Jammy update: v5.15.27 upstream stable release

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.15.27 upstream stable release
       from git://git.kernel.org/

Linux 5.15.27
hamradio: fix macro redefine warning
KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
proc: fix documentation and description of pagemap
Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
btrfs: do not start relocation until in progress drops are done
btrfs: add missing run of delayed items after unlink during log replay
btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
btrfs: do not WARN_ON() if we have PageError set
btrfs: fix relocation crash due to premature return from btrfs_commit_transaction()
btrfs: fix lost prealloc extents beyond eof after full fsync
tracing: Fix return value of __setup handlers
tracing/histogram: Fix sorting on old "cpu" value
HID: add mapping for KEY_ALL_APPLICATIONS
HID: add mapping for KEY_DICTATE
Input: samsung-keypad - properly state IOMEM dependency
Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power()
MAINTAINERS: adjust file entry for of_net.c after movement
iavf: missing unlocks in iavf_watchdog_task()
iavf: do not override the adapter state in the watchdog task (again)
net: stmmac: perserve TX and RX coalesce value during XDP setup
selftests: mlxsw: resource_scale: Fix return value
net: dcb: disable softirqs in dcbnl_flush_dev()
drm/amdgpu: fix suspend/resume hang regression
nl80211: Handle nla_memdup failures in handle_nan_filter
MIPS: ralink: mt7621: use bitwise NOT instead of logical
e1000e: Fix possible HW unit hang after an s0ix exit
drm/bridge: ti-sn65dsi86: Properly undo autosuspend
drm/i915/guc/slpc: Correct the param count for unset param
iavf: Fix __IAVF_RESETTING state usage
iavf: Fix race in init state
iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS
iavf: Fix init state closure on remove
iavf: Add waiting so the port is initialized in remove
iavf: Fix kernel BUG in free_msi_irqs
iavf: Add helper function to go from pci_dev to adapter
iavf: Rework mutexes for better synchronisation
iavf: Add trace while removing device
iavf: Combine init and watchdog state machines
iavf: Add __IAVF_INIT_FAILED state
iavf: Refactor iavf state machine tracking
net: sparx5: Fix add vlan when invalid operation
net: chelsio: cxgb3: check the return value of pci_find_capability()
ibmvnic: complete init_done on transport events
ibmvnic: define flush_reset_queue helper
ibmvnic: initialize rc before completing wait
net: stmmac: only enable DMA interrupts when ready
net: stmmac: enhance XDP ZC driver level switching performance
can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8
ARM: tegra: Move panels to AUX bus
netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
soc: fsl: qe: Check of ioremap return value
soc: fsl: guts: Add a missing memory allocation failure check
soc: fsl: guts: Revert commit 3c0d64e867ed
ARM: dts: Use 32KiHz oscillator on devkit8000
ARM: dts: switch timer config to common devkit8000 devicetree
MIPS: ralink: mt7621: do memory detection on KSEG1
iommu/amd: Fix I/O page table memory leak
arm64: dts: juno: Remove GICv2m dma-range
sched: Fix yet more sched_fork() races
s390/extable: fix exception table sorting
memfd: fix F_SEAL_WRITE after shmem huge page allocated
ibmvnic: free reset-work-item when flushing
igc: igc_write_phy_reg_gpy: drop premature return
pinctrl: sunxi: Use unique lockdep classes for IRQs
selftests: mlxsw: tc_police_scale: Make test more robust
mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
mips: setup: fix setnocoherentio() boolean setting
ARM: Fix kgdb breakpoint for Thumb2
igc: igc_read_phy_reg_gpy: drop premature return
arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find
can: gs_usb: change active_channels's type from atomic_t to u8
auxdisplay: lcd2s: Use proper API to free the instance of charlcd object
auxdisplay: lcd2s: Fix memory leak in ->remove()
ASoC: cs4265: Fix the duplicated control name
firmware: arm_scmi: Remove space in MODULE_ALIAS name
auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature
efivars: Respect "block" flag in efivar_entry_set_safe()
iavf: Fix deadlock in iavf_reset_task
ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
ibmvnic: register netdev after init of adapter
net: sxgbe: fix return value of __setup handler
iavf: Fix missing check for running netdev
mac80211: treat some SAE auth steps as final
net: stmmac: fix return value of __setup handler
mac80211: fix forwarded mesh frames AC & queue selection
btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range
net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
net/smc: fix connection leak
net: ipa: add an interconnect dependency
net: dcb: flush lingering app table entries for unregistered devices
net: ipv6: ensure we call ipv6_mc_down() at most once
batman-adv: Don't expect inter-netns unique iflink indices
batman-adv: Request iflink once in batadv_get_real_netdevice
batman-adv: Request iflink once in batadv-on-batadv check
netfilter: nf_queue: handle socket prefetch
netfilter: nf_queue: fix possible use-after-free
netfilter: nf_queue: don't assume sk is full socket
net: fix up skbs delta_truesize in UDP GRO frag_list
e1000e: Correct NVM checksum verification flow
xfrm: enforce validity of offload input flags
xfrm: fix the if_id check in changelink
bpf, sockmap: Do not ignore orig_len parameter
netfilter: fix use-after-free in __nf_register_net_hook()
xfrm: fix MTU regression
mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
ntb: intel: fix port config status offset for SPR
blktrace: fix use after free for struct blk_trace
mac80211: fix EAPoL rekey fail in 802.3 rx path
thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
xen/netfront: destroy queues before real_num_tx_queues is zeroed
drm/amd/display: Reduce dmesg error to a debug print
drm/i915: s/JSP2/ICP2/ PCH
iommu/amd: Recover from event log overflow
iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
iwlwifi: mvm: check debugfs_dir ptr before use
riscv: Fix config KASAN && DEBUG_VIRTUAL
riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value
ucounts: Fix systemd LimitNPROC with private users regression
ALSA: intel_hdmi: Fix reference to PCM buffer address
net: of: fix stub of_net helpers for CONFIG_NET=n
PCI: mvebu: Fix device enumeration regression
drm/amd/display: For vblank_disable_immediate, check PSR is really used
bnxt_en: Fix occasional ethtool -t loopback test failures
drm/amd/display: Fix stream->link_enc unassigned during stream removal
cifs: fix confusing unneeded warning message on smb2.1 and earlier
cifs: protect session channel fields with chan_lock
drm/mediatek: mtk_dsi: Reset the dsi0 hardware
net: ethernet: litex: Add the dependency on HAS_IOMEM
of: net: move of_net under net/
ibmvnic: don't release napi in __ibmvnic_open()
net: dsa: seville: register the mdiobus under devres
net: dsa: ocelot: seville: utilize of_mdiobus_register
gve: Recording rx queue before sending to napi
drm/i915: Disable DRRS on IVB/HSW port != A
drm/i915/display: Move DRRS code its own file
drm/i915/display: split out dpt out of intel_display.c
riscv/mm: Add XIP_FIXUP for phys_ram_base
drm: mxsfb: Fix NULL pointer dereference
drm: mxsfb: Set fallback bus format when the bridge doesn't provide one
drm/amd/display: Update watermark values for DCN301
bpf: Fix possible race in inc_misses_counter
bpf: Use u64_stats_t in struct bpf_prog_stats
net/mlx5e: IPsec: Fix crypto offload for non TCP/UDP encapsulated traffic
net/mlx5e: IPsec: Refactor checksum code in tx data path
octeontx2-af: Add KPU changes to parse NGIO as separate layer
octeontx2-af: Adjust LA pointer for cpt parse header
octeontx2-af: cn10k: Use appropriate register for LMAC enable
octeontx2-af: cn10k: RPM hardware timestamp configuration
octeontx2-af: Reset PTP config in FLR handler
octeontx2-af: Optimize KPU1 processing for variable-length headers
ethtool: Fix link extended state for big endian
drm/amd/display: move FPU associated DSC code to DML folder
drm/amd/display: Use adjusted DCN301 watermarks
drm/amdgpu: filter out radeon secondary ids as well
drm/amdgpu: filter out radeon PCI device IDs
drm/amdgpu/display: Only set vblank_disable_immediate when PSR is not enabled
hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup setting
kasan: fix quarantine conflicting with init_on_free
mm: defer kmemleak object creation of module_alloc()
tracing/probes: check the return value of kstrndup() for pbuf
tracing/uprobes: Check the return value of kstrdup() for tu->filename
dma-buf: cma_heap: Fix mutex locking section
i3c: master: dw: check return of dw_i3c_master_get_free_pos()
drm/amdgpu: use spin_lock_irqsave to avoid deadlock by local interrupt
drm/amdkfd: Check for null pointer after calling kmemdup
ntb_hw_switchtec: Fix bug with more than 32 partitions
ntb_hw_switchtec: Fix pff ioread to read into mmio_part_cfg_all
drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable in self refresh mode
drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get
SUNRPC: Fix sockaddr handling in svcsock_accept_class trace points
SUNRPC: Fix sockaddr handling in the svc_xprt_create_error trace point
drm/i915: don't call free_mmap_offset when purging
x86/hyperv: Properly deal with empty cpumasks in hyperv_flush_tlb_multi()
nfsd: fix crash on COPY_NOTIFY with special stateid
Revert "nfsd: skip some unnecessary stats in the v4 case"
NFSD: Fix verifier returned in stable WRITEs
PCI: mvebu: Fix support for DEVCAP2, DEVCTL2 and LNKCTL2 registers on emulated bridge
PCI: mvebu: Fix support for PCI_EXP_RTSTA on emulated bridge
PCI: mvebu: Fix support for PCI_EXP_DEVCTL on emulated bridge
PCI: mvebu: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
PCI: mvebu: Setup PCIe controller to Root Complex mode
PCI: mvebu: Fix configuring secondary bus of PCIe Root Port via emulated bridge
PCI: mvebu: Fix support for bus mastering and PCI_COMMAND on emulated bridge
PCI: mvebu: Do not modify PCI IO type bits in conf_write
PCI: mvebu: Check for errors from pci_bridge_emul_init() call
Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2
Input: ti_am335x_tsc - set ADCREFM for X configuration
tracing: Do not let synth_events block other dyn_event systems during create
i3c/master/mipi-i3c-hci: Fix a potentially infinite loop in 'hci_dat_v1_get_index()'
i3c: fix incorrect address slot lookup on 64-bit
KVM: x86: Exit to userspace if emulation prepared a completion callback
KVM: x86: Handle 32-bit wrap of EIP for EMULTYPE_SKIP with flat code seg
KVM: X86: Ensure that dirty PDPTRs are loaded
KVM: VMX: Read Posted Interrupt "control" exactly once per loop iteration
KVM: s390: Ensure kvm_arch_no_poll() is read once when blocking vCPU
KVM: VMX: Don't unblock vCPU w/ Posted IRQ if IRQs are disabled in guest
PCI: aardvark: Fix checking for MEM resource type
PCI: dwc: Do not remap invalid res
PCI: rcar: Check if device is runtime suspended instead of __clk_is_enabled()
PCI: mediatek-gen3: Disable DVFSRC voltage request
signal: In get_signal test for signal_group_exit every time through the loop
MIPS: fix local_{add,sub}_return on MIPS64
mtd: spi-nor: Fix mtd size for s3an flashes
tools/resolve_btf_ids: Close ELF file on error
io_uring: fix no lock protection for ctx->cq_extra
NFSD: Fix zero-length NFSv3 WRITEs
NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment()
ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()
tracing: Add ustring operation to filtering string pointers
drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
ata: pata_hpt37x: fix PCI clock detection
sched/fair: Fix fault in reweight_entity
ext4: fast commit may miss file actions
ext4: fast commit may not fallback for ineligible commit
ext4: simplify updating of fast commit stats
ext4: drop ineligible txn start stop APIs
serial: stm32: prevent TDR register overwrite when sending x_char
arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL
tracing: Add test for user space strings when filtering on string pointers
exfat: fix i_blocks for files truncated over 4 GiB
exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
usb: gadget: clear related members when goto fail
usb: gadget: don't release an existing dev->buf
block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
i2c: qup: allow COMPILE_TEST
i2c: imx: allow COMPILE_TEST
i2c: cadence: allow COMPILE_TEST
dmaengine: shdma: Fix runtime PM imbalance on error
selftests/ftrace: Do not trace do_softirq because of PREEMPT_RT
drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby
selftests/seccomp: Fix seccomp failure by adding missing headers
cifs: modefromsids must add an ACE for authenticated users
HID: amd_sfh: Add interrupt handler to process interrupts
HID: amd_sfh: Add functionality to clear interrupts
HID: amd_sfh: Handle amd_sfh work buffer in PM ops
cifs: fix double free race when mount fails in cifs_get_root()
cifs: do not use uninitialized data in the owner/group sid
tipc: fix a bit overflow in tipc_crypto_key_rcv()
block: loop:use kstatfs.f_bsize of backing file to set discard granularity
KVM: arm64: vgic: Read HW interrupt pending state from the HW
btrfs: get rid of warning on transaction commit when using flushoncommit
Input: clear BTN_RIGHT/MIDDLE on buttonpads
regulator: core: fix false positive in regulator_late_cleanup()
ASoC: rt5682: do not block workqueue if card is unbound
ASoC: rt5668: do not block workqueue if card is unbound
i2c: bcm2835: Avoid clock stretching timeouts
mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
mac80211_hwsim: report NOACK frames in tx_status