Jammy update: v6.1.43 upstream stable release

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.43 upstream stable release
       from git://git.kernel.org/

Linux 6.1.43
dma-buf: fix an error pointer vs NULL bug
dma-buf: keep the signaling time of merged fences v3
test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
selftests: mptcp: sockopt: use 'iptables-legacy' if available
mptcp: ensure subflow is unhashed before cleaning the backlog
cpufreq: intel_pstate: Drop ACPI _PSS states table patching
ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
ACPI: processor: perflib: Use the "no limit" frequency QoS
drm/amd/display: Write to correct dirty_rect
drm/amd/display: perform a bounds check before filling dirty rectangles
tracing: Fix trace_event_raw_event_synth() if else statement
drm/amd/display: set per pipe dppclk to 0 when dpp is off
rbd: retrieve and check lock owner twice before blocklisting
rbd: harden get_lock_owner_info() a bit
rbd: make get_lock_owner_info() return a single locker or NULL
dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
drm/i915/dpt: Use shmem for dpt objects
ceph: never send metrics if disable_send_metrics is set
PM: sleep: wakeirq: fix wake irq arming
arm64/sme: Set new vector length before reallocating
ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
s390/dasd: print copy pair message only for the correct error
s390/dasd: fix hanging device after quiesce/resume
LoongArch: BPF: Enable bpf_probe_read{, str}() on LoongArch
LoongArch: BPF: Fix check condition to call lu32id in move_imm()
Revert "um: Use swap() to make code cleaner"
soundwire: fix enumeration completion
selftests: mptcp: join: only check for ip6tables if needed
net: dsa: qca8k: fix mdb add/del case with 0 VID
net: dsa: qca8k: fix broken search_and_del
net: dsa: qca8k: fix search_and_insert wrong handling of new rule
virtio-net: fix race between set queues and probe
xen: speed up grant-table reclaim
proc/vmcore: fix signedness bug in read_from_oldmem()
locking/rtmutex: Fix task->pi_waiters integrity
irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation
irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
tpm_tis: Explicitly check for error code
ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info()
nfsd: Remove incorrect check in nfsd4_validate_stateid
file: always lock position for FMODE_ATOMIC_POS
x86/MCE/AMD: Decrement threshold_bank refcount when removing threshold blocks
btrfs: check for commit error at btrfs_attach_transaction_barrier()
btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
btrfs: account block group tree when calculating global reserve size
hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature
ALSA: hda/relatek: Enable Mute LED on HP 250 G8
ALSA: hda/realtek: Support ASUS G713PV laptop
Revert "xhci: add quirk for host controllers that don't update endpoint DCS"
tty: n_gsm: fix UAF in gsm_cleanup_mux
staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
Documentation: security-bugs.rst: clarify CVE handling
Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group
Revert "usb: xhci: tegra: Fix error check"
usb: xhci-mtk: set the dma max_seg_size
usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
USB: quirks: add quirk for Focusrite Scarlett
usb: ohci-at91: Fix the unhandle interrupt when resume
usb: misc: ehset: fix wrong if condition
usb: dwc3: don't reset device side if dwc3 was configured as host-only
usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
usb: typec: Use sysfs_emit_at when concatenating the string
usb: typec: Iterate pds array when showing the pd list
usb: typec: Set port->pd before adding device for typec_port
can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED
USB: serial: simple: sort driver entries
USB: serial: simple: add Kaufmann RKS+CAN VCP
USB: serial: option: add Quectel EC200A module support
USB: serial: option: support Quectel EM060K_128
serial: sifive: Fix sifive_serial_console_setup() section
serial: 8250_dw: Preserve original value of DLF register
serial: qcom-geni: drop bogus runtime pm state update
KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
KVM: Grab a reference to KVM for VM and vCPU stats file descriptors
usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate
USB: gadget: Fix the memory leak in raw_gadget driver
usb: gadget: call usb_gadget_check_config() to verify UDC capability
Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()"
tracing: Fix warning in trace_buffered_event_disable()
ring-buffer: Fix wrong stat of cpu_buffer->read
ata: pata_ns87415: mark ns87560_tf_read static
ublk: fail to recover device if queue setup is interrupted
ublk: fail to start device if queue setup is interrupted
ublk_drv: move ublk_get_device_from_id into ublk_ctrl_uring_cmd
drm/msm: Disallow submit with fence id 0
drm/msm: Switch idr_lock to spinlock
RDMA/irdma: Report correct WC error
RDMA/irdma: Fix op_type reporting in CQEs
drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event()
drm/amd: Fix an error handling mistake in psp_sw_init()
dm raid: protect md_stop() with 'reconfig_mutex'
dm raid: clean up four equivalent goto tags in raid_ctr()
dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
xenbus: check xen_domain in xenbus_probe_initcall
drm/i915: Fix an error handling path in igt_write_huge()
smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request
block: Fix a source code comment in include/uapi/linux/blkzoned.h
ASoC: fsl_spdif: Silence output on stop
cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws()
cxl/acpi: Fix a use-after-free in cxl_parse_cfmws()
drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
RDMA/bnxt_re: Prevent handling any completions after qp destroy
RDMA/mthca: Fix crash when polling CQ for shared QPs
RDMA/irdma: Fix data race on CQP request done
RDMA/irdma: Fix data race on CQP completion stats
RDMA/irdma: Add missing read barriers
drm/msm/adreno: Fix snapshot BINDLESS_DATA size
drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
RDMA/mlx4: Make check for invalid flags stricter
tipc: stop tipc crypto on failure in tipc_node_create
tipc: check return value of pskb_trim()
benet: fix return value check in be_lancer_xmit_workarounds()
net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
net/sched: mqprio: add extack to mqprio_parse_nlattr()
net/sched: mqprio: refactor nlattr parsing to a separate function
mm: suppress mm fault logging if fatal signal already pending
netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
netfilter: nft_set_rbtree: fix overlap expiration walk
igc: Fix Kernel Panic during ndo_tx_timeout callback
x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory
platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
net: stmmac: Apply redundant write work around on 4.xx too
octeontx2-af: Fix hash extraction enable configuration
octeontx2-af: Removed unnecessary debug messages.
team: reset team's flags when down link is P2P device
bonding: reset bond's flags when down link is P2P device
ice: Fix memory management in ice_ethtool_fdir.c
tcp: Reduce chance of collisions in inet6_hashfn().
ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address
ethernet: atheros: fix return value check in atl1e_tso_csum()
atheros: fix return value check in atl1_tso()
phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
vxlan: fix GRO with VXLAN-GPE
vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
vxlan: calculate correct header length for GPE
net: hns3: fix wrong bw weight of disabled tc issue
net: hns3: fix wrong tc bandwidth weight data issue
net: hns3: fix the imp capability bit cannot exceed 32 bits issue
net: phy: marvell10g: fix 88x3310 power up
iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED
iavf: fix potential deadlock on allocation failure
i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
media: amphion: Fix firmware path to match linux-firmware
media: staging: atomisp: select V4L2_FWNODE
soundwire: qcom: update status correctly with mask
phy: qcom-snps-femto-v2: properly enable ref clock
phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend
phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
phy: phy-mtk-dp: Fix an error code in probe()
drm/amd/display: Prevent vtotal from being set to 0
drm/amd/display: Fix possible underflow for displays with large vblank
drm/amd/display: update extended blank for dcn314 onwards
drm/amd/display: Add FAMS validation before trying to use it
drm/amd/display: fix dc/core/dc.c kernel-doc
drm/amd/display: Rework comments on dc file
maple_tree: fix 32 bit mas_next testing
maple_tree: add __init and __exit to test module
test_maple_tree: test modifications while iterating
tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails
Revert "tracing: Add "(fault)" name injection to kernel probes"
tracing: Allow synthetic events to pass around stacktraces
tracing/probes: Fix to avoid double count of the string length on the array
tracing/probes: Add symstr type for dynamic events
mptcp: do not rely on implicit state check in mptcp_listen()
mptcp: introduce 'sk' to replace 'sock->sk' in mptcp_listen()
arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2
KVM: arm64: Condition HW AF updates on config option
drm/ttm: never consider pinned BOs for eviction&swap
tty: fix hang on tty device with no_room set
n_tty: Rename tail to old_tail in n_tty_read()
drm/ttm: Don't leak a resource on eviction error
drm/ttm: Don't print error message if eviction was interrupted
drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix
drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt
drm/amd/display: Update correct DCN314 register header
drm/amd/display: fix dcn315 single stream crb allocation
drm/amd/display: add pixel rate based CRB allocation support
drm/amd/display: fix unbounded requesting for high pixel rate modes on dcn315
drm/amd/display: use low clocks for no plane configs
drm/amd/display: add ODM case when looking for first split pipe
drm/amd/display: Use min transition for all SubVP plane add/remove
drm/amd/display: Include surface of unaffected streams
drm/amd/display: Copy DC context in the commit streams
drm/amd/display: Enable new commit sequence only for DCN32x
drm/amd/display: Rework context change check
drm/amd/display: Check if link state is valid
drm/amd/display: add FB_DAMAGE_CLIPS support
PCI: rockchip: Don't advertise MSI-X in PCIe capabilities
PCI: rockchip: Fix window mapping and address translation for endpoint
PCI: rockchip: Remove writes to unused registers
PCI/ASPM: Avoid link retraining race
PCI/ASPM: Factor out pcie_wait_for_retrain()
PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
MIPS: Loongson: Fix build error when make modules_install
MIPS: Loongson: Move arch cflags to MIPS top level Makefile
i2c: nomadik: Remove a useless call in the remove function
i2c: nomadik: Use devm_clk_get_enabled()
i2c: nomadik: Remove unnecessary goto label
i2c: Improve size determinations
i2c: Delete error messages for failed memory allocations
btrfs: fix race between quota disable and relocation
gpio: mvebu: fix irq domain leak
gpio: mvebu: Make use of devm_pwmchip_add
pwm: Add a stub for devm_pwmchip_add()
gpio: tps68470: Make tps68470_gpio_output() always set the initial value
io_uring: don't audit the capability check in io_uring_create()
KVM: s390: pv: fix index value of replaced ASCE
powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close
blk-mq: Fix stall due to recursive flush plug
jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with SMU13
drm/amd: Move helper for dynamic speed switch check out of smu13
ovl: fix null pointer dereference in ovl_permission()
drm/amd/display: Keep PHY active for dp config
platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params
platform/x86/amd/pmf: Notify OS power slider update
netfilter: nf_tables: fix underflow in chain reference counter
netfilter: nf_tables: fix underflow in object reference counter