Merge 6.6.28 into android15-6.6

Changes in 6.6.28
	smb3: fix Open files on server counter going negative
	ata: libata-core: Allow command duration limits detection for ACS-4 drives
	ata: libata-scsi: Fix ata_scsi_dev_rescan() error path
	batman-adv: Avoid infinite loop trying to resize local TT
	ARM: dts: imx7s-warp: Pass OV2680 link-frequencies
	raid1: fix use-after-free for original bio in raid1_write_request()
	ring-buffer: Only update pages_touched when a new page is touched
	Bluetooth: Fix memory leak in hci_req_sync_complete()
	drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
	platform/chrome: cros_ec_uart: properly fix race condition
	ACPI: scan: Do not increase dep_unmet for already met dependencies
	PM: s2idle: Make sure CPUs will wakeup directly on resume
	media: cec: core: remove length check of Timer Status
	ARM: OMAP2+: fix bogus MMC GPIO labels on Nokia N8x0
	ARM: OMAP2+: fix N810 MMC gpiod table
	mmc: omap: fix broken slot switch lookup
	mmc: omap: fix deferred probe
	mmc: omap: restore original power up/down steps
	ARM: OMAP2+: fix USB regression on Nokia N8x0
	firmware: arm_scmi: Make raw debugfs entries non-seekable
	cxl/mem: Fix for the index of Clear Event Record Handle
	cxl/core/regs: Fix usage of map->reg_type in cxl_decode_regblock() before assigned
	drm/msm/dpu: don't allow overriding data from catalog
	arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
	cxl/core: Fix initialization of mbox_cmd.size_out in get event
	Revert "drm/qxl: simplify qxl_fence_wait"
	nouveau: fix function cast warning
	scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
	scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
	net: openvswitch: fix unwanted error log on timeout policy probing
	u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
	xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
	octeontx2-pf: Fix transmit scheduler resource leak
	block: fix q->blkg_list corruption during disk rebind
	geneve: fix header validation in geneve[6]_xmit_skb
	s390/ism: fix receive message buffer allocation
	bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()
	bnxt_en: Fix error recovery for RoCE ulp client
	bnxt_en: Reset PTP tx_avail after possible firmware reset
	net: ks8851: Inline ks8851_rx_skb()
	net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
	af_unix: Clear stale u->oob_skb.
	octeontx2-af: Fix NIX SQ mode and BP config
	ipv6: fib: hide unused 'pn' variable
	ipv4/route: avoid unused-but-set-variable warning
	ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
	Bluetooth: ISO: Align broadcast sync_timeout with connection timeout
	Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset
	Bluetooth: hci_sync: Use QoS to determine which PHY to scan
	Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY
	Bluetooth: SCO: Fix not validating setsockopt user input
	Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit
	netfilter: complete validation of user input
	net/mlx5: SF, Stop waiting for FW as teardown was called
	net/mlx5: Register devlink first under devlink lock
	net/mlx5: offset comp irq index in name by one
	net/mlx5: Properly link new fs rules into the tree
	net/mlx5: Correctly compare pkt reformat ids
	net/mlx5e: Fix mlx5e_priv_init() cleanup flow
	net/mlx5e: HTB, Fix inconsistencies with QoS SQs number
	net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit
	net: sparx5: fix wrong config being used when reconfiguring PCS
	Revert "s390/ism: fix receive message buffer allocation"
	net: dsa: mt7530: trap link-local frames regardless of ST Port State
	af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
	af_unix: Fix garbage collector racing against connect()
	net: ena: Fix potential sign extension issue
	net: ena: Wrong missing IO completions check order
	net: ena: Fix incorrect descriptor free behavior
	net: ena: Move XDP code to its new files
	net: ena: Pass ena_adapter instead of net_device to ena_xmit_common()
	net: ena: Use tx_ring instead of xdp_ring for XDP channel TX
	net: ena: Set tx_info->xdpf value to NULL
	tracing: hide unused ftrace_event_id_fops
	iommu/vt-d: Fix wrong use of pasid config
	iommu/vt-d: Allocate local memory for page request queue
	selftests: mptcp: use += operator to append strings
	btrfs: qgroup: correctly model root qgroup rsv in convert
	btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
	btrfs: record delayed inode root in transaction
	btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans
	io_uring/net: restore msg_control on sendzc retry
	kprobes: Fix possible use-after-free issue on kprobe registration
	scsi: sg: Avoid sg device teardown race
	scsi: sg: Avoid race in error handling & drop bogus warn
	accel/ivpu: Fix deadlock in context_xa
	drm/vmwgfx: Enable DMA mappings with SEV
	drm/i915/vrr: Disable VRR when using bigjoiner
	drm/amdkfd: Reset GPU on queue preemption failure
	drm/ast: Fix soft lockup
	drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
	drm/client: Fully protect modes[] with dev->mode_config.mutex
	arm64: dts: imx8qm-ss-dma: fix can lpcg indices
	arm64: dts: imx8-ss-dma: fix can lpcg indices
	arm64: dts: imx8-ss-dma: fix adc lpcg indices
	arm64: dts: imx8-ss-conn: fix usb lpcg indices
	arm64: dts: imx8-ss-lsio: fix pwm lpcg indices
	arm64: dts: imx8-ss-dma: fix spi lpcg indices
	vhost: Add smp_rmb() in vhost_vq_avail_empty()
	vhost: Add smp_rmb() in vhost_enable_notify()
	perf/x86: Fix out of range data
	x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
	selftests: timers: Fix abs() warning in posix_timers test
	x86/apic: Force native_apic_mem_read() to use the MOV instruction
	irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
	x86/bugs: Fix return type of spectre_bhi_state()
	x86/bugs: Fix BHI documentation
	x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
	x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
	x86/bugs: Fix BHI handling of RRSBA
	x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
	x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
	x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI
	drm/i915/cdclk: Fix CDCLK programming order when pipes are active
	drm/i915: Disable port sync when bigjoiner is used
	drm/amdgpu: Reset dGPU if suspend got aborted
	drm/amdgpu: always force full reset for SOC21
	drm/amdgpu: fix incorrect number of active RBs for gfx11
	drm/amd/display: Program VSC SDP colorimetry for all DP sinks >= 1.4
	drm/amd/display: Set VSC SDP Colorimetry same way for MST and SST
	drm/amd/display: fix disable otg wa logic in DCN316
	Linux 6.6.28

Change-Id: I61d9b68afa3d915fd80376e263173df2d3c163fd
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>