Noble update: v6.6.7 upstream stable release

[Paolo Pisati]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.6.7 upstream stable release
       from git://git.kernel.org/

Linux 6.6.7
drm/amdgpu: Restrict extended wait to PSP v13.0.6
drm/amdgpu: update retry times for psp BL wait
drm/amdgpu: Fix refclk reporting for SMU v13.0.6
riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE
gcc-plugins: randstruct: Update code comment in relayout_struct()
ASoC: qcom: sc8280xp: Limit speaker digital volumes
netfilter: nft_set_pipapo: skip inactive elements during set walk
MIPS: Loongson64: Enable DMA noncoherent support
MIPS: Loongson64: Handle more memory types passed from firmware
MIPS: Loongson64: Reserve vgabios memory on boot
perf metrics: Avoid segv if default metricgroup isn't set
perf list: Fix JSON segfault by setting the used skip_duplicate_pmus callback
KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
KVM: s390/mm: Properly reset no-dat
MIPS: kernel: Clear FPU states when setting up kernel threads
cifs: Fix flushing, invalidation and file size with FICLONE
cifs: Fix flushing, invalidation and file size with copy_file_range()
USB: gadget: core: adjust uevent timing on gadget unbind
powerpc/ftrace: Fix stack teardown in ftrace_no_trace
x86/CPU/AMD: Check vendor in the AMD microcode callback
devcoredump: Send uevent once devcd is ready
serial: 8250_omap: Add earlycon support for the AM654 UART controller
serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt
serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit
serial: sc16is7xx: address RX timeout interrupt errata
ARM: PL011: Fix DMA support
usb: typec: class: fix typec_altmode_put_partner to put plugs
smb: client: fix potential NULL deref in parse_dfs_referrals()
Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1"
cifs: Fix non-availability of dedup breaking generic/304
parport: Add support for Brainboxes IX/UC/PX parallel cards
serial: ma35d1: Validate console index before assignment
serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART
nvmem: Do not expect fixed layouts to grab a layout driver
usb: gadget: f_hid: fix report descriptor allocation
kprobes: consistent rcu api usage for kretprobe holder
ASoC: ops: add correct range check for limiting volume
gpiolib: sysfs: Fix error handling on failed export
x86/sev: Fix kernel crash due to late update to read-only ghcb_version
perf: Fix perf_event_validate_size()
drm/amdgpu: disable MCBP by default
arm64: dts: mt8183: kukui: Fix underscores in node names
arm64: dts: mediatek: add missing space before {
parisc: Fix asm operand number out of range build error in bug table
parisc: Reduce size of the bug_table on 64-bit kernel by half
LoongArch: BPF: Don't sign extend function return value
LoongArch: BPF: Don't sign extend memory load operand
perf vendor events arm64: AmpereOne: Add missing DefaultMetricgroupName fields
misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write
misc: mei: client.c: return negative error code in mei_cl_write
coresight: ultrasoc-smb: Fix uninitialized before use buf_hw_base
coresight: ultrasoc-smb: Config SMB buffer before register sink
coresight: ultrasoc-smb: Fix sleep while close preempt in enable_smb
hwtracing: hisi_ptt: Add dummy callback pmu::read()
coresight: Fix crash when Perf and sysfs modes are used concurrently
coresight: etm4x: Remove bogous __exit annotation for some functions
arm64: dts: mediatek: mt8186: Change gpu speedbin nvmem cell name
arm64: dts: mediatek: mt8186: fix clock names for power domains
arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc
arm64: dts: mediatek: mt8183: Move thermal-zones to the root node
arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory
arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks
arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names
arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7
arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties
arm64: dts: mediatek: mt7622: fix memory node warning check
arm64: dts: mt7986: fix emmc hs400 mode without uboot initialization
arm64: dts: mt7986: define 3W max power to both SFP on BPI-R3
arm64: dts: mt7986: change cooling trips
drm/i915: Skip some timing checks on BXT/GLK DSI transcoders
drm/i915/mst: Reject modes that require the bigjoiner
drm/i915/mst: Fix .mode_valid_ctx() return values
drm/atomic-helpers: Invoke end_fb_access while owning plane state
md/raid6: use valid sector values to determine if an I/O should wait on the reshape
powercap: DTPM: Fix missing cpufreq_cpu_put() calls
mm/memory_hotplug: fix error handling in add_memory_resource()
mm: fix oops when filemap_map_pmd() without prealloc_pte
mm/memory_hotplug: add missing mem_hotplug_lock
drivers/base/cpu: crash data showing should depends on KEXEC_CORE
hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
workqueue: Make sure that wq_unbound_cpumask is never empty
platform/surface: aggregator: fix recv_buf() return value
regmap: fix bogus error on regcache_sync success
r8169: fix rtl8125b PAUSE frames blasting when suspended
packet: Move reference count in packet_sock to atomic_long_t
nfp: flower: fix for take a mutex lock in soft irq context and rcu lock
leds: trigger: netdev: fix RTNL handling to prevent potential deadlock
tracing: Fix a possible race when disabling buffered events
tracing: Fix incomplete locking when disabling buffered events
tracing: Disable snapshot buffer when stopping instance tracers
tracing: Stop current tracer when resizing buffer
tracing: Always update snapshot buffer size
checkstack: fix printed address
cgroup_freezer: cgroup_freezing: Check if not frozen
lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly
nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
nilfs2: fix missing error check for sb_set_blocksize call
highmem: fix a memory copy problem in memcpy_from_folio
ring-buffer: Force absolute timestamp on discard of event
ring-buffer: Test last update in 32bit version of __rb_time_read()
ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7
ALSA: hda/realtek: Add Framework laptop 16 to quirks
ALSA: hda/realtek: add new Framework laptop to quirks
ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5
ALSA: hda/realtek: fix speakers on XPS 9530 (2023)
ALSA: hda/realtek: Apply quirk for ASUS UM3504DA
ALSA: pcm: fix out-of-bounds in snd_pcm_state_names
ALSA: usb-audio: Add Pioneer DJM-450 mixer controls
io_uring: fix mutex_unlock with unreferenced ctx
nvme-pci: Add sleep quirk for Kingston drives
io_uring/af_unix: disable sending io_uring over sockets
ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA
rethook: Use __rcu pointer for rethook::handler
scripts/gdb: fix lx-device-list-bus and lx-device-list-class
kernel/Kconfig.kexec: drop select of KEXEC for CRASH_DUMP
md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly()
riscv: errata: andes: Probe for IOCP only once in boot stage
riscv: fix misaligned access handling of C.SWSP and C.SDSP
arm64: dts: rockchip: Fix eMMC Data Strobe PD on rk3588
ARM: dts: imx28-xea: Pass the 'model' property
ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt
arm64: dts: imx8-apalis: set wifi regulator to always-on
ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init
arm64: dts: imx93: correct mediamix power
arm64: dts: freescale: imx8-ss-lsio: Fix #pwm-cells
arm64: dts: imx8-ss-lsio: Add PWM interrupts
scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()
tracing: Fix a warning when allocating buffered events fails
io_uring/kbuf: check for buffer list readiness after NULL check
io_uring/kbuf: Fix an NULL vs IS_ERR() bug in io_alloc_pbuf_ring()
ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock
arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3
drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS
RDMA/irdma: Avoid free the non-cqp_request scratch
RDMA/irdma: Fix support for 64k pages
RDMA/irdma: Ensure iWarp QP queue memory is OS paged aligned
RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz
ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate
firmware: arm_scmi: Fix possible frequency truncation when using level indexing mode
firmware: arm_scmi: Simplify error path in scmi_dvfs_device_opps_add()
firmware: arm_scmi: Fix frequency truncation by promoting multiplier type
firmware: arm_scmi: Extend perf protocol ops to get information of a domain
firmware: arm_scmi: Extend perf protocol ops to get number of domains
hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe()
ASoC: codecs: lpass-tx-macro: set active_decimator correct default value
hwmon: (acpi_power_meter) Fix 4.29 MW bug
ARM: dts: bcm2711-rpi-400: Fix delete-node of led_act
ARM: dts: rockchip: Fix sdmmc_pwren's pinmux setting for RK3128
ARM: dts: imx6q: skov: fix ethernet clock regression
arm64: dt: imx93: tqma9352-mba93xxla: Fix LPUART2 pad config
RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info()
RDMA/bnxt_re: Correct module description string
RDMA/rtrs-clt: Remove the warnings for req in_use check
RDMA/rtrs-clt: Fix the max_send_wr setting
RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight
RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true
RDMA/rtrs-srv: Check return values while processing info request
RDMA/rtrs-clt: Start hb after path_up
RDMA/rtrs-srv: Do not unconditionally enable irq
ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP
arm64: dts: rockchip: Expand reg size of vdec node for RK3399
arm64: dts: rockchip: Expand reg size of vdec node for RK3328
RDMA/irdma: Add wait for suspend on SQD
RDMA/irdma: Do not modify to SQD on error
RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm
RDMA/core: Fix uninit-value access in ib_get_eth_speed()
tee: optee: Fix supplicant based device enumeration
mm/damon/sysfs: eliminate potential uninitialized variable warning
drm/amdkfd: get doorbell's absolute offset based on the db_size
drm/amd/amdgpu/amdgpu_doorbell_mgr: Correct misdocumented param 'doorbell_index'
net/smc: fix missing byte order conversion in CLC handshake
net: dsa: microchip: provide a list of valid protocols for xmit handler
drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group
psample: Require 'CAP_NET_ADMIN' when joining "packets" group
bpf: sockmap, updating the sg structure should also update curr
net: tls, update curr on splice as well
net: dsa: mv88e6xxx: Restore USXGMII support for 6393X
tcp: do not accept ACK of bytes we never sent
netfilter: xt_owner: Fix for unsafe access of sk->sk_socket
netfilter: nf_tables: validate family when identifying table via handle
netfilter: nf_tables: bail out on mismatching dynset and set expressions
netfilter: nf_tables: fix 'exist' matching on bigendian arches
netfilter: bpf: fix bad registration on nf_defrag
dt-bindings: interrupt-controller: Allow #power-domain-cells
octeontx2-af: Update Tx link register range
octeontx2-af: Add missing mcs flr handler call
octeontx2-af: Fix mcs stats register address
octeontx2-af: Fix mcs sa cam entries size
octeontx2-af: Adjust Tx credits when MCS external bypass is disabled
net: hns: fix fake link up on xge port
net: hns: fix wrong head when modify the tx feature when sending packets
net: atlantic: Fix NULL dereference of skb pointer in
ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
ionic: Fix dim work handling in split interrupt mode
ionic: fix snprintf format length warning
tcp: fix mid stream window clamp.
net: bnxt: fix a potential use-after-free in bnxt_init_tc
iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero
i40e: Fix unexpected MFS warning message
ice: Restore fix disabling RX VLAN filtering
octeontx2-af: fix a use-after-free in rvu_npa_register_reporters
xsk: Skip polling event check for unbound socket
net: stmmac: fix FPE events losing
octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing
arcnet: restoring support for multiple Sohard Arcnet cards
platform/mellanox: Check devm_hwmon_device_register_with_groups() return value
platform/mellanox: Add null pointer checks for devm_kasprintf()
mlxbf-bootctl: correctly identify secure boot with development keys
r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en()
r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1()
r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash()
r8152: Add RTL8152_INACCESSIBLE checks to more loops
r8152: Hold the rtnl_lock for all of reset
hv_netvsc: rndis_filter needs to select NLS
bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4
octeontx2-af: Check return value of nix_get_nixlf before using nixlf
octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam
ipv6: fix potential NULL deref in fib6_add()
platform/x86: wmi: Skip blocks with zero instances
of: dynamic: Fix of_reconfig_get_state_change() return value documentation
platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code
dt: dt-extract-compatibles: Don't follow symlinks when walking tree
dt: dt-extract-compatibles: Handle cfile arguments in generator function
x86/tdx: Allow 32-bit emulation by default
x86/entry: Do not allow external 0x80 interrupts
x86/entry: Convert INT 0x80 emulation to IDTENTRY
x86/coco: Disable 32-bit emulation by default on TDX and SEV
x86: Introduce ia32_enabled()
dm-crypt: start allocating with MAX_ORDER
drm/amdgpu: correct chunk_ptr to a pointer to chunk.
drm/amdgpu: finalizing mem_partitions at the end of GMC v9 sw_fini
drm/amdgpu: Do not program VF copy regs in mmhub v1.8 under SRIOV (v2)
kconfig: fix memory leak from range properties
modpost: fix section mismatch message for RELA
tg3: Increment tx_dropped in tg3_tso_bug()
tg3: Move the [rt]x_dropped counters to tg3_napi
zstd: Fix array-index-out-of-bounds UBSAN warning
nouveau: use an rwlock for the event lock.
netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test
i2c: ocores: Move system PM hooks to the NOIRQ phase
i2c: designware: Fix corrupted memory seen in the ISR
hrtimers: Push pending hrtimers away from outgoing CPU earlier
scsi: sd: Fix sshdr use in sd_suspend_common()
vdpa/mlx5: preserve CVQ vringh index