Mantic update: upstream stable patchset 2024-03-26

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2024-03-26

                Ported from the following upstream stable releases:
                        v6.1.76, v6.6.15

       from git://git.kernel.org/

iio: adc: ad7091r: Set alert bit in config register
iio: adc: ad7091r: Allow users to configure device events
ext4: allow for the last group to be marked as trimmed
arm64: properly install vmlinuz.efi
OPP: Pass rounded rate to _set_opp()
btrfs: sysfs: validate scrub_speed_max value
crypto: api - Disallow identical driver names
PM: hibernate: Enforce ordering during image compression/decompression
hwrng: core - Fix page fault dead lock on mmap-ed hwrng
crypto: s390/aes - Fix buffer overread in CTR mode
s390/vfio-ap: unpin pages on gisc registration failure
PM / devfreq: Fix buffer overflow in trans_stat_show
media: imx355: Enable runtime PM before registering async sub-device
rpmsg: virtio: Free driver_override when rpmsg_remove()
media: ov9734: Enable runtime PM before registering async sub-device
s390/vfio-ap: always filter entire AP matrix
s390/vfio-ap: loop over the shadow APCB when filtering guest's AP configuration
s390/vfio-ap: let on_scan_complete() callback filter matrix and update guest's APCB
mips: Fix max_mapnr being uninitialized on early stages
bus: mhi: host: Add alignment check for event ring read pointer
bus: mhi: host: Drop chan lock before queuing buffers
bus: mhi: host: Add spinlock to protect WP access when queueing TREs
parisc/firmware: Fix F-extend for PDC addresses
parisc/power: Fix power soft-off button emulation on qemu
async: Split async_schedule_node_domain()
async: Introduce async_schedule_dev_nocall()
iio: adc: ad7091r: Enable internal vref if external vref is not supplied
dmaengine: fix NULL pointer in channel unregistration function
scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan()
arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
arm64: dts: qcom: sm8150: fix USB wakeup interrupt types
arm64: dts: qcom: sc7280: fix usb_1 wakeup interrupt types
arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
arm64: dts: qcom: sm8150: fix USB DP/DM HS PHY interrupts
lsm: new security_file_ioctl_compat() hook
docs: kernel_abi.py: fix command injection
scripts/get_abi: fix source path leak
media: videobuf2-dma-sg: fix vmap callback
mmc: core: Use mrq.sbc in close-ended ffu
mmc: mmc_spi: remove custom DMA mapped buffers
media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
arm64: Rename ARM64_WORKAROUND_2966298
rtc: cmos: Use ACPI alarm for non-Intel x86 systems too
rtc: Adjust failure return code for cmos_set_alarm()
rtc: mc146818-lib: Adjust failure return code for mc146818_get_time()
rtc: Add support for configuring the UIP timeout for RTC reads
rtc: Extend timeout for waiting for UIP to clear to 1s
nouveau/vmm: don't set addr on the fail path to avoid warning
ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
mm/rmap: fix misplaced parenthesis of a likely()
mm/sparsemem: fix race in accessing memory_section->usage
rename(): fix the locking of subdirectories
serial: sc16is7xx: improve regmap debugfs by using one regmap per port
serial: sc16is7xx: remove wasteful static buffer in sc16is7xx_regmap_name()
serial: sc16is7xx: remove global regmap from struct sc16is7xx_port
serial: sc16is7xx: remove unused line structure member
serial: sc16is7xx: change EFR lock to operate on each channels
serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
serial: sc16is7xx: fix invalid sc16is7xx_lines bitfield in case of probe error
serial: sc16is7xx: remove obsolete loop in sc16is7xx_port_irq()
serial: sc16is7xx: improve do/while loop in sc16is7xx_irq()
LoongArch/smp: Call rcutree_report_cpu_starting() earlier
mm: page_alloc: unreserve highatomic page blocks before oom
ksmbd: set v2 lease version on lease upgrade
ksmbd: fix potential circular locking issue in smb2_set_ea()
ksmbd: don't increment epoch if current state and request state are same
ksmbd: send lease break notification on FILE_RENAME_INFORMATION
ksmbd: Add missing set_freezable() for freezable kthread
Revert "drm/amd: Enable PCIe PME from D3"
wifi: mac80211: fix potential sta-link leak
net/smc: fix illegal rmb_desc access in SMC-D connection dump
tcp: make sure init the accept_queue's spinlocks once
bnxt_en: Wait for FLR to complete during probe
vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
llc: make llc_ui_sendmsg() more robust against bonding changes
llc: Drop support for ETH_P_TR_802_2.
udp: fix busy polling
net: fix removing a namespace with conflicting altnames
tun: fix missing dropped counter in tun_xdp_act
tun: add missing rx stats accounting in tun_xdp_act
net: micrel: Fix PTP frame parsing for lan8814
net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
netfs, fscache: Prevent Oops in fscache_put_cache()
tracing: Ensure visibility when inserting an element into tracing_map
afs: Hide silly-rename files from userspace
tcp: Add memory barrier to tcp_push()
netlink: fix potential sleeping issue in mqueue_flush_file
ipv6: init the accept_queue's spinlocks in inet6_create
net/mlx5: DR, Use the right GVMI number for drop action
net/mlx5: DR, Can't go to uplink vport on RX rule
net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO
net/mlx5e: Allow software parsing when IPsec crypto is enabled
net/mlx5e: fix a double-free in arfs_create_groups
net/mlx5e: fix a potential double-free in fs_any_create_groups
rcu: Defer RCU kthreads wakeup when CPU is dying
netfilter: nft_limit: reject configurations that cause integer overflow
netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
netfilter: nf_tables: validate NFPROTO_* family
net: stmmac: Wait a bit for the reset to take effect
net: mvpp2: clear BM pool before initialization
selftests: netdevsim: fix the udp_tunnel_nic test
fjes: fix memleaks in fjes_hw_setup
net: fec: fix the unhandled context fault from smmu
nbd: always initialize struct msghdr completely
btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted
btrfs: ref-verify: free ref cache before clearing mount opt
btrfs: tree-checker: fix inline ref size in error messages
btrfs: don't warn if discard range is not aligned to sector
btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
rbd: don't move requests to the running list on errors
exec: Fix error handling in begin_new_exec()
wifi: iwlwifi: fix a memory corruption
hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes
netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe
ksmbd: fix global oob in ksmbd_nl_policy
firmware: arm_scmi: Check mailbox/SMT channel for consistency
xfs: read only mounts with fsopen mount API are busted
gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
cpufreq: intel_pstate: Refine computation of P-state for given frequency
drm: Don't unref the same fb many times by mistake due to deadlock handling
drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
drm/tidss: Fix atomic_flush check
drm/bridge: nxp-ptn3460: simplify some error checking
drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A
drm/amdgpu/pm: Fix the power source flag error
erofs: fix lz4 inplace decompression
media: ov13b10: Enable runtime PM before registering async sub-device
PM: sleep: Fix possible deadlocks in core system-wide PM code
thermal: intel: hfi: Refactor enabling code into helper functions
thermal: intel: hfi: Disable an HFI instance when all its CPUs go offline
thermal: intel: hfi: Add syscore callbacks for system-wide PM
fs/pipe: move check to pipe_has_watch_queue()
pipe: wakeup wr_wait after setting max_usage
ARM: dts: qcom: sdx55: fix USB wakeup interrupt types
ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells'
ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts
ARM: dts: qcom: sdx55: fix USB SS wakeup
dlm: use kernel_connect() and kernel_bind()
serial: core: Provide port lock wrappers
serial: sc16is7xx: Use port lock wrappers
serial: sc16is7xx: fix unconditional activation of THRI interrupt
btrfs: zoned: factor out prepare_allocation_zoned()
btrfs: zoned: optimize hint byte for zoned allocator
drm/panel-edp: drm/panel-edp: Fix AUO B116XAK01 name and timing
Revert "powerpc/64s: Increase default stack size to 32KB"
drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer
drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
drm/bridge: sii902x: Fix probing race issue
drm/bridge: sii902x: Fix audio codec unregistration
drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable()
drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error case
drm/exynos: fix accidental on-stack copy of exynos_drm_plane
drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
gpio: eic-sprd: Clear interrupt after set the interrupt type
drm/bridge: anx7625: Ensure bridge is suspended in disable()
spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
spi: fix finalize message on error return
MIPS: lantiq: register smp_ops on non-smp platforms
cxl/region：Fix overflow issue in alloc_hpa()
mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
tick/sched: Preserve number of idle sleeps across CPU hotplug events
x86/entry/ia32: Ensure s32 is sign extended to s64
serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
docs: sparse: move TW sparse.txt to TW dev-tools
docs: sparse: add sparse.rst to toctree
serial: core: Simplify uart_get_rs485_mode()
serial: core: set missing supported flag for RX during TX GPIO
soundwire: bus: introduce controller_id
soundwire: fix initializing sysfs for same devices on different buses
net: stmmac: Tx coe sw fallback
net: stmmac: Prevent DSA tags from breaking COE
dmaengine: idxd: Move dma_free_coherent() out of spinlocked context
riscv: Fix an off-by-one in get_early_cmdline()
scsi: core: Kick the requeue list after inserting when flushing
sh: ecovec24: Rename missed backlight field from fbdev to dev
smb: client: fix parsing of SMB3.1.1 POSIX create context
cifs: do not pass cifs_sb when trying to add channels
cifs: handle cases where a channel is closed
cifs: reconnect work should have reference on server struct
cifs: handle when server starts supporting multichannel
cifs: handle when server stops supporting multichannel
cifs: reconnect worker should take reference on server struct unconditionally
cifs: handle servers that still advertise multichannel after disabling
cifs: update iface_last_update on each query-and-update
powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2
crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters
mtd: rawnand: Prevent crossing LUN boundaries during sequential reads
mtd: rawnand: Fix core interference with sequential reads
mtd: rawnand: Prevent sequential reads with on-die ECC engines
mtd: rawnand: Clarify conditions to enable continuous reads
soc: qcom: pmic_glink_altmode: fix port sanity check
media: ov01a10: Enable runtime PM before registering async sub-device
soc: fsl: cpm1: tsa: Fix __iomem addresses declaration
soc: fsl: cpm1: qmc: Fix __iomem addresses declaration
soc: fsl: cpm1: qmc: Fix rx channel reset
s390/vfio-ap: reset queues filtered from the guest's AP config
s390/vfio-ap: reset queues associated with adapter for queue unbound from driver
s390/vfio-ap: do not reset queue removed from host config
ARM: dts: imx6q-apalis: add can power-up delay on ixora board
arm64: dts: qcom: sc8280xp-crd: fix eDP phy compatible
arm64: dts: sprd: fix the cpu node for UMS512
arm64: dts: rockchip: configure eth pad driver strength for orangepi r1 plus lts
arm64: dts: rockchip: Fix rk3588 USB power-domain clocks
arm64: dts: qcom: msm8916: Make blsp_dma controlled-remotely
arm64: dts: qcom: msm8939: Make blsp_dma controlled-remotely
arm64: dts: qcom: sdm670: fix USB wakeup interrupt types
arm64: dts: qcom: sc8180x: fix USB wakeup interrupt types
arm64: dts: qcom: Add missing vio-supply for AW2013
arm64: dts: qcom: sdm845: fix USB SS wakeup
arm64: dts: qcom: sm8150: fix USB SS wakeup
arm64: dts: qcom: sc8180x: fix USB DP/DM HS PHY interrupts
arm64: dts: qcom: sc8180x: fix USB SS wakeup
media: i2c: st-mipid02: correct format propagation
media: mtk-jpeg: Fix timeout schedule error in mtk_jpegdec_worker.
riscv: mm: Fixup compat mode boot failure
arm64: errata: Add Cortex-A510 speculative unprivileged load workaround
UBUNTU: [Config] update config for ARM64_ERRATUM_3117295
arm64/sme: Always exit sme_alloc() early with existing storage
arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD
efi: disable mirror feature during crashkernel
kexec: do syscore_shutdown() in kernel_kexec
selftests: mm: hugepage-vmemmap fails on 64K page size systems
serial: Do not hold the port lock when setting rx-during-tx GPIO
dt-bindings: net: snps,dwmac: Tx coe unsupported
bpf: move explored_state() closer to the beginning of verifier.c
bpf: extract same_callsites() as utility function
bpf: exact states comparison for iterator convergence checks
selftests/bpf: tests with delayed read/precision makrs in loop body
bpf: correct loop detection for iterators convergence
selftests/bpf: test if state loops are detected in a tricky case
bpf: print full verifier states on infinite loop detection
selftests/bpf: track tcp payload offset as scalar in xdp_synproxy
selftests/bpf: track string payload offset as scalar in strobemeta
bpf: extract __check_reg_arg() utility function
bpf: extract setup_func_entry() utility function
bpf: verify callbacks as if they are called unknown number of times
selftests/bpf: tests for iterating callbacks
bpf: widening for callback iterators
bpf: keep track of max number of bpf_loop callback iterations
cifs: fix lock ordering while disabling multichannel
cifs: fix a pending undercount of srv_count
cifs: after disabling multichannel, mark tcon for reconnect
selftests: bonding: Increase timeout to 1200s
bnxt_en: Prevent kernel warning when running offline self test
selftest: Don't reuse port for SO_INCOMING_CPU test.
selftests: fill in some missing configs for net
net/sched: flower: Fix chain template offload
net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context
net/mlx5e: Fix peer flow lists handling
net/mlx5: Bridge, Enable mcast in smfs steering mode
net/mlx5: Bridge, fix multicast packets sent to uplink
net/mlx5e: Ignore IPsec replay window values on sender side
selftests: net: fix rps_default_mask with >32 CPUs
bpf: Propagate modified uaddrlen from cgroup sockaddr programs
bpf: Add bpf_sock_addr_set_sun_path() to allow writing unix sockaddr from bpf
ice: work on pre-XDP prog frag count
i40e: handle multi-buffer packets that are shrunk by xdp prog
ice: remove redundant xdp_rxq_info registration
ice: update xdp_rxq_info::frag_size for ZC enabled Rx queue
i40e: set xdp_rxq_info::frag_size
selftests: bonding: do not test arp/ns target with mode balance-alb/tlb
tsnep: Remove FCS for XDP data path
tsnep: Fix XDP_RING_NEED_WAKEUP for empty fill ring
btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned
nfsd: fix RELEASE_LOCKOWNER
Revert "drivers/firmware: Move sysfb_init() from device_initcall to subsys_initcall_sync"
drm/amdgpu: Fix the null pointer when load rlc firmware
drm: Fix TODO list mentioning non-KMS drivers
drm: Disable the cursor plane on atomic contexts with virtualized drivers
drm/virtio: Disable damage clipping if FB changed since last page-flip
drm: Allow drivers to indicate the damage helpers to ignore damage clips
drm/amd/display: fix bandwidth validation failure on DCN 2.1
drm/amdgpu: correct the cu count for gfx v11
drm/amd/display: Align the returned error code with legacy DP
drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()'
drm/amd/display: Fix uninitialized variable usage in core_link_ 'read_dpcd() & write_dpcd()' functions
net/bpf: Avoid unused "sin_addr_len" warning when CONFIG_CGROUP_BPF is not set
thermal: core: Store trip pointer in struct thermal_instance
thermal: gov_power_allocator: avoid inability to reset a cdev
mm: migrate: record the mlocked page status to remove unnecessary lru drain
mm: migrate: fix getting incorrect page mapping during page migration
drm/i915/lnl: Remove watchdog timers for PSR
drm/i915/psr: Only allow PSR in LPSP mode on HSW non-ULT
drm/panel-edp: Add AUO B116XTN02, BOE NT116WHM-N21,836X2, NV116WHM-N49 V8.0
drm/panel-edp: drm/panel-edp: Fix AUO B116XTN02 name
drm/amdgpu/gfx10: set UNORD_DISPATCH in compute MQDs
drm/amdgpu/gfx11: set UNORD_DISPATCH in compute MQDs
drm/panel: samsung-s6d7aa0: drop DRM_BUS_FLAG_DE_HIGH for lsl080al02
memblock: fix crash when reserved memory is not added to memory
firmware: arm_scmi: Use xa_insert() when saving raw queues
spi: intel-pci: Remove Meteor Lake-S SoC PCI ID from the list
cpufreq/amd-pstate: Fix setting scaling max/min freq values
spi: spi-cadence: Reverse the order of interleaved write and read operations
cifs: fix stray unlock in cifs_chan_skip_or_disable
drm: bridge: samsung-dsim: Don't use FORCE_STOP_STATE
genirq: Initialize resend_node hlist for all interrupt descriptors
clocksource: Skip watchdog check for large watchdog intervals
thermal: trip: Drop lockdep assertion from thermal_zone_trip_id()
platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
UBUNTU: Upstream stable to v6.1.76, v6.6.15