter: nf_tables: reject destroy command to remove basechain hooks
	netfilter: nf_tables: reject table flag and netdev basechain updates
	netfilter: nf_tables: skip netdev hook unregistration if table is dormant
	net: bcmasp: Bring up unimac after PHY link up
	net: lan743x: Add set RFE read fifo threshold for PCI1x1x chips
	Octeontx2-af: fix pause frame configuration in GMP mode
	inet: inet_defrag: prevent sk release while still in use
	drm/i915/dg2: Drop pre-production GT workarounds
	drm/i915: Tidy workaround definitions
	drm/i915: Consolidate condition for Wa_22011802037
	drm/i915/xelpg: Call Xe_LPG workaround functions based on IP version
	drm/i915: Eliminate IS_MTL_GRAPHICS_STEP
	drm/i915: Replace several IS_METEORLAKE with proper IP version checks
	drm/i915/mtl: Update workaround 14016712196
	drm/i915/xelpg: Extend some workarounds/tuning to gfx version 12.74
	drm/i915/mtl: Update workaround 14018575942
	dm integrity: fix out-of-range warning
	mm/treewide: replace pud_large() with pud_leaf()
	Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
	btrfs: ensure fiemap doesn't race with writes when FIEMAP_FLAG_SYNC is given
	btrfs: fix race when detecting delalloc ranges during fiemap
	x86/CPU/AMD: Add ZenX generations flags
	x86/CPU/AMD: Carve out the erratum 1386 fix
	x86/CPU/AMD: Move erratum 1076 fix into the Zen1 init function
	x86/CPU/AMD: Move Zenbleed check to the Zen2 init function
	x86/CPU/AMD: Move the DIV0 bug detection to the Zen1 init function
	x86/CPU/AMD: Get rid of amd_erratum_1054[]
	x86/CPU/AMD: Add X86_FEATURE_ZEN1
	perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
	x86/cpufeatures: Add new word for scattered features
	perf/x86/amd/lbr: Use freeze based on availability
	modpost: Optimize symbol search from linear to binary search
	modpost: do not make find_tosym() return NULL
	gpio: cdev: sanitize the label before requesting the interrupt
	RISC-V: KVM: Fix APLIC setipnum_le/be write emulation
	RISC-V: KVM: Fix APLIC in_clrip[x] read emulation
	KVM: arm64: Fix host-programmed guest events in nVHE
	selinux: avoid dereference of garbage after mount failure
	r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
	x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
	x86/bpf: Fix IP after emitting call depth accounting
	Revert "Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT"
	arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
	Bluetooth: qca: fix device-address endianness
	Bluetooth: add quirk for broken address properties
	Bluetooth: hci_event: set the conn encrypted before conn establishes
	Bluetooth: Fix TOCTOU in HCI debugfs implementation
	netfilter: nf_tables: release batch on table validation from abort path
	netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
	selftests: mptcp: join: fix dev in check_endpoint
	xen-netfront: Add missing skb_mark_for_recycle
	net/rds: fix possible cp null dereference
	net: usb: ax88179_178a: avoid the interface always configured as random address
	net: mana: Fix Rx DMA datasize and skb_over_panic
	vsock/virtio: fix packet delivery to tap device
	x86/srso: Improve i-cache locality for alias mitigation
	x86/srso: Disentangle rethunk-dependent options
	x86/nospec: Refactor UNTRAIN_RET[_*]
	x86/bugs: Fix the SRSO mitigation on Zen3/4
	netfilter: nf_tables: reject new basechain after table flag update
	netfilter: nf_tables: flush pending destroy work before exit_net release
	netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
	netfilter: nf_tables: discard table flag update with pending basechain deletion
	netfilter: validate user input for expected length
	vboxsf: Avoid an spurious warning if load_nls_xxx() fails
	bpf, sockmap: Prevent lock inversion deadlock in map delete elem
	x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
	KVM: arm64: Ensure target address is granule-aligned for range TLBI
	net/sched: act_skbmod: prevent kernel-infoleak
	net: dsa: sja1105: Fix parameters order in sja1110_pcs_mdio_write_c45()
	net/sched: fix lockdep splat in qdisc_tree_reduce_backlog()
	net: stmmac: fix rx queue priority assignment
	net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping
	net: txgbe: fix i2c dev name cannot match clkdev
	net: fec: Set mac_managed_pm during probe
	net: phy: micrel: Fix potential null pointer dereference
	net: dsa: mv88e6xxx: fix usable ports on 88e6020
	selftests: net: gro fwd: update vxlan GRO test expectations
	gro: fix ownership transfer
	ice: fix enabling RX VLAN filtering
	i40e: Fix VF MAC filter removal
	erspan: make sure erspan_base_hdr is present in skb->head
	selftests: reuseaddr_conflict: add missing new line at the end of the output
	tcp: Fix bind() regression for v6-only wildcard and v4(-mapped-v6) non-wildcard addresses.
	ax25: fix use-after-free bugs caused by ax25_ds_del_timer
	ipv6: Fix infinite recursion in fib6_dump_done().
	mlxbf_gige: stop interface during shutdown
	r8169: skip DASH fw status checks when DASH is disabled
	udp: do not accept non-tunnel GSO skbs landing in a tunnel
	udp: do not transition UDP GRO fraglist partial checksums to unnecessary
	udp: prevent local UDP tunnel packets from being GROed
	octeontx2-af: Fix issue with loading coalesced KPU profiles
	octeontx2-pf: check negative error code in otx2_open()
	octeontx2-af: Add array index check
	i40e: fix i40e_count_filters() to count only active/new filters
	i40e: fix vf may be used uninitialized in this function warning
	usb: typec: ucsi: Fix race between typec_switch and role_switch
	drm/amd/display: Fix DPSTREAM CLK on and off sequence
	drm/amd/display: Prevent crash when disable stream
	drm/amd: Evict resources during PM ops prepare() callback
	drm/amd: Add concept of running prepare_suspend() sequence for IP blocks
	drm/amd: Flush GFXOFF requests in prepare stage
	i40e: Remove _t suffix from enum type names
	i40e: Enforce software interrupt during busy-poll exit
	i40e: Remove back pointer from i40e_hw structure
	i40e: Refactor I40E_MDIO_CLAUSE* macros
	virtchnl: Add header dependencies
	i40e: Simplify memory allocation functions
	i40e: Move memory allocation structures to i40e_alloc.h
	i40e: Split i40e_osdep.h
	i40e: Remove circular header dependencies and fix headers
	intel: add bit macro includes where needed
	intel: legacy: field get conversion
	e1000e: Workaround for sporadic MDI error on Meteor Lake systems
	e1000e: Minor flow correction in e1000_shutdown function
	e1000e: move force SMBUS from enable ulp function to avoid PHY loss issue
	net: ravb: Let IP-specific receive function to interrogate descriptors
	net: ravb: Always process TX descriptor ring
	net: ravb: Always update error counters
	KVM: SVM: Use unsigned integers when dealing with ASIDs
	KVM: SVM: Add support for allowing zero SEV ASIDs
	fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
	9p: Fix read/write debug statements to report server reply
	ASoC: wm_adsp: Fix missing mutex_lock in wm_adsp_write_ctl()
	drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported
	RISC-V: Update AT_VECTOR_SIZE_ARCH for new AT_MINSIGSTKSZ
	regmap: maple: Fix cache corruption in regcache_maple_drop()
	ALSA: hda: cs35l56: Add ACPI device match tables
	drm/panfrost: fix power transition timeout warnings
	nouveau/uvmm: fix addr/range calcs for remap operations
	drm/prime: Unbreak virtgpu dma-buf export
	ASoC: rt5682-sdw: fix locking sequence
	ASoC: rt711-sdca: fix locking sequence
	ASoC: rt711-sdw: fix locking sequence
	ASoC: rt712-sdca-sdw: fix locking sequence
	ASoC: rt722-sdca-sdw: fix locking sequence
	ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
	spi: s3c64xx: Extract FIFO depth calculation to a dedicated macro
	spi: s3c64xx: sort headers alphabetically
	spi: s3c64xx: explicitly include <linux/bits.h>
	spi: s3c64xx: remove else after return
	spi: s3c64xx: define a magic value
	spi: s3c64xx: allow full FIFO masks
	spi: s3c64xx: determine the fifo depth only once
	spi: s3c64xx: Use DMA mode from fifo size
	ASoC: amd: acp: fix for acp_init function error handling
	regmap: maple: Fix uninitialized symbol 'ret' warnings
	ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
	scsi: mylex: Fix sysfs buffer lengths
	scsi: sd: Unregister device if device_add_disk() failed in sd_probe()
	Revert "ALSA: emu10k1: fix synthesizer sample playback position and caching"
	cifs: Fix caching to try to do open O_WRONLY as rdwr on server
	spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe
	ata: sata_mv: Fix PCI device ID table declaration compilation warning
	ASoC: SOF: amd: fix for false dsp interrupts
	SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
	riscv: Disable preemption when using patch_map()
	nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
	ice: fix typo in assignment
	x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
	gpio: cdev: check for NULL labels when sanitizing them for irqs
	gpio: cdev: fix missed label sanitizing in debounce_setup()
	ksmbd: don't send oplock break if rename fails
	ksmbd: validate payload size in ipc response
	ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
	ALSA: hda/realtek - Fix inactive headset mic jack
	ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
	io_uring/kbuf: get rid of lower BGID lists
	io_uring/kbuf: get rid of bl->is_ready
	io_uring/kbuf: protect io_buffer_list teardown with a reference
	io_uring: use private workqueue for exit work
	io_uring/kbuf: hold io_buffer_list reference over mmap
	driver core: Introduce device_link_wait_removal()
	of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
	x86/mm/pat: fix VM_PAT handling in COW mappings
	x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
	x86/coco: Require seeding RNG with RDRAND on CoCo systems
	perf/x86/intel/ds: Don't clear ->pebs_data_cfg for the last PEBS event
	arm64/ptrace: Use saved floating point state type to determine SVE layout
	mm/secretmem: fix GUP-fast succeeding on secretmem folios
	selftests/mm: include strings.h for ffsl
	s390/entry: align system call table on 8 bytes
	riscv: Fix spurious errors from __get/put_kernel_nofault
	riscv: process: Fix kernel gp leakage
	smb: client: handle DFS tcons in cifs_construct_tcon()
	smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex
	smb3: retrying on failed server close
	smb: client: fix potential UAF in cifs_debug_files_proc_show()
	smb: client: fix potential UAF in cifs_stats_proc_write()
	smb: client: fix potential UAF in cifs_stats_proc_show()
	smb: client: fix potential UAF in cifs_dump_full_key()
	smb: client: fix potential UAF in smb2_is_valid_oplock_break()
	smb: client: fix potential UAF in smb2_is_valid_lease_break()
	smb: client: fix potential UAF in is_valid_oplock_break()
	smb: client: fix potential UAF in smb2_is_network_name_deleted()
	smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
	drm/i915/gt: Disable HW load balancing for CCS
	drm/i915/gt: Do not generate the command streamer for all the CCS
	drm/i915/gt: Enable only one CCS for compute workload
	Revert "x86/mpparse: Register APIC address only once"
	of: module: prevent NULL pointer dereference in vsnprintf()
	selftests: mptcp: connect: fix shellcheck warnings
	mptcp: don't overwrite sock_ops in mptcp_is_tcpsk()
	mptcp: don't account accept() of non-MPC client as fallback to TCP
	bpf: put uprobe link's path and task in release callback
	bpf: support deferring bpf_link dealloc to after RCU grace period
	x86/head/64: Move the __head definition to <asm/init.h>
	efi/libstub: Add generic support for parsing mem_encrypt=
	x86/sme: Move early SME kernel encryption handling into .head.text
	x86/sev: Move early startup code into .head.text section
	x86/efistub: Remap kernel text read-only before dropping NX attribute
	x86/boot: Move mem_encrypt= parsing to the decompressor
	x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
	x86/syscall: Don't force use of indirect calls for system calls
	x86/bhi: Add support for clearing branch history at syscall entry
	x86/bhi: Define SPEC_CTRL_BHI_DIS_S
	x86/bhi: Enumerate Branch History Injection (BHI) bug
	x86/bhi: Add BHI mitigation knob
	x86/bhi: Mitigate KVM by default
	KVM: x86: Add BHI_NO
	x86: set SPECTRE_BHI_ON as default
	Linux 6.6.26

Change-Id: I08a44d13a4967bf5f274320d2dd10ba97f2fc5a8
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>