Jammy update: v6.1.56 upstream stable release

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.56 upstream stable release
       from git://git.kernel.org/

Linux 6.1.56
ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL
mm, memcg: reconsider kmem.limit_in_bytes deprecation
memcg: drop kmem.limit_in_bytes
drm/meson: fix memory leak on ->hpd_notify callback
drm/amdkfd: Use gpu_offset for user queue's wptr
fs: binfmt_elf_efpic: fix personality for ELF-FDPIC
power: supply: ab8500: Set typing and props
power: supply: rk817: Add missing module alias
drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top
ata: libata-sata: increase PMP SRST timeout to 10s
ata: libata-core: Do not register PM operations for SAS ports
ata: libata-core: Fix port and device removal
ata: libata-core: Fix ata_port_request_pm() locking
fs/smb/client: Reset password pointer to NULL
net: thunderbolt: Fix TCPv6 GSO checksum calculation
bpf: Fix BTF_ID symbol generation collision in tools/
bpf: Fix BTF_ID symbol generation collision
bpf: Add override check to kprobe multi link attach
media: uvcvideo: Fix OOB read
btrfs: properly report 0 avail for very full file systems
ring-buffer: Update "shortest_full" in polling
mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement
mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()
mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
arm64: defconfig: remove CONFIG_COMMON_CLK_NPCM8XX=y
drm/tests: Fix incorrect argument in drm_test_mm_insert_range
timers: Tag (hr)timer softirq as hotplug safe
Revert "SUNRPC dont update timeout value on connection reset"
netfilter: nf_tables: fix kdoc warnings after gc rework
sched/rt: Fix live lock between select_fallback_rq() and RT push
kernel/sched: Modify initial boot task idle setup
ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG
i2c: i801: unregister tco_pdev in i801_probe() error path
io_uring/fs: remove sqe->rw_flags checking from LINKAT
ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES
ata: libata-scsi: link ata port and scsi device
LoongArch: numa: Fix high_memory calculation
LoongArch: Define relocation types for ABI v2.10
ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q
netfilter: nf_tables: disallow rule removal from chain binding
nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
serial: 8250_port: Check IRQ data before use
Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux"
misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe
mptcp: fix bogus receive window shrinkage with multiple subflows
KVM: x86/mmu: Do not filter address spaces in for_each_tdp_mmu_root_yield_safe()
KVM: x86/mmu: Open code leaf invalidation from mmu_notifier
KVM: SVM: Fix TSC_AUX virtualization setup
KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway
x86/srso: Add SRSO mitigation for Hygon processors
x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
smack: Retrieve transmuting information in smack_inode_getsecurity()
smack: Record transmuting in smk_transmuted
nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev
scsi: qla2xxx: Fix NULL pointer dereference in target mode
wifi: ath11k: Don't drop tx_status when peer cannot be found
nvme-pci: do not set the NUMA node of device if it has none
nvme-pci: factor out a nvme_pci_alloc_dev helper
nvme-pci: factor the iod mempool creation into a helper
perf build: Define YYNOMEM as YYNOABORT for bison < 3.81
fbdev/sh7760fb: Depend on FB=y
LoongArch: Set all reserved memblocks on Node#0 at initialization
tsnep: Fix NAPI polling with budget 0
tsnep: Fix NAPI scheduling
net: hsr: Add __packed to struct hsr_sup_tlv.
ncsi: Propagate carrier gain/loss events to the NCSI controller
powerpc/watchpoints: Annotate atomic context in more places
powerpc/watchpoint: Disable pagefaults when getting user instruction
powerpc/watchpoints: Disable preemption in thread_change_pc()
ASoC: SOF: Intel: MTL: Reduce the DSP init timeout
NFSv4.1: fix zero value filehandle in post open getattr
media: vb2: frame_vector.c: replace WARN_ONCE with a comment
ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link
memblock tests: fix warning ‘struct seq_file’ declared inside parameter list
memblock tests: fix warning: "__ALIGN_KERNEL" redefined
firmware: cirrus: cs_dsp: Only log list of algorithms in debug build
ASoC: cs42l42: Don't rely on GPIOD_OUT_LOW to set RESET initially low
ASoC: cs42l42: Ensure a reset pulse meets minimum pulse width.
ALSA: hda: intel-sdw-acpi: Use u8 type for link index
bpf: Clarify error expectations from bpf_clone_redirect
spi: intel-pci: Add support for Granite Rapids SPI serial flash
ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag
spi: stm32: add a delay before SPI disable
spi: nxp-fspi: reset the FLSHxCR1 registers
ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset()
smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP
scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command
riscv: errata: fix T-Head dcache.cva encoding
drm/amdgpu: Handle null atom context in VBIOS info ioctl
drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV
drm/amdgpu/soc21: don't remap HDP registers for SR-IOV
drm/amd/display: Don't check registers, if using AUX BL control
thermal/of: add missing of_node_put()
platform/x86: asus-wmi: Support 2023 ROG X16 tablet mode
platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig
ata: sata_mv: Fix incorrect string length computation in mv_dump_mem()
net/smc: bugfix for smcr v2 server connect success statistic
ring-buffer: Do not attempt to read past "commit"
selftests: fix dependency checker script
btrfs: assert delayed node locked when removing delayed item
ring-buffer: Avoid softlockup in ring_buffer_resize()
selftests/ftrace: Correctly enable event in instance-event.tc
scsi: ufs: core: Poll HCS.UCRDY before issuing a UIC command
scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock
scsi: qedf: Add synchronization between I/O completions and abort
parisc: irq: Make irq_stack_union static to avoid sparse warning
parisc: drivers: Fix sparse warning
parisc: iosapic.c: Fix sparse warnings
parisc: sba: Fix compile warning wrt list of SBA devices
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()
spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain
spi: sun6i: reduce DMA RX transfer width to single byte
bpf: Annotate bpf_long_memcpy with data_race
dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
ceph: drop messages from MDS when unmounting
x86/reboot: VMCLEAR active VMCSes before emergency reboot
i2c: npcm7xx: Fix callback completion ordering
gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip
firmware: arm_ffa: Don't set the memory region attributes for MEM_LEND
arm64: dts: imx: Add imx8mm-prt8mm.dtb to build
soc: imx8m: Enable OCOTP clock for imx8mm before reading registers
selftests/powerpc: Fix emit_tests to work with run_kselftest.sh
selftests/powerpc: Pass make context to children
selftests/powerpc: Use CLEAN macro to fix make warning
power: supply: rk817: Fix node refcount leak
xtensa: boot/lib: fix function prototypes
xtensa: umulsidi3: fix conditional expression
xtensa: boot: don't add include-dirs
xtensa: iss/network: make functions static
xtensa: add default definition for XCHAL_HAVE_DIV32
firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels()
power: supply: ucs1002: fix error code in ucs1002_get_property()
bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up
ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot
ARM: dts: Unify pinctrl-single pin group nodes for omap4
ARM: dts: Unify pwm-omap-dmtimer node names
ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4
ARM: dts: omap: correct indentation
clk: tegra: fix error return case for recalc_rate
clk: sprd: Fix thm_parents incorrect configuration
power: supply: mt6370: Fix missing error code in mt6370_chg_toggle_cfo()
firmware: arm_scmi: Fixup perf power-cost/microwatt support
firmware: arm_scmi: Harden perf domain info access
bus: ti-sysc: Fix missing AM35xx SoC matching
bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset()
drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet
spi: spi-gxp: BUG: Correct spi write return value
MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled
vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent()
btrfs: reset destination buffer when read_extent_buffer() gets invalid range
drm/amdkfd: Insert missing TLB flush on GFX10 and later
drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3
scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called
wifi: ath11k: Cleanup mac80211 references on failure during tx_complete
wifi: ath11k: fix tx status reporting in encap offload mode
arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_CLR2SECK2 IOCTL
f2fs: get out of a repeat loop when getting a locked data page
f2fs: optimize iteration over sparse directories
ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode
ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names
ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen
ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size
ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
i2c: xiic: Correct return value check for xiic_reinit()
i2c: mux: gpio: Add missing fwnode_handle_put()
i2c: mux: demux-pinctrl: check the return value of devm_kstrdup()
gpio: tb10x: Fix an error handling path in tb10x_gpio_probe()
cifs: Fix UAF in cifs_demultiplex_thread()
proc: nommu: fix empty /proc/<pid>/maps
proc: nommu: /proc/<pid>/maps: release mmap read lock
igc: Expose tx-usecs coalesce setting to user
octeontx2-pf: Do xdp_do_flush() after redirects.
bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI
net: ena: Flush XDP packets on error.
locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested()
i915/pmu: Move execlist stats initialization to execlist specific setup
netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
netfilter: nf_tables: disable toggling dormant table state more than once
net: rds: Fix possible NULL-pointer dereference
team: fix null-ptr-deref when team device type is changed
net: bridge: use DEV_STATS_INC()
net: hns3: add 5ms delay before clear firmware reset irq source
net: hns3: fix fail to delete tc flower rules during reset issue
net: hns3: only enable unicast promisc when mac table full
net: hns3: fix GRE checksum offload issue
net: hns3: add cmdq check for vf periodic service task
x86/srso: Fix SBPB enablement for spec_rstack_overflow=off
x86/srso: Fix srso_show_state() side effect
platform/x86: intel_scu_ipc: Fail IPC send if still busy
platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command()
platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt()
platform/x86: intel_scu_ipc: Check status after timeout in busy_loop()
net: hsr: Properly parse HSRv1 supervisor frames.
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
dccp: fix dccp_v4_err()/dccp_v6_err() again
powerpc/perf/hv-24x7: Update domain value check
scsi: iscsi_tcp: restrict to TCP sockets
ipv4: fix null-deref in ipv4_link_failure
igc: Fix infinite initialization loop with early XDP redirect
ionic: fix 16bit math issue when PAGE_SIZE >= 64KB
netfilter, bpf: Adjust timeouts of non-confirmed CTs in bpf_ct_insert_entry()
i40e: Fix VF VLAN offloading when port VLAN is configured
iavf: schedule a request immediately after add/delete vlan
iavf: add iavf_schedule_aq_request() helper
ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful
iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set
octeon_ep: fix tx dma unmap len values in SG
ASoC: imx-audmix: Fix return error with devm_clk_get()
ASoC: hdaudio.c: Add missing check for devm_kstrdup
net/core: Fix ETH_P_1588 flow dissector
selftests: tls: swap the TX and RX sockets in some tests
netfilter: conntrack: fix extension size table
ALSA: hda/realtek: Splitting the UX3402 into two separate models
ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode
ASoC: rt5640: Revert "Fix sleep in atomic context"
bpf: Avoid deadlock when using queue and stack maps from NMI
netfilter: nf_tables: disallow element removal on anonymous sets
ASoC: meson: spdifin: start hw on dai probe
netfilter: nf_tables: fix memleak when more than 255 elements expired
netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
netfilter: nf_tables: defer gc run if previous batch is still pending
netfilter: nf_tables: use correct lock to protect gc_list
netfilter: nf_tables: GC transaction race with abort path
netfilter: nf_tables: GC transaction race with netns dismantle
netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path
netfilter: nf_tables: don't fail inserts if duplicate has expired
netfilter: nf_tables: remove busy mark and gc batch API
netfilter: nft_set_hash: mark set element as dead when deleting from packet path
netfilter: nf_tables: adapt set backend to use GC transaction API
netfilter: nf_tables: GC transaction API to avoid race with control plane
netfilter: nf_tables: don't skip expired elements during walk
ext4: do not let fstrim block system suspend
ext4: move setting of trimmed bit into ext4_try_to_trim_range()
ext4: replace the traditional ternary conditional operator with with max()/min()
btrfs: remove BUG() after failure to insert delayed dir index item
btrfs: improve error message after failure to add delayed dir index item
dm: fix a race condition in retrieve_deps
netfs: Only call folio_start_fscache() one time for each folio
media: via: Use correct dependency for camera sensor drivers
media: v4l: Use correct dependency for camera sensor drivers
NFSv4.1: fix pnfs MDS=DS session trunking
NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server
SUNRPC: Mark the cred for revalidation if the server rejects it
NFS/pNFS: Report EINVAL errors from connect() to the server
NFS: More fixes for nfs_direct_write_reschedule_io()
NFS: Use the correct commit info in nfs_join_page_group()
NFS: More O_DIRECT accounting fixes for error paths
NFS: Fix O_DIRECT locking issues
NFS: Fix error handling for O_DIRECT write scheduling