Mantic update: v6.5.4 upstream stable release

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.5.4 upstream stable release
       from git://git.kernel.org/

net/ipv6: SKB symmetric hash should incorporate transport ports
drm/virtio: Conditionally allocate virtio_gpu_fence
scsi: ufs: core: Add advanced RPMB support where UFSHCI 4.0 does not support EHS length in UTRD
scsi: qla2xxx: Adjust IOCB resource on qpair create
scsi: qla2xxx: Limit TMF to 8 per function
scsi: qla2xxx: Fix deletion race condition
scsi: qla2xxx: fix inconsistent TMF timeout
scsi: qla2xxx: Fix command flush during TMF
scsi: qla2xxx: Fix erroneous link up failure
scsi: qla2xxx: Turn off noisy message log
scsi: qla2xxx: Fix session hang in gnl
scsi: qla2xxx: Fix TMF leak through
scsi: qla2xxx: Remove unsupported ql2xenabledif option
scsi: qla2xxx: Flush mailbox commands on chip reset
scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit()
scsi: qla2xxx: Error code did not return to upper layer
scsi: qla2xxx: Fix firmware resource tracking
null_blk: fix poll request timeout handling
kernfs: fix missing kernfs_iattr_rwsem locking
fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
clk: qcom: camcc-sc7180: fix async resume during probe
drm/ast: Fix DRAM init on AST2200
ASoC: tegra: Fix SFC conversion for few rates
ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size
arm64: tegra: Update AHUB clock parent and rate on Tegra234
arm64: tegra: Update AHUB clock parent and rate
clk: qcom: turingcc-qcs404: fix missing resume during probe
ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen
arm64: dts: qcom: msm8953-vince: drop duplicated touschreen parent interrupt
ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names
ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode
arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos
ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
send channel sequence number in SMB3 requests after reconnects
memcg: drop kmem.limit_in_bytes
mm: hugetlb_vmemmap: fix a race between vmemmap pmd split
lib/test_meminit: allocate pages up to order MAX_ORDER
Multi-gen LRU: avoid race in inc_min_seq()
parisc: led: Fix LAN receive and transmit LEDs
parisc: led: Reduce CPU overhead for disk & lan LED computation
cifs: update desired access while requesting for directory lease
pinctrl: cherryview: fix address_space_handler() argument
dt-bindings: clock: xlnx,versal-clk: drop select:false
clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
clk: imx: pll14xx: align pdiv with reference manual
clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
soc: qcom: qmi_encdec: Restrict string length in decode
clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors
clk: qcom: dispcc-sm8550: fix runtime PM imbalance on probe errors
clk: qcom: lpasscc-sc7280: fix missing resume during probe
clk: qcom: q6sstop-qcs404: fix missing resume during probe
clk: qcom: mss-sc7180: fix missing resume during probe
NFS: Fix a potential data corruption
NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
bus: mhi: host: Skip MHI reset if device is in RDDM
kbuild: rpm-pkg: define _arch conditionally
kbuild: do not run depmod for 'make modules_sign'
kbuild: dummy-tools: make MPROFILE_KERNEL checks work on BE
tpm_crb: Fix an error handling path in crb_acpi_add()
gfs2: Switch to wait_event in gfs2_logd
gfs2: low-memory forced flush fixes
mailbox: qcom-ipcc: fix incorrect num_chans counting
kconfig: fix possible buffer overflow
tools/mm: fix undefined reference to pthread_once
Input: iqs7222 - configure power mode before triggering ATI
perf trace: Really free the evsel->priv area
pwm: atmel-tcb: Harmonize resource allocation order
pwm: atmel-tcb: Fix resource freeing in error path and remove
backlight: lp855x: Initialize PWM state on first brightness change
backlight: gpio_backlight: Drop output GPIO direction check for initial power state
perf parse-events: Separate YYABORT and YYNOMEM cases
perf parse-events: Move instances of YYABORT to YYNOMEM
perf parse-events: Separate ENOMEM memory handling
perf parse-events: Additional error reporting
KVM: SVM: Don't defer NMI unblocking until next exit for SEV-ES guests
Input: tca6416-keypad - always expect proper IRQ number in i2c client
Input: tca6416-keypad - fix interrupt enable disbalance
perf annotate bpf: Don't enclose non-debug code with an assert()
x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
perf script: Print "cgroup" field on the same line as "comm"
perf bpf-filter: Fix sample flag check with ||
perf dlfilter: Initialize addr_location before passing it to thread__find_symbol_fb()
perf dlfilter: Add al_cleanup()
perf vendor events: Update the JSON/events descriptions for power10 platform
perf vendor events: Drop some of the JSON/events for power10 platform
perf vendor events: Drop STORES_PER_INST metric event for power10 platform
perf vendor events: Move JSON/events to appropriate files for power10 platform
perf vendor events: Update metric event names for power10 platform
perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
perf lock: Don't pass an ERR_PTR() directly to perf_session__delete()
watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
perf vendor events arm64: Remove L1D_CACHE_LMISS from AmpereOne list
pwm: lpc32xx: Remove handling of PWM channels
accel/ivpu: refactor deprecated strncpy
perf header: Fix missing PMU caps
i3c: master: svc: Describe member 'saved_regs'
perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical operators
perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test
regulator: tps6287x: Fix n_voltages
selftests/bpf: Fix flaky cgroup_iter_sleepable subtest
drm/i915: mark requests for GuC virtual engines to avoid use-after-free
blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice()
netfilter: nf_tables: Audit log setelem reset
netfilter: nf_tables: Audit log rule reset
smb: propagate error code of extract_sharename()
net/sched: fq_pie: avoid stalls in fq_pie_timer()
sctp: annotate data-races around sk->sk_wmem_queued
ipv4: annotate data-races around fi->fib_dead
net: read sk->sk_family once in sk_mc_loop()
net: fib: avoid warn splat in flow dissector
xsk: Fix xsk_diag use-after-free error during socket cleanup
drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page"
drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn()
drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
drm/amd/display: fix mode scaling (RMX_.*)
net/handshake: fix null-ptr-deref in handshake_nl_done_doit()
net: use sk_forward_alloc_get() in sk_get_meminfo()
net: annotate data-races around sk->sk_forward_alloc
mptcp: annotate data-races around msk->rmem_fwd_alloc
net: annotate data-races around sk->sk_tsflags
net: annotate data-races around sk->sk_bind_phc
ipv4: ignore dst hint for multipath routes
ipv6: ignore dst hint for multipath routes
selftests/bpf: Fix a CI failure caused by vsock write
igb: disable virtualization features on 82580
gve: fix frag_list chaining
veth: Fixing transmit return status for dropped packets
net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
net: phy: micrel: Correct bit assignments for phy_device flags
bpf, sockmap: Fix skb refcnt race after locking changes
af_unix: Fix msg_controllen test in scm_pidfd_recv() for MSG_CMSG_COMPAT.
af_unix: Fix data-races around user->unix_inflight.
af_unix: Fix data-race around unix_tot_inflight.
af_unix: Fix data-races around sk->sk_shutdown.
af_unix: Fix data race around sk->sk_err.
kcm: Destroy mutex in kcm_exit_net()
octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler
igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
s390/zcrypt: don't leak memory if dev_set_name() fails
regulator: tps6594-regulator: Fix random kernel crash
idr: fix param name in idr_alloc_cyclic() doc
ip_tunnels: use DEV_STATS_INC()
net/mlx5e: Clear mirred devices array if the rule is split
net/mlx5: Give esw_offloads_load/unload_rep() "mlx5_" prefix
net/mlx5: Rework devlink port alloc/free into init/cleanup
net/mlx5: Push devlink port PF/VF init/cleanup calls out of devlink_port_register/unregister()
mlx5/core: E-Switch, Create ACL FT for eswitch manager in switchdev mode
net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload
net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times
net: dsa: sja1105: complete tc-cbs offload support on SJA1110
net: phylink: fix sphinx complaint about invalid literal
bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in kern_sys_bpf().
bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check.
s390/bpf: Pass through tail call counter in trampolines
bpf: bpf_sk_storage: Fix invalid wait context lockdep report
bpf: bpf_sk_storage: Fix the missing uncharge in sk_omem_alloc
netfilter: nf_tables: Unbreak audit log reset
net: phy: Provide Module 4 KSZ9477 errata (DS80000754C)
net: hns3: fix tx timeout issue
net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read()
net: hns3: fix debugfs concurrency issue between kfree buffer and read
net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue
net: hns3: fix the port information display when sfp is absent
net: hns3: remove GSO partial feature bit
net: enetc: distinguish error from valid pointers in enetc_fixup_clear_rss_rfs()
sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
linux/export: fix reference to exported functions for parisc64
watchdog: advantech_ec_wdt: fix Kconfig dependencies
drm/amd/display: Temporary Disable MST DP Colorspace Property
ARC: atomics: Add compiler barrier to atomic operations...
clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL
dmaengine: sh: rz-dmac: Fix destination and source data size setting
misc: fastrpc: Fix remote heap allocation request
misc: fastrpc: Fix incorrect DMA mapping unmap request
jbd2: fix checkpoint cleanup performance regression
jbd2: check 'jh->b_transaction' before removing it from checkpoint
jbd2: correct the end of the journal recovery scan range
ext4: add correct group descriptors and reserved GDT blocks to system zone
ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
ext4: drop dio overwrite only flag and associated warning
f2fs: get out of a repeat loop when getting a locked data page
f2fs: flush inode if atomic file is aborted
f2fs: avoid false alarm of circular locking
lib: test_scanf: Add explicit type cast to result initialization in test_number_prefix()
hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation
memcontrol: ensure memcg acquired by id is properly set up
ata: ahci: Add Elkhart Lake AHCI controller
ata: pata_falcon: fix IO base selection for Q40
ata: sata_gemini: Add missing MODULE_DESCRIPTION
ata: pata_ftide010: Add missing MODULE_DESCRIPTION
fuse: nlookup missing decrement in fuse_direntplus_link
btrfs: zoned: do not zone finish data relocation block group
btrfs: fix start transaction qgroup rsv double free
btrfs: free qgroup rsv on io failure
btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
btrfs: set page extent mapped after read_folio in relocate_one_page
btrfs: zoned: re-enable metadata over-commit for zoned mode
btrfs: use the correct superblock to compare fsid in btrfs_validate_super
btrfs: scrub: avoid unnecessary extent tree search preparing stripes
btrfs: scrub: avoid unnecessary csum tree search preparing stripes
btrfs: scrub: fix grouping of read IO
drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()
mtd: rawnand: brcmnand: Fix crash during the panic_write
mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
mtd: spi-nor: Correct flags for Winbond w25q128
mtd: rawnand: brcmnand: Fix potential false time out warning
mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
Revert "drm/amd/display: Remove v_startup workaround for dcn3+"
drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
drm/amd/display: limit the v_startup workaround to ASICs older than DCN3.1
drm/amd/display: prevent potential division by zero errors
KVM: VMX: Refresh available regs and IDT vectoring info before NMI handling
KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry
KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn
KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration
KVM: nSVM: Check instead of asserting on nested TSC scaling support
KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state
KVM: SVM: Set target pCPU during IRTE update if target vCPU is running
KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL
MIPS: Only fiddle with CHECKFLAGS if `need-compiler'
MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression
perf hists browser: Fix hierarchy mode header
perf build: Update build rule for generated files
perf test shell stat_bpf_counters: Fix test on Intel
perf tools: Handle old data in PERF_RECORD_ATTR
perf build: Include generated header files properly
perf hists browser: Fix the number of entries for 'e' key
drm/amd/display: always switch off ODM before committing more streams
drm/amd/display: Remove wait while locked
drm/amdkfd: Add missing gfx11 MQD manager callbacks
drm/amdgpu: register a dirty framebuffer callback for fbcon
bpf: fix bpf_probe_read_kernel prototype mismatch
regulator: raa215300: Change the scope of the variables {clkin_name, xin_name}
regulator: raa215300: Fix resource leak in case of error
parisc: sba_iommu: Fix build warning if procfs if disabled
kunit: Fix wild-memory-access bug in kunit_free_suite_set()
net: ipv4: fix one memleak in __inet_del_ifa()
kselftest/runner.sh: Propagate SIGTERM to runner child
selftests: Keep symlinks, when possible
selftests/ftrace: Fix dependencies for some of the synthetic event tests
net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule()
octeontx2-pf: Fix page pool cache index corruption.
net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add
net: stmmac: fix handling of zero coalescing tx-usecs
net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
hsr: Fix uninit-value access in fill_frame_info()
net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast address
net:ethernet:adi:adin1110: Fix forwarding offload
net: dsa: sja1105: hide all multicast addresses from "bridge fdb show"
net: dsa: sja1105: propagate exact error code from sja1105_dynamic_config_poll_valid()
net: dsa: sja1105: fix multicast forwarding working only for last added mdb entry
net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB accesses
net: dsa: sja1105: block FDB accesses that are concurrent with a switch reset
r8152: check budget for r8152_poll()
kcm: Fix memory leak in error path of kcm_sendmsg()
platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
platform/mellanox: NVSW_SN2201 should depend on ACPI
UBUNTU: [Config] updateconfigs for NVSW_SN2201
net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
net: macb: fix sleep inside spinlock
veth: Update XDP feature set when bringing up device
ipv6: fix ip6_sock_set_addr_preferences() typo
tcp: Factorise sk_family-independent comparison in inet_bind2_bucket_match(_addr_any).
tcp: Fix bind() regression for v4-mapped-v6 wildcard address.
tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address.
selftest: tcp: Fix address length in bind_wildcard.c.
ixgbe: fix timestamp configuration code
igb: clean up in all error paths when enabling SR-IOV
net: renesas: rswitch: Fix unmasking irq condition
kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
vm: fix move_vma() memory accounting being off
drm/amd/display: Fix a bug when searching for insert_above_mpcc
Linux 6.5.4
UBUNTU: Upstream stable to v6.5.4