Jammy update: v5.17.10 upstream stable release

[Paolo Pisati]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.17.10 upstream stable release
       from git://git.kernel.org/

Linux 5.17.10
afs: Fix afs_getattr() to refetch file status if callback break occurred
i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe()
dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group
Input: ili210x - fix reset timing
arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs
net: atlantic: verify hw_head_ lies within TX buffer ring
net: atlantic: add check for MAX_SKB_FRAGS
net: atlantic: reduce scope of is_rsc_complete
net: atlantic: fix "frag[0] not initialized"
net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()
ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one()
nl80211: fix locking in nl80211_set_tx_bitrate_mask()
net: fix wrong network header length
drm/amd/display: undo clearing of z10 related function pointers
platform/surface: gpe: Add support for Surface Pro 8
platform/x86/intel: Fix 'rmmod pmt_telemetry' panic
platform/x86: thinkpad_acpi: Correct dual fan probe
platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks
fbdev: Prevent possible use-after-free in fb_release()
Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered"
selftests: add ping test with ping_group_range tuned
cfg80211: retrieve S1G operating channel number
nl80211: validate S1G channel width
mac80211: fix rx reordering with non explicit / psmp ack policy
scsi: qla2xxx: Fix missed DMA unmap for aborted commands
scsi: scsi_dh_alua: Properly handle the ALUA transitioning state
perf test bpf: Skip test if clang is not present
perf bench numa: Address compiler error on s390
perf regs x86: Fix arch__intr_reg_mask() for the hybrid platform
perf test: Fix "all PMU test" to skip hv_24x7/hv_gpci tests on powerpc
gpio: mvebu/pwm: Refuse requests with inverted polarity
gpio: gpio-vf610: do not touch other bits when set the target bit
perf stat: Fix and validate CPU map inputs in synthetic PERF_RECORD_STAT events
perf build: Fix check for btf__load_from_kernel_by_id() in libbpf
kvm: x86/pmu: Fix the compare function used by the pmu event filter
scsi: ufs: core: Fix referencing invalid rsp field
riscv: dts: sifive: fu540-c000: align dma node name with dtschema
net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
vdpa/mlx5: Use consistent RQT size
netfilter: flowtable: move dst_check to packet path
netfilter: flowtable: pass flowtable to nf_flow_table_iterate()
netfilter: flowtable: fix TCP flow teardown
igb: skip phy status check where unavailable
mptcp: fix checksum byte order
lockdown: also lock down previous kgdb use
ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
ARM: 9196/1: spectre-bhb: enable for Cortex-A15
net: af_key: add check for pfkey_broadcast in function pfkey_process
net/mlx5: Drain fw_reset when removing device
net/mlx5e: Remove HW-GRO from reported features
net/mlx5e: Properly block HW GRO when XDP is enabled
net/mlx5e: Properly block LRO when XDP is enabled
net/mlx5e: Block rx-gro-hw feature in switchdev mode
net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it
net/mlx5: Initialize flow steering during driver probe
net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table
NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc
net/qla3xxx: Fix a test in ql_reset_work()
clk: at91: generated: consider range when calculating best rate
ice: Fix interrupt moderation settings getting cleared
ice: fix possible under reporting of ethtool Tx and Rx statistics
ice: fix crash when writing timestamp on RX rings
arm64: kexec: load from kimage prior to clobbering
net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
net: systemport: Fix an error handling path in bcm_sysport_probe()
net: lan966x: Fix assignment of the MAC address
Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler"
ptp: ocp: have adjtime handle negative delta_ns correctly
netfilter: nft_flow_offload: fix offload with pppoe + vlan
net: fix dev_fill_forward_path with pppoe + bridge
netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices
netfilter: flowtable: fix excessive hw offload attempts after failure
net/sched: act_pedit: sanitize shift argument before usage
xfrm: fix "disable_policy" flag use when arriving from different devices
xfrm: rework default policy structure
i915/guc/reset: Make __guc_reset_context aware of guilty engines
net: macb: Increment rx bd head after allocating skb and buffer
mptcp: fix subflow accounting on close
block/mq-deadline: Set the fifo_time member also if inserting at head
net: ipa: record proper RX transaction count
net: ipa: certain dropped packets aren't accounted for
ALSA: hda - fix unused Realtek function when PM is not enabled
pinctrl: mediatek: mt8365: fix IES control pins
pinctrl: ocelot: Fix for lan966x alt mode
ARM: dts: aspeed: Add video engine to g6
ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group
pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl
ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi
arm64: dts: qcom: sm8250: don't enable rx/tx macro by default
dma-buf: ensure unique directory name for dmabuf stats
dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace
drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
drm/i915/dmc: Add MMIO range restrictions
drm/amd: Don't reset dGPUs if the system is going to s2idle
libceph: fix potential use-after-free on linger ping and resends
mmc: core: Fix busy polling for MMC_SEND_OP_COND again
crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
arm64: mte: Ensure the cleared tags are visible before setting the PTE
arm64: paravirt: Use RCU read locks to guard stolen_time
KVM: Free new dirty bitmap if creating a new memslot fails
KVM: x86/mmu: Update number of zapped pages even if page list is stable
KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC
Revert "can: m_can: pci: use custom bit timings for Elkhart Lake"
PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold
Fix double fget() in vhost_net_set_backend()
audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts
selinux: fix bad cleanup on error in hashtab_duplicate()
perf: Fix sys_perf_event_open() race against self
ALSA: hda/realtek: Add quirk for TongFang devices with pop noise
ALSA: wavefront: Proper check of get_user() error
ALSA: usb-audio: Restore Rane SL-1 quirk
nilfs2: fix lockdep warnings during disk space reclamation
nilfs2: fix lockdep warnings in page operations for btree nodes
ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()
platform/chrome: cros_ec_debugfs: detach log reader wq from devm
drbd: remove usage of list iterator variable after loop
MIPS: lantiq: check the return value of kzalloc()
fs: fix an infinite loop in iomap_fiemap
rtc: mc146818-lib: Fix the AltCentury for AMD platforms
nvme-multipath: fix hang when disk goes live over reconnect
nvmet: use a private workqueue instead of the system workqueue
smb3: cleanup and clarify status of tree connections
tools/virtio: compile with -pthread
vhost_vdpa: don't setup irq offloading when irq_num < 0
s390/pci: improve zpci_dev reference counting
s390/traps: improve panic message for translation-specification exception
ALSA: hda/realtek: Enable headset mic on Lenovo P360
crypto: x86/chacha20 - Avoid spurious jumps to other functions
crypto: stm32 - fix reference leak in stm32_crc_remove
rtc: sun6i: Fix time overflow handling
gfs2: Disable page faults during lockless buffered reads
nvme-pci: add quirks for Samsung X5 SSDs
Input: stmfts - fix reference leak in stmfts_input_open
Input: add bounds checking to input_set_capability()
um: Cleanup syscall_handler_t definition/cast, fix warning
kconfig: add fflush() before ferror() check
rtc: pcf2127: fix bug when reading alarm registers
rtc: fix use-after-free on device removal
gfs2: Switch lock order of inode and iopen glock
gfs2: cancel timed-out glock requests
Revert "drm/i915/opregion: check port number bounds for SWSCI display power state"
Watchdog: sp5100_tco: Enable Family 17h+ CPUs
Watchdog: sp5100_tco: Add initialization using EFCH MMIO
Watchdog: sp5100_tco: Refactor MMIO base address initialization
Watchdog: sp5100_tco: Move timer initialization into function
i2c: piix4: Enable EFCH MMIO for Family 17h+
i2c: piix4: Add EFCH MMIO support for SMBus port select
i2c: piix4: Add EFCH MMIO support to SMBus base address detect
i2c: piix4: Add EFCH MMIO support to region request and release
i2c: piix4: Move SMBus port selection into function
i2c: piix4: Move SMBus controller base address detect into function
i2c: piix4: Move port I/O region request/release code into functions
i2c: piix4: Replace hardcoded memory map size with a #define
kernel/resource: Introduce request_mem_region_muxed()
floppy: use a statically allocated error counter
usb: gadget: fix race when gadget driver register via ioctl