Focal update: v5.4.69 upstream stable release

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.4.69 upstream stable release
       from git://git.kernel.org/

kernel/sysctl-test: Add null pointer test for sysctl.c:proc_dointvec()
selinux: allow labeling before policy is loaded
media: mc-device.c: fix memleak in media_device_register_entity
drm/amd/display: Do not double-buffer DTO adjustments
drm/amdkfd: Fix race in gfx10 context restore handler
dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling)
scsi: qla2xxx: Add error handling for PLOGI ELS passthrough
ath10k: fix array out-of-bounds access
ath10k: fix memory leak for tpc_stats_final
PCI/IOV: Serialize sysfs sriov_numvfs reads vs writes
mm: fix double page fault on arm64 if PTE_AF is cleared
scsi: aacraid: fix illegal IO beyond last LBA
m68k: q40: Fix info-leak in rtc_ioctl
xfs: fix inode fork extent count overflow
gma/gma500: fix a memory disclosure bug due to uninitialized bytes
ASoC: kirkwood: fix IRQ error handling
soundwire: intel/cadence: fix startup sequence
media: smiapp: Fix error handling at NVM reading
drm/amd/display: Free gamma after calculating legacy transfer function
xfs: properly serialise fallocate against AIO+DIO
leds: mlxreg: Fix possible buffer overflow
dm table: do not allow request-based DM to stack on partitions
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
scsi: fnic: fix use after free
powerpc/64s: Always disable branch profiling for prom_init.o
net: silence data-races on sk_backlog.tail
dax: Fix alloc_dax_region() compile warning
iomap: Fix overflow in iomap_page_mkwrite
f2fs: avoid kernel panic on corruption test
clk/ti/adpll: allocate room for terminating null
drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table
ice: Fix to change Rx/Tx ring descriptor size via ethtool with DCBx
mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup()
mfd: mfd-core: Protect against NULL call-back function pointer
drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table
tpm_crb: fix fTPM on AMD Zen+ CPUs
tracing: Verify if trace array exists before destroying it.
tracing: Adding NULL checks for trace_array descriptor pointer
bcache: fix a lost wake-up problem caused by mca_cannibalize_lock
dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq fails
x86/kdump: Always reserve the low 1M when the crashkernel option is specified
RDMA/qedr: Fix potential use after free
RDMA/i40iw: Fix potential use after free
PCI: Avoid double hpmemsize MMIO window assignment
fix dget_parent() fastpath race
xfs: fix attr leaf header freemap.size underflow
RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()'
ubi: Fix producing anchor PEBs
mmc: core: Fix size overflow for mmc partitions
gfs2: clean up iopen glock mess in gfs2_create_inode
scsi: pm80xx: Cleanup command when a reset times out
mt76: do not use devm API for led classdev
mt76: add missing locking around ampdu action
debugfs: Fix !DEBUG_FS debugfs_create_automount
SUNRPC: Capture completion of all RPC tasks
CIFS: Use common error handling code in smb2_ioctl_query_info()
CIFS: Properly process SMB3 lease breaks
f2fs: stop GC when the victim becomes fully valid
ASoC: max98090: remove msleep in PLL unlocked workaround
xtensa: fix system_call interaction with ptrace
s390: avoid misusing CALL_ON_STACK for task stack setup
xfs: fix realtime file data space leak
drm/amdgpu: fix calltrace during kmd unload(v3)
arm64: insn: consistently handle exit text
selftests/bpf: De-flake test_tcpbpf
kernel/notifier.c: intercept duplicate registrations to avoid infinite loops
kernel/sys.c: avoid copying possible padding bytes in copy_to_user
KVM: arm/arm64: vgic: Fix potential double free dist->spis in __kvm_vgic_destroy()
module: Remove accidental change of module_enable_x()
xfs: fix log reservation overflows when allocating large rt extents
ALSA: hda: enable regmap internal locking
tipc: fix link overflow issue at socket shutdown
vcc_seq_next should increase position index
neigh_stat_seq_next() should increase position index
rt_cpu_seq_next should increase position index
ipv6_route_seq_next should increase position index
drm/mcde: Handle pending vblank while disabling display
seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier
drm/scheduler: Avoid accessing freed bad job.
media: ti-vpe: cal: Restrict DMA to avoid memory corruption
opp: Replace list_kref with a local counter
scsi: qla2xxx: Fix stuck session in GNL
sctp: move trace_sctp_probe_path into sctp_outq_sack
ACPI: EC: Reference count query handlers under lock
scsi: ufs: Make ufshcd_add_command_trace() easier to read
scsi: ufs: Fix a race condition in the tracing code
drm/amd/display: Initialize DSC PPS variables to 0
i2c: tegra: Prevent interrupt triggering after transfer timeout
btrfs: tree-checker: Check leaf chunk item size
dmaengine: zynqmp_dma: fix burst length configuration
s390/cpum_sf: Use kzalloc and minor changes
nfsd: Fix a soft lockup race in nfsd_file_mark_find_or_create()
powerpc/eeh: Only dump stack once if an MMIO loop is detected
Bluetooth: btrtl: Use kvmalloc for FW allocations
tracing: Set kernel_stack's caller size properly
ARM: 8948/1: Prevent OOB access in stacktrace
ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter
ceph: ensure we have a new cap before continuing in fill_inode
selftests/ftrace: fix glob selftest
tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility
Bluetooth: Fix refcount use-after-free issue
mm/swapfile.c: swap_next should increase position index
mm: pagewalk: fix termination condition in walk_pte_range()
Bluetooth: prefetch channel before killing sock
ALSA: hda: Clear RIRB status before reading WP
skbuff: fix a data race in skb_queue_len()
nfsd: Fix a perf warning
drm/amd/display: fix workaround for incorrect double buffer register for DLG ADL and TTU
audit: CONFIG_CHANGE don't log internal bookkeeping as an event
selinux: sel_avc_get_stat_idx should increase position index
drm/omap: fix possible object reference leak
locking/lockdep: Decrement IRQ context counters when removing lock chain
clk: stratix10: use do_div() for 64-bit calculation
crypto: chelsio - This fixes the kernel panic which occurs during a libkcapi test
mt76: clear skb pointers from rx aggregation reorder buffer during cleanup
mt76: fix handling full tx queues in mt76_dma_tx_queue_skb_raw
ALSA: usb-audio: Don't create a mixer element with bogus volume range
perf test: Fix test trace+probe_vfs_getname.sh on s390
RDMA/rxe: Fix configuration of atomic queue pair attributes
KVM: x86: fix incorrect comparison in trace event
KVM: nVMX: Hold KVM's srcu lock when syncing vmcs12->shadow
dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all
media: staging/imx: Missing assignment in imx_media_capture_device_register()
x86/pkeys: Add check for pkey "overflow"
bpf: Remove recursion prevention from rcu free callback
dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all
dmaengine: tegra-apb: Prevent race conditions on channel's freeing
soundwire: bus: disable pm_runtime in sdw_slave_delete
drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic
drm/omap: dss: Cleanup DSS ports on initialisation failure
iavf: use tc_cls_can_offload_and_chain0() instead of chain check
firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp
random: fix data races at timer_rand_state
bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
ASoC: SOF: ipc: check ipc return value before data copy
media: go7007: Fix URB type for interrupt handling
Bluetooth: guard against controllers sending zero'd events
timekeeping: Prevent 32bit truncation in scale64_check_overflow()
powerpc/book3s64: Fix error handling in mm_iommu_do_alloc()
drm/amd/display: fix image corruption with ODM 2:1 DSC 2 slice
ext4: fix a data race at inode->i_disksize
perf jevents: Fix leak of mapfile memory
mm: avoid data corruption on CoW fault into PFN-mapped VMA
drm/amdgpu: increase atombios cmd timeout
ARM: OMAP2+: Handle errors for cpu_pm
clk: imx: Fix division by zero warning on pfdv2
cpu-topology: Fix the potential data corruption
s390/irq: replace setup_irq() by request_irq()
perf cs-etm: Swap packets for instruction samples
perf cs-etm: Correct synthesizing instruction samples
ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read
scsi: aacraid: Disabling TM path and only processing IOP reset
Bluetooth: L2CAP: handle l2cap config request during open state
media: tda10071: fix unsigned sign extension overflow
tty: sifive: Finish transmission before changing the clock
xfs: don't ever return a stale pointer from __xfs_dir3_free_read
xfs: mark dir corrupt when lookup-by-hash fails
ext4: mark block bitmap corrupted when found instead of BUGON
tpm: ibmvtpm: Wait for buffer to be set before proceeding
rtc: sa1100: fix possible race condition
rtc: ds1374: fix possible race condition
nfsd: Don't add locks to closed or closing open stateids
RDMA/cm: Remove a race freeing timewait_info
intel_th: Disallow multi mode on devices where it's broken
KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like the valid ones
drm/msm: fix leaks if initialization fails
drm/msm/a5xx: Always set an OPP supported hardware value
tracing: Use address-of operator on section symbols
thermal: rcar_thermal: Handle probe error gracefully
KVM: LAPIC: Mark hrtimer for period or oneshot mode to expire in hard interrupt context
perf parse-events: Fix 3 use after frees found with clang ASAN
btrfs: do not init a reloc root if we aren't relocating
btrfs: free the reloc_control in a consistent way
r8169: improve RTL8168b FIFO overflow workaround
serial: 8250_port: Don't service RX FIFO if throttled
serial: 8250_omap: Fix sleeping function called from invalid context during probe
serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout
perf cpumap: Fix snprintf overflow check
net: axienet: Convert DMA error handler to a work queue
net: axienet: Propagate failure of DMA descriptor setup
cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn
tools: gpio-hammer: Avoid potential overflow in main
exec: Add exec_update_mutex to replace cred_guard_mutex
exec: Fix a deadlock in strace
selftests/ptrace: add test cases for dead-locks
kernel/kcmp.c: Use new infrastructure to fix deadlocks in execve
proc: Use new infrastructure to fix deadlocks in execve
proc: io_accounting: Use new infrastructure to fix deadlocks in execve
perf: Use new infrastructure to fix deadlocks in execve
nvme-multipath: do not reset on unknown status
nvme: Fix ctrl use-after-free during sysfs deletion
nvme: Fix controller creation races with teardown flow
brcmfmac: Fix double freeing in the fmac usb data path
xfs: prohibit fs freezing when using empty transactions
RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices
IB/iser: Always check sig MR before putting it to the free pool
scsi: hpsa: correct race condition in offload enabled
SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'
svcrdma: Fix leak of transport addresses
netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup()
PCI: Use ioremap(), not phys_to_virt() for platform ROM
ubifs: ubifs_jnl_write_inode: Fix a memory leak bug
ubifs: ubifs_add_orphan: Fix a memory leak bug
ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len
ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor
PCI: pciehp: Fix MSI interrupt race
NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests()
drm/amdgpu/vcn2.0: stall DPG when WPTR/RPTR reset
powerpc/perf: Implement a global lock to avoid races between trace, core and thread imc events.
mm/kmemleak.c: use address-of operator on section symbols
mm/filemap.c: clear page error before actual read
mm/swapfile: fix data races in try_to_unuse()
mm/vmscan.c: fix data races using kswapd_classzone_idx
SUNRPC: Don't start a timer on an already queued rpc task
nvmet-rdma: fix double free of rdma queue
workqueue: Remove the warning in wq_worker_sleeping()
drm/amdgpu/sriov add amdgpu_amdkfd_pre_reset in gpu reset
mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area
ALSA: hda: Skip controller resume if not needed
scsi: qedi: Fix termination timeouts in session logout
serial: uartps: Wait for tx_empty in console setup
btrfs: fix setting last_trans for reloc roots
KVM: Remove CREATE_IRQCHIP/SET_PIT2 race
perf stat: Force error in fallback on :k events
bdev: Reduce time holding bd_mutex in sync in blkdev_close()
drivers: char: tlclk.c: Avoid data race between init and interrupt handler
KVM: arm64: vgic-v3: Retire all pending LPIs on vcpu destroy
KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi()
net: openvswitch: use u64 for meter bucket
scsi: aacraid: Fix error handling paths in aac_probe_one()
staging:r8188eu: avoid skb_clone for amsdu to msdu conversion
sparc64: vcc: Fix error return code in vcc_probe()
arm64: cpufeature: Relax checks for AArch32 support at EL[0-2]
sched/fair: Eliminate bandwidth race between throttling and distribution
dpaa2-eth: fix error return code in setup_dpni()
dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion
devlink: Fix reporter's recovery condition
atm: fix a memory leak of vcc->user_back
media: venus: vdec: Init registered list unconditionally
perf mem2node: Avoid double free related to realloc
mm/slub: fix incorrect interpretation of s->offset
i2c: tegra: Restore pinmux on system resume
power: supply: max17040: Correct voltage reading
phy: samsung: s5pv210-usb2: Add delay after reset
Bluetooth: Handle Inquiry Cancel error after Inquiry Complete
USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe()
KVM: x86: handle wrap around 32-bit address space
tipc: fix memory leak in service subscripting
tty: serial: samsung: Correct clock selection logic
ALSA: hda: Fix potential race in unsol event handler
drm/exynos: dsi: Remove bridge node reference in error handling path in probe function
ipmi:bt-bmc: Fix error handling and status check
powerpc/traps: Make unrecoverable NMIs die instead of panic
svcrdma: Fix backchannel return code
fuse: don't check refcount after stealing page
fuse: update attr_version counter on fuse_notify_inval_inode()
USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int
coresight: etm4x: Fix use-after-free of per-cpu etm drvdata
arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work
scsi: cxlflash: Fix error return code in cxlflash_probe()
arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register
drm/amdkfd: fix restore worker race condition
e1000: Do not perform reset in reset_task if we are already down
drm/nouveau/debugfs: fix runtime pm imbalance on error
drm/nouveau: fix runtime pm imbalance on error
drm/nouveau/dispnv50: fix runtime pm imbalance on error
printk: handle blank console arguments passed in.
usb: dwc3: Increase timeout for CmdAct cleared by device controller
btrfs: don't force read-only after error in drop snapshot
btrfs: fix double __endio_write_update_ordered in direct I/O
gpio: rcar: Fix runtime PM imbalance on error
vfio/pci: fix memory leaks of eventfd ctx
KVM: PPC: Book3S HV: Close race with page faults around memslot flushes
perf evsel: Fix 2 memory leaks
perf trace: Fix the selection for architectures to generate the errno name tables
perf stat: Fix duration_time value for higher intervals
perf util: Fix memory leak of prefix_if_not_in
perf metricgroup: Free metric_events on error
perf kcore_copy: Fix module map when there are no modules loaded
PCI: tegra194: Fix runtime PM imbalance on error
ASoC: img-i2s-out: Fix runtime PM imbalance on error
wlcore: fix runtime pm imbalance in wl1271_tx_work
wlcore: fix runtime pm imbalance in wlcore_regdomain_config
mtd: rawnand: gpmi: Fix runtime PM imbalance on error
mtd: rawnand: omap_elm: Fix runtime PM imbalance on error
PCI: tegra: Fix runtime PM imbalance on error
ceph: fix potential race in ceph_check_caps
mm/swap_state: fix a data race in swapin_nr_pages
mm: memcontrol: fix stat-corrupting race in charge moving
rapidio: avoid data race between file operation callbacks and mport_cdev_add().
mtd: parser: cmdline: Support MTD names containing one or more colons
x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline
NFS: nfs_xdr_status should record the procedure name
vfio/pci: Clear error and request eventfd ctx after releasing
cifs: Fix double add page to memcg when cifs_readpages
nvme: fix possible deadlock when I/O is blocked
mac80211: skip mpath lookup also for control port tx
scsi: libfc: Handling of extra kref
scsi: libfc: Skip additional kref updating work event
selftests/x86/syscall_nt: Clear weird flags after each test
vfio/pci: fix racy on error and request eventfd ctx
btrfs: qgroup: fix data leak caused by race between writeback and truncate
perf tests: Fix test 68 zstd compression for s390
scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure
ubi: fastmap: Free unused fastmap anchor peb during detach
mt76: fix LED link time failure
opp: Increase parsed_static_opps in _of_add_opp_table_v1()
perf parse-events: Use strcmp() to compare the PMU name
ALSA: hda: Always use jackpoll helper for jack update after resume
ALSA: hda: Workaround for spurious wakeups on some Intel platforms
net: openvswitch: use div_u64() for 64-by-32 divisions
nvme: explicitly update mpath disk capacity on revalidation
device_cgroup: Fix RCU list debugging warning
ASoC: pcm3168a: ignore 0 Hz settings
ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811
ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions
ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
RISC-V: Take text_mutex in ftrace_init_nop()
i2c: aspeed: Mask IRQ status to relevant bits
s390/init: add missing __init annotations
lockdep: fix order in trace_hardirqs_off_caller()
EDAC/ghes: Check whether the driver is on the safe list correctly
drm/amdkfd: fix a memory leak issue
drm/amd/display: update nv1x stutter latencies
drm/amdgpu/dc: Require primary plane to be enabled whenever the CRTC is
objtool: Fix noreturn detection for ignored functions
ieee802154: fix one possible memleak in ca8210_dev_com_init
ieee802154/adf7242: check status of adf7242_read_reg
clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init()
batman-adv: bla: fix type misuse for backbone_gw hash indexing
atm: eni: fix the missed pci_disable_device() for eni_init_one()
batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
mac802154: tx: fix use-after-free
bpf: Fix clobbering of r2 in bpf_gen_ld_abs
drm/vc4/vc4_hdmi: fill ASoC card owner
net: qed: Disable aRFS for NPAR and 100G
net: qede: Disable aRFS for NPAR and 100G
net: qed: RDMA personality shouldn't fail VF load
drm/sun4i: sun8i-csc: Secondary CSC register correction
batman-adv: Add missing include for in_interrupt()
nvme-tcp: fix kconfig dependency warning when !CRYPTO
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
bpf: Fix a rcu warning for bpffs map pretty-print
lib80211: fix unmet direct dependendices config warning when !CRYPTO
ALSA: asihpi: fix iounmap in error handler
regmap: fix page selection for noinc reads
regmap: fix page selection for noinc writes
MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
regulator: axp20x: fix LDO2/4 description
KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
KVM: SVM: Add a dedicated INVD intercept routine
mm: validate pmd after splitting
arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback
x86/ioapic: Unbreak check_timer()
scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported
ALSA: usb-audio: Add delay quirk for H570e USB headsets
ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520
lib/string.c: implement stpcpy
tracing: fix double free
s390/dasd: Fix zero write for FBA devices
kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
kprobes: tracing/kprobes: Fix to kill kprobes on initmem after boot
btrfs: fix overflow when copying corrupt csums for a message
dmabuf: fix NULL pointer dereference in dma_buf_release()
mm, THP, swap: fix allocating cluster for swapfile by mistake
mm/gup: fix gup_fast with dynamic page table folding
s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch
dm: fix bio splitting and its bio completion order for regular IO
ata: define AC_ERR_OK
ata: make qc_prep return ata_completion_errors
ata: sata_mv, avoid trigerrable BUG_ON
Linux 5.4.69
UBUNTU: upstream stable to v5.4.69