Jammy update: v5.15.5 upstream stable release

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.15.5 upstream stable release
       from git://git.kernel.org/

Linux 5.15.5
ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign()
ALSA: hda: hdac_ext_stream: fix potential locking issues
x86/Kconfig: Fix an unused variable error in dell-smm-hwmon
net: add and use skb_unclone_keeptruesize() helper
btrfs: update device path inode time instead of bd_inode
fs: export an inode_update_time helper
ice: Delete always true check of PF pointer
ice: Fix VF true promiscuous mode
usb: max-3421: Use driver data instead of maintaining a list of bound devices
ASoC: rsnd: fixup DMAEngine API
ASoC: DAPM: Cover regression by kctl change notification fix
selinux: fix NULL-pointer dereference when hashtab allocation fails
bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
RDMA/netlink: Add __maybe_unused to static inline in C file
hugetlbfs: flush TLBs correctly after huge_pmd_unshare
signal: Replace force_fatal_sig with force_exit_sig when in doubt
signal: Don't always set SA_IMMUTABLE for forced signals
signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV)
signal/x86: In emulate_vsyscall force a signal instead of calling do_exit
signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved.
signal/sparc32: In setup_rt_frame and setup_fram use force_fatal_sig
signal/sparc32: Exit with a fatal signal when try_to_clear_window_buffer fails
signal/s390: Use force_sigsegv in default_trap_handler
signal/powerpc: On swapcontext failure force SIGSEGV
exit/syscall_user_dispatch: Send ordinary signals on failure
signal: Implement force_fatal_sig
drm/amd/pm: avoid duplicate powergate/ungate setting
drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors
drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms
drm/i915/dp: Ensure max link params are always valid
drm/i915/dp: Ensure sink rate values are always valid
drm/nouveau: clean up all clients on device removal
drm/nouveau: use drm_dev_unplug() during device removal
drm/nouveau: Add a dedicated mutex for the clients list
drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
drm/udl: fix control-message timeout
drm/i915/guc: Unwind context requests in reverse order
drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context
drm/i915/guc: Workaround reset G2H is received after schedule done G2H
drm/i915/guc: Don't enable scheduling on a banned context, guc_id invalid, not registered
drm/i915/guc: Fix outstanding G2H accounting
drm/amd/display: Limit max DSC target bpp for specific monitors
drm/amd/display: Update swizzle mode enums
mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
mac80211: fix radiotap header generation
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
parisc/sticon: fix reverse colors
net: stmmac: Fix signed/unsigned wreckage
fs: handle circular mappings correctly
btrfs: fix memory ordering between normal and ordered work functions
Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
net: stmmac: socfpga: add runtime suspend/resume callback for stratix10 platform
spi: fix use-after-free of the add_lock mutex
udf: Fix crash after seekdir
printk: restore flushing of NMI buffers on remote CPUs after NMI backtraces
drm/cma-helper: Release non-coherent memory with dma_free_noncoherent()
KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested state load
KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
fbdev: Prevent probing generic drivers if a FB is already registered
block: Check ADMIN before NICE for IOPRIO_CLASS_RT
s390/dump: fix copying to user-space of swapped kdump oldmem
s390/kexec: fix memory leak of ipl report buffer
s390/vdso: filter out -mstack-guard and -mstack-size
s390/boot: simplify and fix kernel memory layout setup
s390/setup: avoid reserving memory above identity mapping
pinctrl: ralink: include 'ralink_regs.h' in 'pinctrl-mt7620.c'
scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
ata: libata: add missing ata_identify_page_supported() calls
ata: libata: improve ata_read_log_page() error message
Revert "parisc: Reduce sigreturn trampoline to 3 instructions"
Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX
powerpc/xive: Change IRQ domain to a tree domain
powerpc/signal32: Fix sigset_t copy
KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO
KVM: x86/mmu: include EFER.LMA in extended mmu role
KVM: x86: Fix uninitialized eoi_exit_bitmap usage in vcpu_load_eoi_exitmap()
KVM: x86: Assume a 64-bit hypercall for guests with protected state
x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
x86/sgx: Fix free page accounting
x86/boot: Pull up cmdline preparation and early param parsing
mm/damon/dbgfs: fix missed use of damon_dbgfs_lock
mm/damon/dbgfs: use '__GFP_NOWARN' for user-specified size buffer allocation
kmap_local: don't assume kmap PTEs are linear arrays in memory
hugetlb, userfaultfd: fix reservation restore on userfaultfd error
mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
shm: extend forced shm destroy to support objects from several IPC nses
ipc: WARN if trying to remove ipc object which is absent
tipc: check for null after calling kmemdup
hexagon: clean up timer-regs.h
hexagon: export raw I/O routines for modules
pstore/blk: Use "%lu" to format unsigned long
Revert "mark pstore-blk as broken"
tun: fix bonding active backup with arp monitoring
dmaengine: remove debugfs #ifdef
blk-cgroup: fix missing put device in error path from blkg_conf_pref()
s390/kexec: fix return code handling
perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
pinctrl: qcom: sm8350: Correct UFS and SDC offsets
pinctrl: qcom: sdm845: Enable dual edge errata
powerpc/pseries: Fix numa FORM2 parsing fallback code
powerpc/pseries: rename numa_dist_table to form2_distances
powerpc: clean vdso32 and vdso64 directories
KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr()
riscv: fix building external modules
tools build: Fix removal of feature-sync-compare-and-swap feature detection
ptp: ocp: Fix a couple NULL vs IS_ERR() checks
e100: fix device suspend/resume
NFC: add NCI_UNREG flag to eliminate the race
NFC: reorder the logic in nfc_{un,}register_device
NFC: reorganize the functions in nci_request
i40e: Fix display error code in dmesg
i40e: Fix creation of first queue by omitting it if is not power of two
i40e: Fix warning message and call stack during rmmod i40e driver
RDMA/mlx4: Do not fail the registration on port stats
i40e: Fix ping is lost after configuring ADq on VF
i40e: Fix changing previously set num_queue_pairs for PFs
i40e: Fix NULL ptr dereference on VSI filter sync
i40e: Fix correct max_pkt_size on VF RX queue
net: virtio_net_hdr_to_skb: count transport header in UFO
net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
net: sched: act_mirred: drop dst for the direction from egress to ingress
net: mvmdio: fix compilation warning
scsi: ufs: core: Fix another task management completion race
scsi: ufs: core: Fix task management completion timeout race
scsi: core: sysfs: Fix hang when device state is set via sysfs
scsi: ufs: core: Improve SCSI abort handling
net/mlx5: E-Switch, return error if encap isn't supported
net/mlx5: Lag, update tracker when state change event received
net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
net/mlx5: E-Switch, rebuild lag only when needed
net/mlx5: Update error handler for UCTX and UMEM
net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
net/mlx5e: kTLS, Fix crash in RX resync flow
RDMA/core: Set send and receive CQ before forwarding to the driver
btrfs: make 1-bit bit-fields of scrub_page unsigned int
udp: Validate checksum in udp_read_sock()
platform/x86: think-lmi: Abort probe on analyze failure
platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
gpio: rockchip: needs GENERIC_IRQ_CHIP to fix build errors
mips: lantiq: add support for clk_get_parent()
mips: bcm63xx: add support for clk_get_parent()
MIPS: generic/yamon-dt: fix uninitialized variable error
bpf: Fix toctou on read-only map's constant scalar tracking
iavf: Restore VLAN filters after link down
iavf: Fix for setting queues to 0
iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
iavf: validate pointers
iavf: prevent accidental free of filter structure
iavf: Fix failure to exit out from last all-multicast mode
iavf: don't clear a lock we don't hold
iavf: free q_vectors before queues in iavf_disable_vf
iavf: check for null in iavf_fix_features
iavf: Fix return of set the new channel count
NFSD: Fix exposure in nfsd4_decode_bitmap()
net/smc: Make sure the link_id is unique
sock: fix /proc/net/sockstat underflow in sk_clone_lock()
tipc: only accept encrypted MSG_CRYPTO msgs
bnxt_en: reject indirect blk offload when hw-tc-offload is off
net: bnx2x: fix variable dereferenced before check
selftests: gpio: fix gpio compiling error
net: ipa: disable HOLB drop when updating timer
net: ipa: HOLB register sometimes must be written twice
mac80211: fix monitor_sdata RCU/locking assertions
nl80211: fix radio statistics in survey dump
tracing: Add length protection to histogram string copies
tcp: Fix uninitialized access in skb frags array for Rx 0cp.
net/ipa: ipa_resource: Fix wrong for loop range
selftests: net: switch to socat in the GSO GRE test
samples/bpf: Fix incorrect use of strlen in xdp_redirect_cpu
samples/bpf: Fix summary per-sec stats in xdp_sample_user
bpf: Fix inner map state pruning regression.
drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
perf tests: Remove bash construct from record+zstd_comp_decomp.sh
perf bench futex: Fix memory leak of perf_cpu_map__new()
perf bpf: Avoid memory leak from perf_env__insert_btf()
tracing/histogram: Do not copy the fixed-size char array field over the field size
blkcg: Remove extra blkcg_bio_issue_init
perf/x86/vlbr: Add c->flags to vlbr event constraints
sched/fair: Prevent dead task groups from regaining cfs_rq's
sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
MIPS: boot/compressed/: add __bswapdi2() to target for ZSTD decompression
mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
KVM: arm64: Fix host stage-2 finalization
clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
clk/ast2600: Fix soc revision for AHB
clk: ingenic: Fix bugs with divided dividers
f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
f2fs: compress: disallow disabling compress on non-empty compressed file
sh: define __BIG_ENDIAN for math-emu
sh: math-emu: drop unused functions
sh: fix kconfig unmet dependency warning for FRAME_POINTER
f2fs: fix wrong condition to trigger background checkpoint correctly
f2fs: fix to use WHINT_MODE
f2fs: fix up f2fs_lookup tracepoints
maple: fix wrong return value of maple_bus_init().
sh: check return code of request_irq
powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST
powerpc/dcr: Use cmplwi instead of 3-argument cmpli
iommu/dart: Initialize DART_STREAMS_ENABLE
clk: at91: sama7g5: remove prescaler part of master clock
ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
ALSA: gus: fix null pointer dereference on pointer block
arm64: dts: qcom: Fix node name of rpm-msg-ram device nodes
ARM: dts: qcom: fix memory and mdio nodes naming for RB3011
powerpc/5200: dts: fix memory node unit name
memory: tegra20-emc: Add runtime dependency on devfreq governor module
scsi: lpfc: Allow fabric node recovery if recovery is in progress before devloss
scsi: lpfc: Fix link down processing to address NULL pointer dereference
scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
RDMA/core: Use kvzalloc when allocating the struct ib_port
iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr()
scsi: target: Fix alua_tg_pt_gps_count tracking
scsi: target: Fix ordered tag handling
scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
MIPS: sni: Fix the build
tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option
ALSA: ISA: not for M68K
ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash
ARM: dts: ls1021a: move thermal-zones node out of soc/
ASoC: rt5682: fix a little pop while playback
usb: host: ohci-tmio: check return value after calling platform_get_resource()
ARM: dts: omap: fix gpmc,mux-add-data type
ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
HID: multitouch: disable sticky fingers for UPERFECT Y
firmware_loader: fix pre-allocated buf built-in firmware use
ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336 codec
arm64: dts: imx8mm-kontron: Fix reset delays for ethernet PHY
scsi: smartpqi: Add controller handshake during kdump
scsi: advansys: Fix kernel pointer leak
ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
clk: imx: imx6ul: Move csi_sel mux to correct base register
ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and UFX1604
scsi: core: Fix scsi_mode_sense() buffer length handling
ASoC: SOF: Intel: hda-dai: fix potential locking issue
RDMA/rxe: Separate HW and SW l/rkeys
arm64: dts: ls1012a: Add serial alias for ls1012a-rdb
arm64: dts: freescale: fix arm,sp805 compatible string
arm64: dts: qcom: sdm845: Fix qcom,controlled-remotely property
arm64: dts: qcom: ipq8074: Fix qcom,controlled-remotely property
arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property
arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
ARM: BCM53016: Specify switch ports for Meraki MR32
staging: rtl8723bs: remove a third possible deadlock
staging: rtl8723bs: remove a second possible deadlock
staging: rtl8723bs: remove possible deadlock when disconnect (v2)
ARM: dts: ux500: Skomer regulator fixes
usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
usb: musb: tusb6010: check return value after calling platform_get_resource()
bus: ti-sysc: Use context lost quirk for otg
bus: ti-sysc: Add quirk handling for reinit on context lost
RDMA/bnxt_re: Check if the vlan is valid before reporting
arm64: dts: hisilicon: fix arm,sp805 compatible string
arm64: dts: rockchip: Disable CDN DP on Pinebook Pro
ASoC: mediatek: mt8195: Add missing of_node_put()
scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
scsi: pm80xx: Fix memory leak during rmmod
arm64: dts: broadcom: bcm4908: Move reboot syscon out of bus
ARM: dts: NSP: Fix mpcore, mmc node names
ARM: dts: BCM5301X: Fix MDIO mux binding
ARM: dts: BCM5301X: Fix nodes names
staging: wfx: ensure IRQ is ready before enabling it
arm64: dts: allwinner: a100: Fix thermal zone node name
arm64: dts: allwinner: h5: Fix GPU thermal zone node name
ARM: dts: sunxi: Fix OPPs node name
clk: sunxi-ng: Unregister clocks/resets when unbinding
arm64: zynqmp: Fix serial compatible string
arm64: zynqmp: Do not duplicate flash partition label property