linux (5.18.2-1parrot1) parrot-updates; urgency=medium
.
  * Import new Debian version.
  * Include Parrot patches and customizations.

Ben Hutchings authored Jun 14, 2022 and Lorenzo "Palinuro" Faletra committed Jun 21, 2022

linux (5.18.2-1~bpo11+1) bullseye-backports; urgency=medium
.
  * Rebuild for bullseye-backports:
    - Change ABI number to 0.bpo.1
.
linux (5.18.2-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.1
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.2
    - netfilter: nf_tables: disallow non-stateful expression in sets earlier
      (CVE-2022-1966)
    - pipe: Fix missing lock in pipe_resize_ring() (ZDI-CAN-17291)
    - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() (CVE-2022-1972)
    - [x86] fpu: KVM: Set the base guest FPU uABI size to sizeof(struct
      kvm_xsave) (Closes: #1011168)
    - KVM: x86: avoid calling x86 emulator without a decoded instruction
      (CVE-2022-1852)
.
  [ Diederik de Haas ]
  * [arm64,armel.marvell] Remove duplicate MTD_SPI_NOR config option
  * [arm64] Remove duplicate CAN_MCP251X config option
  * drivers/net/can/spi: Enable CAN_HI311X as module (Closes: #927252)
.
  [ Henning Schild ]
  * [x86] drivers/platform/x86: Enable SIEMENS_SIMATIC_IPC as module
  * [x86] drivers/leds: Enable LEDS_SIEMENS_SIMATIC_IPC as module
  * [x86] drivers/wdt: Enable SIEMENS_SIMATIC_IPC_WDT as module
.
  [ Lubomir Rintel ]
  * [x86] Enable X86_ANDROID_TABLETS as a module
.
  [ Michal Simek ]
  * [arm64] Enable Xilinx PHY driver and SI5341 clock driver
.
  [ Zhang Ning ]
  * [arm64] Enable COMMON_CLK_PWM which is needed for some Amlogic SBCs
  * [arm64] Enable Khadas MCU and fan
  * [arm64] cpufreq: Enable SCPI cpufreq driver
  * [arm64] cpuidle: Enable CONFIG_ARM_PSCI_CPUIDLE
.
  [ Ben Hutchings ]
  * drivers/firmware: Build ISCSI_IBFT as module on all architectures with
    ACPI. Thanks to Eric Mackay. (Closes: #1008933).
  * intel-iommu: Correct matching of the "intgpu_off" option value.
    Thanks to Markus Kolb.
  * random: Enable RANDOM_TRUST_BOOTLOADER. This can be reverted using the
    kernel parameter: random.trust_bootloader=off
.
  [ Bastian Blank ]
  * [amd64] Enable X86_SGX.
.
  [ Salvatore Bonaccorso ]
  * block, loop: support partitions without scanning (Closes: #1012298)
  * Set ABI to 1
.
linux (5.18-1~exp1) experimental; urgency=medium
.
  * New upstream release: https://kernelnewbies.org/Linux_5.18
.
  [ Diederik de Haas ]
  * Rebase patches:
    - Update patches
      - debian/dfsg/vs6624-disable.patch (9958d30f38)
      - debian/version.patch (b8321ed4a4, 03248addad)
  * Change patches:
    - debian/android-enable-building-ashmem-and-binder-as-modules.patch
      Upstream removed ashmem support in 721412ed3d saying
      "The mainline replacement for ashmem is memfd, so remove the legacy code
      from drivers/staging/"
      This seems to partially revert #901492, but there is no anbox-modules in
      the archive, even though the ITP bug was closed.
.
  [ Ben Hutchings ]
  * Rewrite "module: Avoid ABI changes when debug info is disabled" for 5.18
  * In "firmware: Remove redundant log messages from drivers", adjust some
    filenames
  * In "x86: Make x32 syscall support conditional on a kernel parameter",
    update dependency from X86_X32 to X86_X32_ABI
  * Drop "bpftool: Fix version string in recursive builds" as redundant
  * bpftool: Prepend program version to the package version
  * [s390x] Enable MARCH_Z10 instead of MARCH_Z900, since support for z9 has
    been removed upstream
  * d/config: Update with the help of kconfigeditor2
  * udeb: Move crc64 to crc-modules and make scsi-core-modules depend on that
  * libcpupower1: Update symbols file for 5.18
  * d/copyright: Update filename of extract-cert.c
  * lintian: Add lintian-override to linux-perf for non-issue
  * d/bin/gencontrol.py, d/templates: Stop using templates for linux-perf
  * [rt] Update to 5.18-rt10
.
linux (5.17.11-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.7
    - [arm64] pci_irq_vector() can't be used in atomic context any longer. This
      conflicts with the usage of this function in nic_mbx_intr_handler(). age
      of this function in nic_mbx_intr_handler().
    - ipmi: When handling send message responses, don't process the message
    - ipmi:ipmi_ipmb: Fix null-ptr-deref in ipmi_unregister_smi()
    - [mips*] Fix CP0 counter erratum detection for R4k CPUs
    - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers
    - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
    - [arm64] mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC
    - [arm64,armhf] mmc: sunxi-mmc: Fix DMA descriptors allocated above 32 bits
    - mmc: core: Set HS clock speed before sending HS CMD13
    - gpiolib: of: fix bounds check for 'gpio-reserved-ranges'
    - [x86] fpu: Prevent FPU state corruption
    - [x86] KVM: x86/svm: Account for family 17h event renumberings in
      amd_pmc_perf_hw_id
    - [amd64] iommu/vt-d: Calculate mask for non-aligned flushes
    - drm/amdgpu: do not use passthrough mode in Xen dom0
    - Revert "SUNRPC: attempt AF_LOCAL connect on setup"
    - timekeeping: Mark NMI safe time accessors as notrace
    - firewire: fix potential uaf in outbound_phy_packet_callback()
    - firewire: remove check of list iterator against head past the loop body
    - firewire: core: extend card->lock in fw_core_handle_bus_reset
    - net: stmmac: disable Split Header (SPH) for Intel platforms
    - btrfs: sysfs: export the balance paused state of exclusive operation
    - btrfs: force v2 space cache usage for subpage mount
    - btrfs: do not BUG_ON() on failure to update inode when setting xattr
    - btrfs: export a helper for compression hard check
    - btrfs: do not allow compression on nodatacow files
    - btrfs: skip compression property for anything other than files and dirs
    - genirq: Synchronize interrupt thread startup
    - ASoC: da7219: Fix change notifications for tone generator frequency
    - [arm64] ASoC: wm8958: Fix change notifications for DSP controls
    - [arm64,armhf] ASoC: meson: Fix event generation for AUI ACODEC mux
    - [arm64,armhf] ASoC: meson: Fix event generation for G12A tohdmi mux
    - [arm64,armhf] ASoC: meson: Fix event generation for AUI CODEC mux
    - [s390x] dasd: fix data corruption for ESE devices
    - [s390x] dasd: prevent double format of tracks for ESE devices
    - [s390x] dasd: Fix read for ESE with blksize < 4k
    - [s390x] dasd: Fix read inconsistency for ESE DASD devices
    - can: isotp: remove re-binding of bound socket
    - nfc: replace improper check device_is_registered() in netlink related
      functions
    - NFC: netlink: fix sleep in atomic bug when firmware download timeout
    - [arm64,armhf] gpio: pca953x: fix irq_stat not updated when irq is disabled
      (irq_mask not set)
    - hwmon: (adt7470) Fix warning on module removal
    - [armhf] hwmon: (pmbus) disable PEC if not enabled
    - [arm*] ASoC: dmaengine: Restore NULL prepare_slave_config() callback
    - [arm64] ASoC: meson: axg-tdm-interface: Fix formatters in trigger"
    - [arm64] ASoC: meson: axg-card: Fix nonatomic links
    - ASoC: soc-ops: fix error handling
    - [amd64] iommu/vt-d: Drop stop marker messages
    - net/mlx5e: Fix trust state reset in reload
    - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu
    - net/mlx5e: Fix wrong source vport matching on tunnel rule
    - net/mlx5e: Don't match double-vlan packets if cvlan is not set
    - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft
      release
    - net/mlx5e: Fix the calling of update_buffer_lossy() API
    - net/mlx5: Fix matching on inner TTC
    - net/mlx5: Avoid double clear or set of sync reset requested
    - net/mlx5: Fix deadlock in sync reset flow
    - net/mlx5e: Lag, Fix use-after-free in fib event handler
    - net/mlx5e: Lag, Fix fib_info pointer assignment
    - net/mlx5e: Lag, Don't skip fib events on current dst
    - net/mlx5e: TC, fix decap fallback to uplink when int port not supported
    - ALSA: hda/realtek: Fix mute led issue on thinkpad with cs35l41 s-codec
    - SUNRPC release the transport of a relocated task with an assigned
      transport
    - RDMA/irdma: Flush iWARP QP if modified to ERR from RTR state
    - RDMA/irdma: Reduce iWARP QP destroy time
    - RDMA/irdma: Fix possible crash due to NULL netdev in notifier
    - NFSv4: Don't invalidate inode attributes on delegation return
    - [arm64,armhf] net: stmmac: dwmac-sun8i: add missing of_node_put() in
      sun8i_dwmac_register_mdio_mux()
    - [armhf] net: cpsw: add missing of_node_put() in cpsw_probe_dt()
    - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
    - [arm64] drm/msm/dp: remove fail safe mode related code
    - hinic: fix bug of wq out of bound access
    - SUNRPC: Don't leak sockets in xs_local_connect()
    - mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter()
    - rxrpc: Enable IPv6 checksums on transport socket
    - dt-bindings: pci: apple,pcie: Drop max-link-speed from example
    - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag
    - bnxt_en: Fix unnecessary dropping of RX packets
    - [arm64,armhf] smsc911x: allow using IRQ0
    - btrfs: always log symlinks in full mode
    - [arm*] gpio: mvebu: drop pwm base assignment
    - net: rds: acquire refcount on TCP sockets
    - [x86] kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has
      architectural PMU
    - fbdev: Make fb_release() return -ENODEV if fbdev was unregistered
    - [x86] KVM: SEV: Mark nested locking of vcpu->lock
    - [x86] KVM: VMX: Exit to userspace if vCPU has injected exception and
      invalid state
    - [x86] kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume
    - [x86] KVM: x86: Do not change ICR on write to APIC_SELF_IPI
    - [x86] KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs
    - [x86] KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is
      advertised
    - mmc: rtsx: add 74 Clocks in power on flow
    - [arm64] PCI: aardvark: Replace custom PCIE_CORE_INT_* macros with
      PCI_INTERRUPT_*
    - [arm64] PCI: aardvark: Rewrite IRQ code to chained IRQ handler
    - [arm64] PCI: aardvark: Check return value of generic_handle_domain_irq()
      when processing INTx IRQ
    - [arm64] PCI: aardvark: Make MSI irq_chip structures static driver
      structures
    - [arm64] PCI: aardvark: Make msi_domain_info structure a static driver
      structure
    - [arm64] PCI: aardvark: Use dev_fwnode() instead of
      of_node_to_fwnode(dev->of_node)
    - [arm64] PCI: aardvark: Refactor unmasking summary MSI interrupt
    - [arm64] PCI: aardvark: Add support for masking MSI interrupts
    - [arm64] PCI: aardvark: Fix setting MSI address
    - [arm64] PCI: aardvark: Enable MSI-X support
    - [arm64] PCI: aardvark: Add support for ERR interrupt on emulated bridge
    - [arm64] PCI: aardvark: Optimize writing PCI_EXP_RTCTL_PMEIE and
      PCI_EXP_RTSTA_PME on emulated bridge
    - [arm64] PCI: aardvark: Add support for PME interrupts
    - [arm64] PCI: aardvark: Fix support for PME requester on emulated bridge
    - [arm64] PCI: aardvark: Use separate INTA interrupt for emulated root
      bridge
    - [arm64] PCI: aardvark: Remove irq_mask_ack() callback for INTx interrupts
    - [arm64] PCI: aardvark: Don't mask irq when mapping
    - [arm64] PCI: aardvark: Drop __maybe_unused from advk_pcie_disable_phy()
    - [arm64] PCI: aardvark: Update comment about link going down after link-up
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.8
    - Bluetooth: Fix the creation of hdev->name
    - rfkill: uapi: fix RFKILL_IOCTL_MAX_SIZE ioctl request definition
    - udf: Avoid using stale lengthOfImpUse
    - mm: fix missing cache flush for all tail pages of compound page
    - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
    - mm: hugetlb: fix missing cache flush in hugetlb_mcopy_atomic_pte()
    - mm: shmem: fix missing cache flush in shmem_mfill_atomic_pte()
    - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and
      __mcopy_atomic()
    - mm/hwpoison: fix error page recovered but reported "not recovered"
    - mm/mlock: fix potential imbalanced rlimit ucounts adjustment
    - mm,migrate: fix establishing demotion target
    - mm: fix invalid page pointer returned with FOLL_PIN gups
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.9
    - batman-adv: Don't skb_split skbuffs with frag_list
    - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing
    - hwmon: (tmp401) Add OF device ID table
    - mac80211: Reset MBSSID parameters upon connection
    - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets
    - net: Fix features skip in for_each_netdev_feature()
    - [arm64] net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in
      hardware when deleted
    - [arm64] net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups
    - [arm64] net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0
    - [arm64] net: mscc: ocelot: avoid corrupting hardware counters when moving
      VCAP filters
    - [arm*] fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove
    - fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove
    - [x86] fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove
    - [x86] platform/surface: aggregator: Fix initialization order when
      compiling as builtin module
    - ice: Fix race during aux device (un)plugging
    - ice: clear stale Tx queue settings before configuring
    - ice: fix PTP stale Tx timestamps cleanup
    - ipv4: drop dst in multicast routing path
    - drm/nouveau: Fix a potential theorical leak in
      nouveau_get_backlight_name()
    - netlink: do not reset transport header in netlink_recvmsg()
    - net: chelsio: cxgb4: Avoid potential negative array offset
    - fbdev: efifb: Fix a use-after-free due early fb_info cleanup
    - net: sfc: fix memory leak due to ptp channel
    - fanotify: do not allow setting dirent events in mask of non-dir
    - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
    - nfs: fix broken handling of the softreval mount option
    - dim: initialize all struct fields
    - procfs: prevent unprivileged processes accessing fdinfo dir
    - [arm64,armhf] net: dsa: flush switchdev workqueue on bridge join error
      path
    - [arm64] vdso: fix makefile dependency on vdso.so
    - virtio: fix virtio transitional ids
    - [s390x] ctcm: fix variable dereferenced before check
    - [s390x] ctcm: fix potential memory leak
    - [s390x] lcs: fix variable dereferenced before check
    - net/sched: act_pedit: really ensure the skb is writable
    - [arm64] net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral
    - [arm*] drm/vc4: hdmi: Fix build error for implicit function declaration
    - [armhf] net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down()
    - net/smc: non blocking recvmsg() return -EAGAIN when no data and
      signal_pending
    - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
    - tls: Fix context leak on tls_device_down
    - drm/vmwgfx: Fix fencing on SVGAv3
    - gfs2: Fix filesystem block deallocation for short writes
    - hwmon: (f71882fg) Fix negative temperature
    - RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core()
    - [arm64,armhf] iommu: arm-smmu: disable large page mappings for Nvidia
      arm-smmu
    - ASoC: max98090: Reject invalid values in custom control put()
    - ASoC: max98090: Generate notifications on changes for custom control
    - ASoC: ops: Validate input values in snd_soc_put_volsw_range()
    - [s390x] disable -Warray-bounds
    - [x86] ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback
    - io_uring: assign non-fixed early for async work
    - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT
    - secure_seq: use the 64 bits of the siphash for port offset calculation
      (CVE-2022-1012)
    - tcp: use different parts of the port_offset for index and offset
      (CVE-2022-1012)
    - tcp: resalt the secret every 10 seconds (CVE-2022-1012)
    - tcp: add small random increments to the source port (CVE-2022-1012)
    - tcp: dynamically allocate the perturb table used by source ports
      (CVE-2022-1012)
    - tcp: increase source port perturb table to 2^16 (CVE-2022-1012)
    - tcp: drop the hash_32() part from the index calculation (CVE-2022-1012)
    - block: Do not call folio_next() on an unreferenced folio
    - [arm64,armhf] interconnect: Restore sync state by ignoring ipa-virt in
      provider count
    - firmware_loader: use kernel credentials when reading firmware
    - [x86] mm: Fix marking of unused sub-pmd ranges
    - tty: n_gsm: fix buffer over-read in gsm_dlci_data()
    - tty: n_gsm: fix mux activation issues in gsm_config()
    - tty: n_gsm: fix invalid gsmtty_write_room() result
    - usb: gadget: uvc: allow for application to cleanly shutdown
    - usb: cdc-wdm: fix reading stuck on device close
    - [arm64] usb: typec: tcpci: Don't skip cleanup in .remove() on error
    - USB: serial: pl2303: add device id for HP LM930 Display
    - USB: serial: qcserial: add support for Sierra Wireless EM7590
    - USB: serial: option: add Fibocom L610 modem
    - USB: serial: option: add Fibocom MA510 modem
    - [arm64] fsl_lpuart: Don't enable interrupts too early
    - genirq: Remove WARN_ON_ONCE() in generic_handle_domain_irq()
    - ceph: fix setting of xattrs on async created inodes
    - Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()"
    - mm/huge_memory: do not overkill when splitting huge_zero_page
    - mm: mremap: fix sign for EFAULT error return value
    - drm/vmwgfx: Disable command buffers on svga3 without gbobjects
    - drm/nouveau/tegra: Stop using iommu_present()
    - i40e: i40e_main: fix a missing check on list iterator
    - net: atlantic: always deep reset on pm op, fixing up my null deref
      regression
    - net: phy: Fix race condition on link status change
    - writeback: Avoid skipping inode writeback
    - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
    - ping: fix address binding wrt vrf
    - ath11k: reduce the wait time of 11d scan and hw scan while add interface
    - [arm*] arm[64]/memremap: don't abuse pfn_valid() to ensure presence of
      linear map
    - net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061
    - net: phy: micrel: Pass .probe for KS8737
    - SUNRPC: Ensure that the gssproxy client can start in a connected state
    - drm/vmwgfx: Initialize drm_mode_fb_cmd2
    - Revert "drm/amd/pm: keep the BACO feature enabled for suspend"
    - dma-buf: call dma_buf_stats_setup after dmabuf is in valid list
    - mm/hwpoison: use pr_err() instead of dump_page() in get_any_page()
    - net: phy: micrel: Fix incorrect variable type in micrel
    - mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.10
    - floppy: use a statically allocated error counter
    - kernel/resource: Introduce request_mem_region_muxed()
    - i2c: piix4: Replace hardcoded memory map size with a #define
    - i2c: piix4: Move port I/O region request/release code into functions
    - i2c: piix4: Move SMBus controller base address detect into function
    - i2c: piix4: Move SMBus port selection into function
    - i2c: piix4: Add EFCH MMIO support to region request and release
    - i2c: piix4: Add EFCH MMIO support to SMBus base address detect
    - i2c: piix4: Add EFCH MMIO support for SMBus port select
    - i2c: piix4: Enable EFCH MMIO for Family 17h+
    - [x86] Watchdog: sp5100_tco: Move timer initialization into function
    - [x86] Watchdog: sp5100_tco: Refactor MMIO base address initialization
    - [x86] Watchdog: sp5100_tco: Add initialization using EFCH MMIO
    - [x86] Watchdog: sp5100_tco: Enable Family 17h+ CPUs
    - [x86] Revert "drm/i915/opregion: check port number bounds for SWSCI
      display power state"
    - gfs2: cancel timed-out glock requests
    - gfs2: Switch lock order of inode and iopen glock
    - rtc: fix use-after-free on device removal
    - [arm64] rtc: pcf2127: fix bug when reading alarm registers
    - Input: add bounds checking to input_set_capability()
    - nvme-pci: add quirks for Samsung X5 SSDs
    - gfs2: Disable page faults during lockless buffered reads
    - [arm64,armhf] rtc: sun6i: Fix time overflow handling
    - [armhf] crypto: stm32 - fix reference leak in stm32_crc_remove
    - [amd64] crypto: x86/chacha20 - Avoid spurious jumps to other functions
    - ALSA: hda/realtek: Enable headset mic on Lenovo P360
    - [s390x] traps: improve panic message for translation-specification
      exception
    - [s390x] pci: improve zpci_dev reference counting
    - smb3: cleanup and clarify status of tree connections
    - nvmet: use a private workqueue instead of the system workqueue
    - nvme-multipath: fix hang when disk goes live over reconnect
    - rtc: mc146818-lib: Fix the AltCentury for AMD platforms
    - fs: fix an infinite loop in iomap_fiemap
    - drbd: remove usage of list iterator variable after loop
    - platform/chrome: cros_ec_debugfs: detach log reader wq from devm
    - [armel,armhf] arm/stacktrace, kasan: Silence KASAN warnings in
      unwind_frame()
    - nilfs2: fix lockdep warnings in page operations for btree nodes
    - nilfs2: fix lockdep warnings during disk space reclamation
    - ALSA: usb-audio: Restore Rane SL-1 quirk
    - [i386] ALSA: wavefront: Proper check of get_user() error
    - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise
    - perf: Fix sys_perf_event_open() race against self (CVE-2022-1729)
    - selinux: fix bad cleanup on error in hashtab_duplicate()
    - audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts
    - Fix double fget() in vhost_net_set_backend()
    - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold
    - [arm64] KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC
    - [x86] KVM: x86/mmu: Update number of zapped pages even if page list is
      stable
    - KVM: Free new dirty bitmap if creating a new memslot fails
    - [arm64] paravirt: Use RCU read locks to guard stolen_time
    - [arm64] mte: Ensure the cleared tags are visible before setting the PTE
    - [arm64] crypto: qcom-rng - fix infinite loop on requests not multiple of
      WORD_SZ
    - mmc: core: Fix busy polling for MMC_SEND_OP_COND again
    - libceph: fix potential use-after-free on linger ping and resends
    - drm/amd: Don't reset dGPUs if the system is going to s2idle
    - [x86] drm/i915/dmc: Add MMIO range restrictions
    - drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
    - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace
    - dma-buf: ensure unique directory name for dmabuf stats
    - [arm64] dts: qcom: sm8250: don't enable rx/tx macro by default
    - [armhf] pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl
    - ALSA: hda - fix unused Realtek function when PM is not enabled
    - block/mq-deadline: Set the fifo_time member also if inserting at head
    - mptcp: fix subflow accounting on close
    - [arm64] net: macb: Increment rx bd head after allocating skb and buffer
    - [x86] i915/guc/reset: Make __guc_reset_context aware of guilty engines
    - xfrm: rework default policy structure
    - xfrm: fix "disable_policy" flag use when arriving from different devices
    - net/sched: act_pedit: sanitize shift argument before usage
    - netfilter: flowtable: fix excessive hw offload attempts after failure
    - netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices
    - net: fix dev_fill_forward_path with pppoe + bridge
    - netfilter: nft_flow_offload: fix offload with pppoe + vlan
    - ptp: ocp: have adjtime handle negative delta_ns correctly
    - [arm64] Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler"
    - net: vmxnet3: fix possible use-after-free bugs in
      vmxnet3_rq_alloc_rx_buf()
    - net: vmxnet3: fix possible NULL pointer dereference in
      vmxnet3_rq_cleanup()
    - [arm64] kexec: load from kimage prior to clobbering
    - ice: fix crash when writing timestamp on RX rings
    - ice: fix possible under reporting of ethtool Tx and Rx statistics
    - ice: Fix interrupt moderation settings getting cleared
    - net/qla3xxx: Fix a test in ql_reset_work()
    - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW
      table
    - net/mlx5: Initialize flow steering during driver probe
    - net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it
    - net/mlx5e: Block rx-gro-hw feature in switchdev mode
    - net/mlx5e: Properly block LRO when XDP is enabled
    - net/mlx5e: Properly block HW GRO when XDP is enabled
    - net/mlx5e: Remove HW-GRO from reported features
    - net/mlx5: Drain fw_reset when removing device
    - net: af_key: add check for pfkey_broadcast in function pfkey_process
    - [armhf] 9196/1: spectre-bhb: enable for Cortex-A15
    - [armel,armhf] 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
    - lockdown: also lock down previous kgdb use (CVE-2022-21499)
    - mptcp: fix checksum byte order
    - igb: skip phy status check where unavailable
    - netfilter: flowtable: fix TCP flow teardown
    - netfilter: flowtable: pass flowtable to nf_flow_table_iterate()
    - netfilter: flowtable: move dst_check to packet path
    - net: bridge: Clear offload_fwd_mark when passing frame up bridge
      interface.
    - [x86] kvm: x86/pmu: Fix the compare function used by the pmu event filter
    - [arm*] gpio: mvebu/pwm: Refuse requests with inverted polarity
    - scsi: scsi_dh_alua: Properly handle the ALUA transitioning state
    - scsi: qla2xxx: Fix missed DMA unmap for aborted commands
    - mac80211: fix rx reordering with non explicit / psmp ack policy
    - nl80211: validate S1G channel width
    - cfg80211: retrieve S1G operating channel number
    - Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered"
    - fbdev: Prevent possible use-after-free in fb_release()
    - [x86] platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks
    - [x86] platform/x86: thinkpad_acpi: Correct dual fan probe
    - [x86] platform/surface: gpe: Add support for Surface Pro 8
    - net: fix wrong network header length
    - nl80211: fix locking in nl80211_set_tx_bitrate_mask()
    - ethernet: tulip: fix missing pci_disable_device() on error in
      tulip_init_one()
    - net: atlantic: fix "frag[0] not initialized"
    - net: atlantic: reduce scope of is_rsc_complete
    - net: atlantic: add check for MAX_SKB_FRAGS
    - net: atlantic: verify hw_head_ lies within TX buffer ring
    - [arm64] Enable repeat tlbi workaround on KRYO4XX gold CPUs
    - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group
    - afs: Fix afs_getattr() to refetch file status if callback break occurred
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.11
    - mptcp: Do TCP fallback on early DSS checksum failure
.
  [ Vincent Blut ]
  * [x86] sound/soc/amd: Enable SND_SOC_AMD_ACP5x, SND_SOC_AMD_VANGOGH_MACH,
    SND_SOC_AMD_ACP6x and SND_SOC_AMD_YC_MACH as modules (Closes: #1010580)
  * [ppc64*] crypto: Enable CRYPTO_CRC32C_VPMSUM as module (Closes: #1010293)
.
  [ Alejandro R. Sedeño ]
  * drivers/net/wwan: Enable MHI_WWAN_MBIM as module (Closes: #1011395)
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 3
  * sign-file: Convert API usage to support OpenSSL v3
  * [x86] KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID
    (CVE-2022-1789)
.
linux (5.17.6-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.4
    - [arm64] cpuidle: PSCI: Move the `has_lpi` check to the beginning of the
      function
    - ACPI: processor idle: Check for architectural support for LPI
    - btrfs: remove no longer used counter when reading data page
    - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()
    - media: si2157: unknown chip version Si2147-A30 ROM 0x50
    - drm/amdgpu: Ensure HDA function is suspended before ASIC reset
    - btrfs: release correct delalloc amount in direct IO write path
    - btrfs: fix btrfs_submit_compressed_write cgroup attribution
    - btrfs: return allocated block group from do_chunk_alloc()
    - ALSA: core: Add snd_card_free_on_error() helper
    - [i386] ALSA: sis7019: Fix the missing error handling
    - ALSA: ali5451: Fix the missing snd_card_free() call at probe error
    - ALSA: als300: Fix the missing snd_card_free() call at probe error
    - ALSA: als4000: Fix the missing snd_card_free() call at probe error
    - ALSA: atiixp: Fix the missing snd_card_free() call at probe error
    - ALSA: azt3328: Fix the missing snd_card_free() call at probe error
    - ALSA: bt87x: Fix the missing snd_card_free() call at probe error
    - ALSA: ca0106: Fix the missing snd_card_free() call at probe error
    - ALSA: cmipci: Fix the missing snd_card_free() call at probe error
    - ALSA: cs4281: Fix the missing snd_card_free() call at probe error
    - [i386] ALSA: cs5535audio: Fix the missing snd_card_free() call at probe
      error
    - ALSA: emu10k1x: Fix the missing snd_card_free() call at probe error
    - ALSA: ens137x: Fix the missing snd_card_free() call at probe error
    - ALSA: es1938: Fix the missing snd_card_free() call at probe error
    - ALSA: es1968: Fix the missing snd_card_free() call at probe error
    - ALSA: fm801: Fix the missing snd_card_free() call at probe error
    - ALSA: hdsp: Fix the missing snd_card_free() call at probe error
    - ALSA: hdspm: Fix the missing snd_card_free() call at probe error
    - ALSA: ice1724: Fix the missing snd_card_free() call at probe error
    - ALSA: intel8x0: Fix the missing snd_card_free() call at probe error
    - [x86] ALSA: intel_hdmi: Fix the missing snd_card_free() call at probe
      error
    - ALSA: korg1212: Fix the missing snd_card_free() call at probe error
    - ALSA: lola: Fix the missing snd_card_free() call at probe error
    - ALSA: lx6464es: Fix the missing snd_card_free() call at probe error
    - ALSA: maestro3: Fix the missing snd_card_free() call at probe error
    - ALSA: oxygen: Fix the missing snd_card_free() call at probe error
    - ALSA: riptide: Fix the missing snd_card_free() call at probe error
    - ALSA: rme32: Fix the missing snd_card_free() call at probe error
    - ALSA: rme9652: Fix the missing snd_card_free() call at probe error
    - ALSA: rme96: Fix the missing snd_card_free() call at probe error
    - [i386] ALSA: sc6000: Fix the missing snd_card_free() call at probe error
    - ALSA: sonicvibes: Fix the missing snd_card_free() call at probe error
    - ALSA: via82xx: Fix the missing snd_card_free() call at probe error
    - ALSA: usb-audio: Cap upper limits of buffer/period bytes for implicit fb
    - [x86] ALSA: memalloc: Add fallback SG-buffer allocations for x86
    - ALSA: nm256: Don't call card private_free at probe error path
    - [arm64] drm/msm: Add missing put_task_struct() in debugfs path
    - nfsd: Fix a write performance regression
    - Revert "ath11k: mesh: add support for 256 bitmap in blockack frames in
      11ax"
    - [arm64] KVM: arm64: Generalise VM features into a set of flags
    - [arm64] KVM: arm64: mixed-width check should be skipped for uninitialized
      vCPUs
    - SUNRPC: Fix the svc_deferred_event trace class
    - net/sched: flower: fix parsing of ethertype following VLAN header
    - veth: Ensure eth header is in skb's linear part
    - gpiolib: acpi: use correct format characters
    - cifs: release cached dentries only if mount is complete
    - ice: arfs: fix use-after-free when freeing @rx_cpu_rmap
    - Revert "iavf: Fix deadlock occurrence during resetting VF interface"
    - net: mdio: don't defer probe forever if PHY IRQ provider is missing
    - sctp: use the correct skb for security_sctp_assoc_request
    - net/sched: fix initialization order when updating chain 0 head
    - cachefiles: unmark inode in use in error path
    - cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr
    - [arm64] net: dsa: felix: suppress -EPROBE_DEFER errors
    - io_uring: flag the fact that linked file assignment is sane
    - [armhf] net: ethernet: stmmac: fix altr_tse_pcs function when using a
      fixed-link
    - net/sched: taprio: Check if socket flags are valid
    - cfg80211: hold bss_lock while updating nontrans_list
    - netfilter: nft_socket: make cgroup match work in input too
    - [arm64] drm/msm: Fix range size vs end confusion
    - [arm64] drm/msm/dsi: Use connector directly in
      msm_dsi_manager_connector_init()
    - [arm64] drm/msm/dp: add fail safe mode outside of event_mutex context
    - io_uring: stop using io_wq_work as an fd placeholder
    - net/smc: use memcpy instead of snprintf to avoid out of bounds read
    - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
    - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63
    - scsi: pm80xx: Enable upper inbound, outbound queues
    - scsi: iscsi: Move iscsi_ep_disconnect()
    - scsi: iscsi: Fix offload conn cleanup when iscsid restarts
    - scsi: iscsi: Fix endpoint reuse regression
    - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart
    - scsi: iscsi: Fix unbound endpoint error handling
    - sctp: Initialize daddr on peeled off socket
    - netfilter: nf_tables: nft_parse_register can return a negative value
    - io_uring: fix assign file locking issue
    - ALSA: ad1889: Fix the missing snd_card_free() call at probe error
    - ALSA: mtpav: Don't call card private_free at probe error path
    - io_uring: move io_uring_rsrc_update2 validation
    - io_uring: verify that resv2 is 0 in io_uring_rsrc_update2
    - io_uring: verify pad field is 0 in io_get_ext_arg
    - ALSA: usb-audio: Increase max buffer size
    - ALSA: usb-audio: Limit max buffer and period sizes per time
    - macvlan: Fix leaking skb in source mode with nodst option
    - [armhf] net: ftgmac100: access hardware register after clock ready
    - cifs: potential buffer overflow in handling symlinks
    - vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used
    - tun: annotate access to queue->trans_start
    - [arm64] net: dsa: felix: fix tagging protocol changes with multiple CPU
      ports
    - [arm64] net: bcmgenet: Revert "Use stronger register read/writes to assure
      ordering"
    - block: fix offset/size check in bio_trim()
    - block: null_blk: end timed out poll request
    - io_uring: abort file assignment prior to assigning creds
    - [powerpc*] KVM: PPC: Book3S HV P9: Fix "lost kick" race
    - drm/amd: Add USBC connector ID
    - btrfs: fix fallocate to use file_modified to update permissions
      consistently
    - btrfs: do not warn for free space inode in cow_file_range
    - drm/amdgpu: conduct a proper cleanup of PDB bo
    - drm/amdgpu/gmc: use PCI BARs for APUs in passthrough
    - drm/amd/display: FEC check in timing validation
    - drm/amdkfd: Fix Incorrect VMIDs passed to HWS
    - drm/amdgpu/vcn: improve vcn dpg stop procedure
    - [arm64,x86] Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by
      default in isolated guests
    - [arm64,x86] Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus
      device
    - [amd64,arm64] PCI: hv: Propagate coherence from VMbus device to PCI device
    - [arm64,x86] Drivers: hv: vmbus: Prevent load re-ordering when reading ring
      buffer
    - scsi: target: tcmu: Fix possible page UAF
    - scsi: lpfc: Improve PCI EEH Error and Recovery Handling
    - scsi: lpfc: Fix unload hang after back to back PCI EEH faults
    - scsi: lpfc: Fix queue failures when recovering from PCI parity error
    - [powerpc*] scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
    - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
    - [armhf] gpu: ipu-v3: Fix dev_dbg frequency output
    - [powerpc*] static_call: Properly initialise DEFINE_STATIC_CALL_RET0()
    - [arm64] alternatives: mark patch_alternative() as `noinstr`
    - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry
    - [arm64,x86] Drivers: hv: balloon: Disable balloon and hot-add accordingly
    - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
    - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso
    - drm/amd/display: Fix allocate_mst_payload assert on resume
    - drbd: set QUEUE_FLAG_STABLE_WRITES
    - scsi: mpt3sas: Fail reset operation if config request timed out
    - scsi: mvsas: Add PCI ID of RocketRaid 2640
    - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan
    - drivers: net: slip: fix NPD bug in sl_tx_timeout()
    - io_uring: zero tag on rsrc removal
    - io_uring: use nospec annotation for more indexes
    - [arm64] perf/imx_ddr: Fix undefined behavior due to shift overflowing the
      constant
    - mm/secretmem: fix panic when growing a memfd_secret
    - mm, page_alloc: fix build_zonerefs_node()
    - mm: fix unexpected zeroed page mapping with zram swap
    - hugetlb: do not demote poisoned hugetlb pages
    - revert "fs/binfmt_elf: fix PT_LOAD p_align values for loaders"
    - revert "fs/binfmt_elf: use PT_LOAD p_align values for static PIE"
    - [x86] KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded
    - SUNRPC: Fix NFSD's request deferral on RDMA transports
    - cifs: verify that tcon is valid before dereference in cifs_kill_sb
    - ath9k: Properly clear TX status area before reporting to mac80211
    - ath9k: Fix usage of driver-private space in tx_info
    - btrfs: zoned: activate block group only for extent allocation
    - btrfs: fix root ref counts in error handling in btrfs_get_root_ref
    - btrfs: mark resumed async balance as writing
    - ALSA: hda/realtek: Add quirk for Clevo PD50PNT
    - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers
    - ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
    - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size
    - ipv6: fix panic when forwarding a pkt with no in6 dev
    - drm/amdgpu: Enable gfxoff quirk on MacBook Pro
    - [x86] tsx: Use MSR_TSX_CTRL to clear CPUID bits
    - [x86] tsx: Disable TSX development mode at boot
    - genirq/affinity: Consider that CPUs on nodes can be unbalanced
    - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation
    - dm integrity: fix memory corruption when tag_size is less than digest size
    - i2c: dev: check return value when calling dev_set_name()
    - [arm64,armhf] Revert "net: dsa: setup master before ports"
    - smp: Fix offline cpu check in flush_smp_call_function_queue()
    - dt-bindings: memory: snps,ddrc-3.80a compatible also need interrupts
    - timers: Fix warning condition in __run_timers()
    - mm, kfence: support kmem_dump_obj() for KFENCE objects
    - [x86] drm/i915: Sunset igpu legacy mmap support based on GRAPHICS_VER_FULL
    - cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state
    - ax25: Fix UAF bugs in ax25 timers (CVE-2022-1205)
    - io_uring: use right issue_flags for splice/tee
    - io_uring: fix poll file assign deadlock
    - io_uring: fix poll error reporting
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.5
    - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
    - perf tools: Fix segfault accessing sample_id xyarray
    - drm/amd/display: Only set PSR version when valid
    - block/compat_ioctl: fix range check in BLKGETSIZE
    - gfs2: assign rgrp glock before compute_bitstructs
    - scsi: ufs: core: scsi_get_lba() error fix
    - net/sched: cls_u32: fix netns refcount changes in u32_change()
    - ALSA: usb-audio: Clear MIDI port active flag after draining
    - ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX.
    - ALSA: hda/realtek: Add quirk for Clevo NP70PNP
    - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek
    - ASoC: topology: Correct error handling in soc_tplg_dapm_widget_create()
    - ASoC: rk817: Use devm_clk_get() in rk817_platform_probe
    - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component
    - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use
    - dmaengine: idxd: fix device cleanup on disable
    - dmaengine: imx-sdma: Fix error checking in sdma_event_remap
    - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources
    - dmaengine: dw-edma: Fix unaligned 64bit access
    - spi: spi-mtk-nor: initialize spi controller after resume
    - firmware: cs_dsp: Fix overrun of unterminated control name string
    - esp: limit skb_page_frag_refill use to a single page
    - spi: cadence-quadspi: fix incorrect supports_op() return value
    - igc: Fix infinite loop in release_swfw_sync
    - igc: Fix BUG: scheduling while atomic
    - igc: Fix suspending when PTM is active
    - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV
    - ice: fix crash in switchdev mode
    - ice: Fix memory leak in ice_get_orom_civd_data()
    - ALSA: hda/hdmi: fix warning about PCM count when used with SOF
    - rxrpc: Restore removed timer deletion
    - net/smc: Fix sock leak when release after smc_shutdown()
    - net/packet: fix packet_sock xmit return value checking
    - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit()
    - ip6_gre: Fix skb_under_panic in __gre6_xmit()
    - net: restore alpha order to Ethernet devices in config
    - net/sched: cls_u32: fix possible leak in u32_init_knode()
    - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
    - ipv6: make ip6_rt_gc_expire an atomic_t
    - can: isotp: stop timeout monitoring when no first frame was sent
    - net: dsa: hellcreek: Calculate checksums in tagger
    - net: mscc: ocelot: fix broken IP multicast flooding
    - netlink: reset network and mac headers in netlink_dump()
    - drm/i915/display/psr: Unset enable_psr2_sel_fetch if other checks in intel_psr2_config_valid() fails
    - RISC-V: KVM: Remove 's' & 'u' as valid ISA extension
    - RISC-V: KVM: Restrict the extensions that can be disabled
    - net: stmmac: Use readl_poll_timeout_atomic() in atomic state
    - dmaengine: idxd: match type for retries var in idxd_enqcmds()
    - dmaengine: idxd: fix retry value to be constant for duration of function call
    - dmaengine: idxd: add RO check for wq max_batch_size write
    - dmaengine: idxd: add RO check for wq max_transfer_size write
    - dmaengine: idxd: skip clearing device context when device is read-only
    - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets
    - selftests: mlxsw: vxlan_flooding_ipv6: Prevent flooding of unwanted packets
    - userfaultfd: mark uffd_wp regardless of VM_WRITE flag
    - arm64: mm: fix p?d_leaf()
    - XArray: Disallow sibling entries of nodes
    - drm/msm/gpu: Rename runtime suspend/resume functions
    - drm/msm/gpu: Remove mutex from wait_event condition
    - ARM: vexpress/spc: Avoid negative array index when !SMP
    - reset: renesas: Check return value of reset_control_deassert()
    - reset: tegra-bpmp: Restore Handle errors in BPMP response
    - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
    - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant
    - drm/msm/disp: check the return value of kzalloc()
    - selftests: KVM: Free the GIC FD when cleaning up in arch_timer
    - ALSA: hda: intel-dsp-config: update AlderLake PCI IDs
    - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes
    - vxlan: fix error return code in vxlan_fdb_append
    - cifs: Check the IOCB_DIRECT flag, not O_DIRECT
    - net: atlantic: Avoid out-of-bounds indexing
    - mt76: Fix undefined behavior due to shift overflowing the constant
    - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
    - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()
    - drm/msm/mdp5: check the return of kzalloc()
    - KVM: x86: hyper-v: Avoid writing to TSC page without an active vCPU
    - net: macb: Restart tx only if queue pointer is lagging
    - scsi: iscsi: Release endpoint ID when its freed
    - scsi: iscsi: Merge suspend fields
    - scsi: iscsi: Fix NOP handling during conn recovery
    - scsi: qedi: Fix failed disconnect handling
    - stat: fix inconsistency between struct stat and struct compat_stat
    - VFS: filename_create(): fix incorrect intent.
    - nvme: add a quirk to disable namespace identifiers
    - nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202
    - nvme-pci: disable namespace identifiers for Qemu controllers
    - irq_work: use kasan_record_aux_stack_noalloc() record callstack
    - EDAC/synopsys: Read the error count from the correct register
    - mm/memory-failure.c: skip huge_zero_page in memory_failure()
    - memcg: sync flush only if periodic flush is delayed
    - mm, hugetlb: allow for "high" userspace addresses
    - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
    - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove()
    - ata: pata_marvell: Check the 'bmdma_addr' beforing reading
    - dma: at_xdmac: fix a missing check on list iterator
    - dmaengine: imx-sdma: fix init of uart scripts
    - net: atlantic: invert deep par in pm functions, preventing null derefs
    - drm/radeon: fix logic inversion in radeon_sync_resv
    - io_uring: free iovec if file assignment fails
    - Input: omap4-keypad - fix pm_runtime_get_sync() error checking
    - scsi: sr: Do not leak information in ioctl
    - sched/pelt: Fix attach_entity_load_avg() corner case
    - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
    - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
    - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
    - powerpc/time: Always set decrementer in timer_interrupt()
    - KVM: PPC: Fix TCE handling for VFIO
    - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
    - powerpc/perf: Fix power9 event alternatives
    - powerpc/perf: Fix power10 event alternatives
    - arm/xen: Fix some refcount leaks
    - perf script: Always allow field 'data_src' for auxtrace
    - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event
    - fs: fix acl translation
    - cifs: fix NULL ptr dereference in refresh_mounts()
    - cifs: use correct lock type in cifs_reconnect()
    - xtensa: patch_text: Fixup last cpu should be master
    - xtensa: fix a7 clobbering in coprocessor context load/store
    - openvswitch: fix OOB access in reserve_sfa_size()
    - gpio: Request interrupts after IRQ is initialized
    - ASoC: rt5682: fix an incorrect NULL check on list iterator
    - ASoC: soc-dapm: fix two incorrect uses of list iterator
    - e1000e: Fix possible overflow in LTR decoding
    - codecs: rt5682s: fix an incorrect NULL check on list iterator
    - ARC: entry: fix syscall_trace_exit argument
    - drm/vmwgfx: Fix gem refcounting and memory evictions
    - arm_pmu: Validate single/group leader events
    - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog
    - KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io()
    - KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race
    - KVM: nVMX: Defer APICv updates while L2 is active until L1 is active
    - KVM: SVM: Simplify and harden helper to flush SEV guest page(s)
    - KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs
    - ext4: fix fallocate to use file_modified to update permissions consistently
    - ext4: fix symlink file size not match to file content
    - ext4: fix use-after-free in ext4_search_dir
    - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
    - ext4, doc: fix incorrect h_reserved size
    - ext4: fix overhead calculation to account for the reserved gdt blocks
    - ext4: force overhead calculation if the s_overhead_cluster makes no sense
    - ext4: update the cached overhead value in the superblock
    - jbd2: fix a potential race while discarding reserved buffers after an abort
    - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller
    - ASoC: SOF: topology: cleanup dailinks on widget unload
    - io_uring: fix leaks on IOPOLL and CQE_SKIP
    - arm64: dts: qcom: add IPA qcom,qmp property
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.6
    - usb: mtu3: fix USB 3.0 dual-role-switch from device to host
    - floppy: disable FDRAWCMD by default
    - USB: quirks: add a Realtek card reader
    - USB: quirks: add STRING quirk for VCOM device
    - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
    - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
    - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
    - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
    - usb: xhci: tegra:Fix PM usage reference leak of tegra_xusb_unpowergate_partitions
    - xhci: Enable runtime PM on second Alderlake controller
    - xhci: stop polling roothubs after shutdown
    - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms
    - iio: dac: ad5592r: Fix the missing return value.
    - iio: scd4x: check return of scd4x_write_and_fetch
    - iio: dac: ad5446: Fix read_raw not returning set value
    - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
    - iio: imu: inv_icm42600: Fix I2C init possible nack
    - usb: misc: fix improper handling of refcount in uss720_probe()
    - usb: core: Don't hold the device lock while sleeping in do_proc_control()
    - usb: typec: ucsi: Fix reuse of completion structure
    - usb: typec: ucsi: Fix role swapping
    - usb: gadget: uvc: Fix crash when encoding data for usb request
    - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind()
    - usb: dwc3: Try usb-role-switch first in dwc3_drd_init
    - usb: dwc3: core: Fix tx/rx threshold settings
    - usb: dwc3: core: Only handle soft-reset in DCTL
    - usb: dwc3: gadget: Return proper request status
    - usb: dwc3: pci: add support for the Intel Meteor Lake-P
    - usb: cdns3: Fix issue for clear halt endpoint
    - usb: phy: generic: Get the vbus supply
    - kernfs: fix NULL dereferencing in kernfs_remove
    - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
    - binder: Address corner cases in deferred copy and fixup
    - serial: imx: fix overrun interrupts in DMA mode
    - serial: amba-pl011: do not time out prematurely when draining tx fifo
    - serial: 8250: Also set sticky MCR bits in console restoration
    - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
    - eeprom: at25: Use DMA safe buffers
    - arch_topology: Do not set llc_sibling if llc_id is invalid
    - topology: make core_mask include at least cluster_siblings
    - ceph: fix possible NULL pointer dereference for req->r_session
    - bus: mhi: host: pci_generic: Add missing poweroff() PM callback
    - bus: mhi: host: pci_generic: Flush recovery worker during freeze
    - arm64: dts: imx8mm-venice: fix spi2 pin configuration
    - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config
    - f2fs: should not truncate blocks during roll-forward recovery
    - hex2bin: make the function hex_to_bin constant-time
    - hex2bin: fix access beyond string end
    - bus: fsl-mc-msi: Fix MSI descriptor mutex lock for msi_first_desc()
    - riscv: patch_text: Fixup last cpu should be master
    - x86/cpu: Load microcode during restore_processor_state()
    - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
    - iocost: don't reset the inuse weight of under-weighted debtors
    - virtio_net: fix wrong buf address calculation when using xdp
    - cpufreq: qcom-hw: drop affinity hint before freeing the IRQ
    - cpufreq: qcom-hw: fix the race between LMH worker and cpuhp
    - cpufreq: qcom-hw: fix the opp entries refcounting
    - cpufreq: qcom-cpufreq-hw: Fix throttle frequency value on EPSS platforms
    - video: fbdev: udlfb: properly check endpoint type
    - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards
    - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards
    - iio: dac: ad3552r: fix signedness bug in ad3552r_reset()
    - iio:imu:bmi160: disable regulator in error path
    - iio:filter:admv8818: select REGMAP_SPI for ADMV8818
    - mtd: rawnand: fix ecc parameters for mt7622
    - tee: optee: add missing mutext_destroy in optee_ffa_probe
    - xsk: Fix l2fwd for copy mode + busy poll combo
    - arm64: dts: imx8qm: Correct SCU clock controller's compatible property
    - USB: Fix xhci event ring dequeue pointer ERDP update issue
    - soc: imx: imx8m-blk-ctrl: Fix IMX8MN_DISPBLK_PD_ISI hang
    - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
    - iio:dac:ad3552r: Fix an IS_ERR() vs NULL check
    - arm64: dts: imx8mq-tqma8mq: change the spi-nor tx
    - arm64: dts: imx8mn: Fix SAI nodes
    - arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO pin labeling for CON1
    - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
    - phy: samsung: exynos5250-sata: fix missing device put in probe error paths
    - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
    - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific
    - ARM: dts: dra7: Fix suspend warning for vpe powerdomain
    - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks
    - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek
    - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name
    - ARM: dts: at91: fix pinctrl phandles
    - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe
    - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
    - interconnect: qcom: sc7180: Drop IP0 interconnects
    - interconnect: qcom: sdx55: Drop IP0 interconnects
    - ARM: dts: Fix mmc order for omap3-gta04
    - ARM: dts: am33xx-l4: Add missing touchscreen clock properties
    - ARM: dts: am3517-evm: Fix misc pinmuxing
    - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35
    - pinctrl: qcom: sm6350: fix order of UFS & SDC pins
    - ipvs: correctly print the memory size of ip_vs_conn_tab
    - phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe()
    - pinctrl: mediatek: moore: Fix build error
    - mtd: rawnand: Fix return value check of wait_for_completion_timeout
    - mtd: fix 'part' field data corruption in mtd_info
    - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI
    - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode
    - net: dsa: Add missing of_node_put() in dsa_port_link_register_of
    - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion
    - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook
    - pinctrl: rockchip: fix RK3308 pinmux bits
    - tcp: md5: incorrect tcp_header_len for incoming connections
    - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested
    - tcp: ensure to use the most recently sent skb when filling the rate sample
    - wireguard: device: check for metadata_dst with skb_valid_dst()
    - sctp: check asoc strreset_chunk in sctp_generate_reconf_event
    - ARM: dts: imx6ull-colibri: fix vqmmc regulator
    - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock
    - pinctrl: pistachio: fix use of irq_of_parse_and_map()
    - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
    - net: hns3: clear inited state and stop client after failed to register netdev
    - net: hns3: fix error log of tx/rx tqps stats
    - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx
    - net: hns3: add validity check for message data length
    - net: hns3: add return value for mailbox handling in PF
    - net/smc: sync err code when tcp connection was refused
    - net: lan966x: fix a couple off by one bugs
    - ip_gre: Make o_seqno start from 0 in native mode
    - ip6_gre: Make o_seqno start from 0 in native mode
    - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
    - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
    - tcp: make sure treq->af_specific is initialized
    - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
    - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()
    - cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts
    - mctp: defer the kfree of object mdev->addrs
    - net: bcmgenet: hide status block before TX timestamping
    - net: phy: marvell10g: fix return value on error
    - net: dsa: mv88e6xxx: Fix port_hidden_wait to account for port_base_addr
    - drm/sun4i: Remove obsolete references to PHYS_OFFSET
    - ice: wait 5 s for EMP reset after firmware flash
    - Bluetooth: hci_event: Fix checking for invalid handle on error status
    - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK
    - io_uring: check reserved fields for send/sendmsg
    - io_uring: check reserved fields for recv/recvmsg
    - netfilter: nf_conntrack_tcp: re-init for syn packets only
    - netfilter: conntrack: fix udp offload timeout sysctl
    - platform/x86: asus-wmi: Potential buffer overflow in asus_wmi_evaluate_method_buf()
    - platform/x86: asus-wmi: Fix driver not binding when fan curve control probe fails
    - drm/amdkfd: Fix GWS queue count
    - drm/amd/display: Fix memory leak in dcn21_clock_source_create
    - tls: Skip tls_append_frag on zero copy size
    - bnx2x: fix napi API usage sequence
    - net: fec: add missing of_node_put() in fec_enet_init_stop_mode()
    - gfs2: Minor retry logic cleanup
    - gfs2: Make sure not to return short direct writes
    - gfs2: No short reads or writes upon glock contention
    - perf arm-spe: Fix addresses of synthesized SPE events
    - ixgbe: ensure IPsec VF<->PF compatibility
    - net: enetc: allow tc-etf offload even with NETIF_F_CSUM_MASK
    - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits"
    - tcp: fix F-RTO may not work correctly when receiving DSACK
    - io_uring: fix uninitialized field in rw io_kiocb
    - ASoC: soc-pcm: use GFP_KERNEL when the code is sleepable
    - ASoC: cs35l41: Fix a shift-out-of-bounds warning found by UBSAN
    - ASoC: rt711/5682: check if bus is active before deferred jack detection
    - ASoC: Intel: soc-acpi: correct device endpoints for max98373
    - ASoC: wm8731: Disable the regulator when probing fails
    - Input: cypress-sf - register a callback to disable the regulators
    - ext4: fix bug_on in start_this_handle during umount filesystem
    - arch: xtensa: platforms: Fix deadlock in rs_close()
    - ksmbd: increment reference count of parent fp
    - ksmbd: set fixed sector size to FS_SECTOR_SIZE_INFORMATION
    - erofs: fix use-after-free of on-stack io[]
    - bonding: do not discard lowest hash bit for non layer3+4 hashing
    - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
    - cifs: destage any unwritten data to the server before calling copychunk_write
    - drivers: net: hippi: Fix deadlock in rr_close()
    - powerpc/perf: Fix 32bit compile
    - ALSA: hda: intel-dsp-config: Add RaptorLake PCI IDs
    - selftest/vm: verify mmap addr in mremap_test
    - selftest/vm: verify remap destination address in mremap_test
    - bfq: Fix warning in bfqq_request_over_limit()
    - Revert "ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40"
    - Revert "block: inherit request start time from bio for BLK_CGROUP"
    - zonefs: Fix management of open zones
    - zonefs: Clear inode information flags on inode creation
    - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time
    - mtd: rawnand: qcom: fix memory corruption that causes panic
    - netfilter: Update ip6_route_me_harder to consider L3 domain
    - drm/amdgpu: don't runtime suspend if there are displays attached (v3)
    - drm/i915: Check EDID for HDR static metadata when choosing blc
    - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses
    - net: ethernet: stmmac: fix write to sgmii_adapter_base
    - ACPI: processor: idle: Avoid falling back to C3 type C-states
    - thermal: int340x: Fix attr.show callback prototype
    - btrfs: fix direct I/O read repair for split bios
    - btrfs: fix direct I/O writes for split bios on zoned devices
    - btrfs: fix leaked plug after failure syncing log on zoned filesystems
    - btrfs: zoned: use dedicated lock for data relocation
    - btrfs: fix assertion failure during scrub due to block group reallocation
    - ARM: dts: at91: sama7g5ek: enable pull-up on flexcom3 console lines
    - ARM: dts: imx8mm-venice-gw{71xx,72xx,73xx}: fix OTG controller OC mode
    - perf symbol: Pass is_kallsyms to symbols__fixup_end()
    - perf symbol: Update symbols__fixup_end()
    - perf symbol: Remove arch__symbols__fixup_end()
    - tty: n_gsm: fix missing mux reset on config change at responder
    - tty: n_gsm: fix restart handling via CLD command
    - tty: n_gsm: fix decoupled mux resource
    - tty: n_gsm: fix mux cleanup after unregister tty device
    - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
    - tty: n_gsm: fix frame reception handling
    - tty: n_gsm: fix malformed counter for out of frame data
    - netfilter: nft_socket: only do sk lookups when indev is available
    - tty: n_gsm: fix insufficient txframe size
    - tty: n_gsm: fix wrong DLCI release order
    - tty: n_gsm: fix missing explicit ldisc flush
    - tty: n_gsm: fix wrong command retry handling
    - tty: n_gsm: fix wrong command frame length field encoding
    - tty: n_gsm: fix wrong signal octets encoding in MSC
    - tty: n_gsm: fix missing tty wakeup in convergence layer type 2
    - tty: n_gsm: fix reset fifo race condition
    - tty: n_gsm: fix incorrect UA handling
    - tty: n_gsm: fix missing update of modem controls after DLCI open
    - tty: n_gsm: fix broken virtual tty handling
    - tty: n_gsm: fix invalid use of MSC in advanced option
    - tty: n_gsm: fix software flow control handling
    - tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output()
    - objtool: Fix code relocs vs weak symbols
    - objtool: Fix type of reloc::addend
    - powerpc/64: Add UADDR64 relocation support
.
  [ Diederik de Haas ]
  * [armhf] drivers/net/ethernet/freescale: Enable FEC as module
    (Closes: #991461)
  * [x86] drivers/extcon: Enable EXTCON_AXP288 as module
  * [x86] drivers/power/supply: Enable AXP288_CHARGER as module
    (Closes: #940672)
.
  [ Vagrant Cascadian ]
  * [arm64] Enable modules for MNT Reform: DRM_LVDS_CODEC,
    DRM_SIMPLE_BRIDGE, DRM_TI_SN65DSI86, DRM_CDNS_MHDP8546, DRM_IMX_DCSS,
    DRM_PANEL_LVDS, I2C_IMX_LPI2C, I2C_MUX_REG, INTERCONNECT_IMX,
    INTERCONNECT_IMX8MQ, MFD_WM8994, MUX_GPIO, MUX_MMIO, RTC_DRV_PCF8523,
    USB_EHCI_FSL, BACKLIGHT_GPIO, BACKLIGHT_LED, SND_SOC_WM8960,
    SND_SOC_FSL_MICFIL, SND_IMX_SOC, SND_SOC_FSL_ASOC_CARD,
    SND_SOC_IMX_AUDMIX and SND_SOC_IMX_HDMI. Thanks to Johannes Schauer
    Marin Rodrigues. (Closes: #1009858)
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 2
.
linux (5.17.3-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.2
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.3
.
  [ Salvatore Bonaccorso ]
  * linux-kbuild: Include scripts/pahole-flags.sh (Closes: #1008501)
  * [x86] drivers/cpufreq: Enable X86_AMD_PSTATE as module (Closes: #1009302)
  * [rt] Update to 5.17.1-rt17
  * Set ABI to 1
.
  [ Adriaan Schmidt ]
  * tools: install perf python bindings (Closes: #860957)
.
  [ Ben Hutchings ]
  * d/bin/gencontrol_signed.py: Add support for pkg.linux.quick profile
  * lintian: Add lintian-overrides to linux-signed-* for non-issues
  * d/salsa-ci.yml: Don't disable signed code
  * d/certs: Add certificate and key to enable test signing in CI
  * d/salsa-ci.yml: Add jobs to build and test the signed packages
.
  [ Vagrant Cascadian ]
  * [arm64] Add nvmem-rockchip-efuse and phy-rockchip-inno-hdmi to fb-modules
    udeb.
.
linux (5.17.1-1~exp1) experimental; urgency=medium
.
  * New upstream release: https://kernelnewbies.org/Linux_5.17
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.1
.
  [ Bastian Blank ]
  * [arm64] Enable HyperV support.  (closes: #1007023)
  * Replace FB_HYPERV with DRM_HYPERV.
  * Allow disabling debug info by build profile.
  * [arm64] Make sure hyperv-daemons are actually build.
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.17-rt15
.
  [ Diederik de Haas ]
  * [armhf] Enable SUN8I_THERMAL as module (Closes: #1007799)
.
linux (5.17~rc8-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.17-rc7-rt13
.
linux (5.17~rc7-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.17-rc7-rt12
.
linux (5.17~rc6-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.17-rc6-rt10
.
linux (5.17~rc5-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.17-rc5-rt8
.
linux (5.17~rc4-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Bastian Blank ]
  * Add pkg.linux.nokerneldbg build profile that excludes kernel debug
    packages.
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.17-rc4-rt7
.
linux (5.17~rc3-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Ben Hutchings ]
  * Rebase patches:
    - Drop "x86-32: Disable 3D-Now in generic config"
    - Drop "RISC-V: Use SBI SRST extension when available"
    - Drop "objtool: check: give big enough buffer for pv_ops"
    - Drop part of "sh: Do not use hyphen in exported variable names"
    - Update "add sysctl to disallow unprivileged CLONE_NEWUSER by default"
    - Update "Disable uImage generation for mips generic"
    - Update "MODSIGN: do not load mok when secure boot disabled"
  * [rt] Update to 5.17-rc2-rt4
  * linux-kbuild: Build extract-cert in certs/ instead of scripts/
  * d/rules.real: Pass C compiler options to user-space build in HOSTCFLAGS too
.
  [ Aurelien Jarno ]
  * [riscv64] Add basic support for StarFive JH7100 RISC-V SoC: enable
    I2C_DESIGNWARE_PLATFORM, MFD_TPS65086, REGULATOR_TPS65086, SERIAL_8250_DW,
    SOC_STARFIVE
.
linux (5.16.18-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.15
    - HID: elo: Revert USB reference counting
    - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
    - [arm64] clk: qcom: gdsc: Add support to update GDSC transition delay
    - HID: vivaldi: fix sysfs attributes leak
    - HID: nintendo: check the return value of alloc_workqueue()
    - [arm64] dts: armada-3720-turris-mox: Add missing ethernet0 alias
    - tipc: fix kernel panic when enabling bearer
    - [arm64] net: phy: meson-gxl: fix interrupt handling in forced mode
    - mISDN: Fix memory leak in dsp_pipeline_build()
    - vhost: fix hung thread due to erroneous iotlb entries
    - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero
    - virtio-blk: Remove BUG_ON() in virtio_queue_rq()
    - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw()
    - net: qlogic: check the return value of dma_alloc_coherent() in
      qed_vf_hw_prepare()
    - esp: Fix possible buffer overflow in ESP transformation (CVE-2022-27666)
    - esp: Fix BEET mode inter address family tunneling on GSO
    - net: gro: move skb_gro_receive_list to udp_offload.c
    - qed: return status of qed_iov_get_link
    - smsc95xx: Ignore -ENODEV errors when device is unplugged
    - gpiolib: acpi: Convert ACPI value of debounce to microseconds
    - [x86] drm/i915/psr: Set "SF Partial Frame Enable" also on full update
    - drm/sun4i: mixer: Fix P010 and P210 format numbers
    - iavf: Fix handling of vlan strip virtual channel messages
    - i40e: stop disabling VFs due to PF error responses
    - ice: stop disabling VFs due to PF error responses
    - ice: Fix error with handling of bonding MTU
    - ice: Don't use GFP_KERNEL in atomic context
    - ice: Fix curr_link_speed advertised speed
    - ethernet: Fix error handling in xemaclite_of_probe
    - tipc: fix incorrect order of state message data sanity check
    - [armhf] net: ethernet: ti: cpts: Handle error for clk_enable
    - ax25: Fix NULL pointer dereference in ax25_kill_by_device
    - net/mlx5: Fix size field in bufferx_reg struct
    - net/mlx5: Fix a race on command flush flow
    - net/mlx5e: Lag, Only handle events from highest priority multipath entry
    - net/mlx5e: SHAMPO, reduce TIR indication
    - NFC: port100: fix use-after-free in port100_send_complete
    - mm: gup: make fault_in_safe_writeable() use fixup_user_fault()
    - net: phy: DP83822: clear MISR2 register to disable interrupts
    - sctp: fix kernel-infoleak for SCTP sockets
    - [arm64] net: bcmgenet: Don't claim WOL when its not available
    - [arm64] net: phy: meson-gxl: improve link-up behavior
    - swiotlb: fix info leak with DMA_FROM_DEVICE (CVE-2022-0854)
    - [arm64] usb: dwc3: pci: add support for the Intel Raptor Lake-S
    - [x86] pinctrl: tigerlake: Revert "Add Alder Lake-M ACPI ID"
    - KVM: Fix lockdep false negative during host resume
    - [x86] kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup
      mode
    - [arm64,armhf] spi: rockchip: Fix error in getting num-cs property
    - [arm64,armhf] spi: rockchip: terminate dma transmission when slave abort
    - [arm*] drm/vc4: hdmi: Unregister codec device on unbind
    - of/fdt: move elfcorehdr reservation early for crash dump kernel
    - [x86] kvm: Don't use pv tlb/ipi/sched_yield if on 1 vCPU
    - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
    - net-sysfs: add check for netdevice being present to speed_show
    - [armhf] hwmon: (pmbus) Clear pmbus fault/warning bits after read
    - nvme-tcp: send H2CData PDUs based on MAXH2CDATA
    - PCI: Mark all AMD Navi10 and Navi14 GPU ATS as broken
    - gpio: Return EPROBE_DEFER if gc->to_irq is NULL
    - drm/amdgpu: bypass tiling flag check in virtual display case (v2)
    - Revert "xen-netback: remove 'hotplug-status' once it has served its
      purpose"
    - Revert "xen-netback: Check for hotplug-status existence before watching"
    - ipv6: prevent a possible race condition with lifetimes
    - tracing: Ensure trace buffer is at least 4096 bytes large
    - tracing/osnoise: Make osnoise_main to sleep for microseconds
    - [armel,armhf] Spectre-BHB: provide empty stub for non-config
    - fuse: fix fileattr op failure
    - fuse: fix pipe buffer lifetime for direct_io (CVE-2022-1011)
    - [arm64,x86] staging: rtl8723bs: Fix access-point mode deadlock
    - [arm64] net: macb: Fix lost RX packet wakeup race in NAPI receive
    - [arm64] mmc: meson: Fix usage of meson_mmc_post_req()
    - tracing/osnoise: Force quiescent states while tracing
    - tracing/osnoise: Do not unregister events twice
    - [arm64] dts: marvell: armada-37xx: Remap IO space to bus address 0x0
    - [arm64] Ensure execute-only permissions are not allowed without EPAN
    - swiotlb: rework "fix info leak with DMA_FROM_DEVICE" (CVE-2022-0854)
    - virtio: unexport virtio_finalize_features
    - virtio: acknowledge all features before access
    - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE
    - [armel,armhf] fix Thumb2 regression with Spectre BHB
    - watch_queue: Fix filter limit check (CVE-2022-0995)
    - watch_queue, pipe: Free watchqueue state after clearing pipe ring
      (CVE-2022-0995)
    - watch_queue: Fix to release page in ->release() (CVE-2022-0995)
    - watch_queue: Fix to always request a pow-of-2 pipe ring size
      (CVE-2022-0995)
    - watch_queue: Fix the alloc bitmap size to reflect notes allocated
      (CVE-2022-0995)
    - watch_queue: Free the alloc bitmap when the watch_queue is torn down
      (CVE-2022-0995)
    - watch_queue: Fix lack of barrier/sync/lock between post and read
      (CVE-2022-0995)
    - watch_queue: Make comment about setting ->defunct more accurate
      (CVE-2022-0995)
    - [x86] boot: Fix memremap of setup_indirect structures
    - [x86] boot: Add setup_indirect support in early_memremap_is_setup_data()
    - [x86] module: Fix the paravirt vs alternative order
    - [x86] traps: Mark do_int3() NOKPROBE_SYMBOL
    - perf parse: Fix event parser error for hybrid systems
    - btrfs: make send work with concurrent block group relocation
    - vhost: allow batching hint without size
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.16
    - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
    - [arm64] dts: rockchip: fix rk3399-puma-haikou USB OTG mode
    - xfrm: Check if_id in xfrm_migrate
    - xfrm: Fix xfrm migrate issues when address family changes
    - mac80211: refuse aggregations sessions before authorized
    - [mips64el,mipsel] smp: fill in sibling and core maps earlier
    - Bluetooth: hci_core: Fix leaking sent_cmd skb
    - [x86] atm: firestream: check the return value of ioremap() in fs_init()
    - netfilter: egress: silence egress hook lockdep splats
    - Input: goodix - use the new soc_intel_is_byt() helper
    - Input: goodix - workaround Cherry Trail devices with a bogus ACPI
      Interrupt() resource
    - iwlwifi: don't advertise TWT support
    - drm/vrr: Set VRR capable prop only if it is attached to connector
    - nl80211: Update bss channel on channel switch for P2P_CLIENT
    - tcp: make tcp_read_sock() more robust
    - sfc: extend the locking on mcdi->seqno
    - bnx2: Fix an error message
    - ice: Fix race condition during interface enslave
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.17
    - crypto: qcom-rng - ensure buffer for generate is completely filled
    - ocfs2: fix crash when initialize filecheck kobj fails
    - mm: swap: get rid of livelock in swapin readahead
    - block: release rq qos structures for queue without disk
    - [x86] drm/mgag200: Fix PLL setup for g200wb and g200ew
    - efi: fix return value of __setup handlers
    - alx: acquire mutex for alx_reinit in alx_change_mtu
    - vsock: each transport cycles only on its own sockets
    - esp6: fix check on ipv6_skip_exthdr's return value
    - net: phy: marvell: Fix invalid comparison in the resume and suspend
      functions
    - net/packet: fix slab-out-of-bounds access in packet_recvmsg()
    - nvmet: revert "nvmet: make discovery NQN configurable"
    - atm: eni: Add check for dma_map_single
    - ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()
    - iavf: Fix double free in iavf_reset_task
    - hv_netvsc: Add check for kvmalloc_array
    - [armhf] drm/imx: parallel-display: Remove bus flags check in
      imx_pd_bridge_atomic_check()
    - [arm64,armhf] drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
    - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
    - [arm64,armhf] net: dsa: Add missing of_node_put() in dsa_port_parse_of
    - net: phy: mscc: Add MODULE_FIRMWARE macros
    - bnx2x: fix built-in kernel driver load failure
    - [arm64] net: bcmgenet: skip invalid partial checksums
    - [arm64] net: mscc: ocelot: fix backwards compatibility with single-chain
      tc-flower offload
    - iavf: Fix hang during reboot/shutdown
    - usb: gadget: rndis: prevent integer overflow in rndis_set_response()
    - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
    - usb: usbtmc: Fix bug in pipe direction for control transfers
    - scsi: mpt3sas: Page fault in reply q processing
    - Input: aiptek - properly check endpoint type
    - [arm64] errata: avoid duplicate field initializer
    - perf symbols: Fix symbol size calculation condition
    - Revert "ath10k: drop beacon and probe response which leak from other
      channel"
    - btrfs: skip reserved bytes warning on unmount after log cleanup failure
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.18
    - Bluetooth: btusb: Add another Realtek 8761BU
    - llc: fix netdevice reference leaks in llc_ui_bind()
    - ALSA: oss: Fix PCM OSS buffer allocation overflow
    - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ
    - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ
    - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
    - ALSA: hda/realtek: Add quirk for ASUS GA402
    - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
      (CVE-2022-1048)
    - ALSA: pcm: Fix races among concurrent read/write and buffer changes
      (CVE-2022-1048)
    - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
      (CVE-2022-26490)
    - net: ipv6: fix skb_over_panic in __ip6_append_data
    - tpm: Fix error handling in async work
    - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
      (CVE-2022-1048)
    - ALSA: pcm: Fix races among concurrent prealloc proc writes (CVE-2022-1048)
    - ALSA: pcm: Add stream lock during PCM reset ioctl operations
    - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
    - ALSA: cmipci: Restore aux vol on suspend/resume
    - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
    - [arm64] drivers: net: xgene: Fix regression in CRC stripping
    - netfilter: nf_tables: initialize registers in nft_do_chain()
      (CVE-2022-1016)
    - netfilter: nf_tables: validate registers coming from userspace.
      (CVE-2022-1015)
    - [x86] ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
    - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
    - [x86] ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
    - [x86] crypto: qat - disable registration of algorithms
    - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
    - Revert "ath: add support for special 0x0 regulatory domain"
    - drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
    - rcu: Don't deboost before reporting expedited quiescent state
    - uaccess: fix integer overflow on access_ok()
    - mac80211: fix potential double free on mesh join
    - tpm: use try_get_ops() in tpm-space.c
    - [arm64] wcn36xx: Differentiate wcn3660 from wcn3620
    - llc: only change llc->dev when bind() succeeds
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 6
.
  [ Vincent Blut ]
  * sound/pci/hda: Enable SND_HDA_CODEC_CS8409 as module (Closes: #1008122)
.
linux (5.16.14-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.13
    - mac80211_hwsim: report NOACK frames in tx_status
    - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
    - [arm*] i2c: bcm2835: Avoid clock stretching timeouts
    - [x86] ASoC: rt5682s: do not block workqueue if card is unbound
    - ASoC: rt5682: do not block workqueue if card is unbound
    - regulator: core: fix false positive in regulator_late_cleanup()
    - Input: clear BTN_RIGHT/MIDDLE on buttonpads
    - btrfs: get rid of warning on transaction commit when using flushoncommit
    - [arm64] KVM: arm64: vgic: Read HW interrupt pending state from the HW
    - block: loop:use kstatfs.f_bsize of backing file to set discard granularity
    - tipc: fix a bit overflow in tipc_crypto_key_rcv()
    - cifs: do not use uninitialized data in the owner/group sid
    - cifs: fix double free race when mount fails in cifs_get_root()
    - [amd64] HID: amd_sfh: Handle amd_sfh work buffer in PM ops
    - [amd64] HID: amd_sfh: Add functionality to clear interrupts
    - [amd64] HID: amd_sfh: Add interrupt handler to process interrupts
    - cifs: modefromsids must add an ACE for authenticated users
    - drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby
    - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
    - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
    - usb: gadget: don't release an existing dev->buf (CVE-2022-24958)
    - usb: gadget: clear related members when goto fail (CVE-2022-24958)
    - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
    - exfat: fix i_blocks for files truncated over 4 GiB
    - tracing: Add test for user space strings when filtering on string pointers
    - [arm64] Mark start_backtrace() notrace and NOKPROBE_SYMBOL
    - [armhf] serial: stm32: prevent TDR register overwrite when sending x_char
    - [arm64] KVM: arm64: Workaround Cortex-A510's single-step and PAC trap
      errata
    - ext4: drop ineligible txn start stop APIs
    - ext4: simplify updating of fast commit stats
    - ext4: fast commit may not fallback for ineligible commit
    - ext4: fast commit may miss file actions
    - sched/fair: Fix fault in reweight_entity
    - [x86] KVM: x86: Add KVM_CAP_ENABLE_CAP to x86
    - ata: pata_hpt37x: fix PCI clock detection
    - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
    - tracing: Add ustring operation to filtering string pointers
    - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()
      (CVE-2022-0742)
    - btrfs: defrag: bring back the old file extent search behavior
    - btrfs: defrag: don't use merged extent map for their generation check
    - [x86] ALSA: intel_hdmi: Fix reference to PCM buffer address
    - ucounts: Fix systemd LimitNPROC with private users regression
    - binfmt_elf: Avoid total_mapping_size for ET_EXEC
    - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
    - [amd64] iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
    - [amd64] iommu/amd: Recover from event log overflow
    - [x86] drm/i915: s/JSP2/ICP2/ PCH
    - drm/amd/display: Reduce dmesg error to a debug print
    - xen/netfront: destroy queues before real_num_tx_queues is zeroed
    - mac80211: fix EAPoL rekey fail in 802.3 rx path
    - blktrace: fix use after free for struct blk_trace
    - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
    - xfrm: fix MTU regression
    - netfilter: fix use-after-free in __nf_register_net_hook()
    - bpf, sockmap: Do not ignore orig_len parameter
    - xfrm: fix the if_id check in changelink
    - xfrm: enforce validity of offload input flags
    - e1000e: Correct NVM checksum verification flow
    - net: fix up skbs delta_truesize in UDP GRO frag_list
    - netfilter: nf_queue: don't assume sk is full socket
    - netfilter: nf_queue: fix possible use-after-free
    - netfilter: nf_queue: handle socket prefetch
    - batman-adv: Request iflink once in batadv-on-batadv check
    - batman-adv: Request iflink once in batadv_get_real_netdevice
    - batman-adv: Don't expect inter-netns unique iflink indices
    - net: ipv6: ensure we call ipv6_mc_down() at most once
    - net: dcb: flush lingering app table entries for unregistered devices
    - net/smc: fix connection leak
    - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
    - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
    - btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range
    - [amd64] platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer
      wakeup
    - mac80211: fix forwarded mesh frames AC & queue selection
    - net: stmmac: fix return value of __setup handler
    - mac80211: treat some SAE auth steps as final
    - iavf: Fix missing check for running netdev
    - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
    - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
    - iavf: Fix deadlock in iavf_reset_task
    - efivars: Respect "block" flag in efivar_entry_set_safe()
    - [armhf] firmware: arm_scmi: Remove space in MODULE_ALIAS name
    - can: gs_usb: change active_channels's type from atomic_t to u8
    - [arm64,armhf] iommu/tegra-smmu: Fix missing put_device() call in
      tegra_smmu_find
    - igc: igc_read_phy_reg_gpy: drop premature return
    - [mips*] setup: fix setnocoherentio() boolean setting
    - [armel,armhf] 9182/1: mmu: fix returns from early_param() and __setup()
      functions
    - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
    - [arm64,armhf] pinctrl: sunxi: Use unique lockdep classes for IRQs
    - igc: igc_write_phy_reg_gpy: drop premature return
    - memfd: fix F_SEAL_WRITE after shmem huge page allocated
    - [s390x] setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE
    - [s390x] extable: fix exception table sorting
    - sched: Fix yet more sched_fork() races
    - [arm64] dts: rockchip: fix Quartz64-A ddr regulator voltage
    - [amd64] iommu/amd: Fix I/O page table memory leak
    - [armhf] dts: switch timer config to common devkit8000 devicetree
    - [armhf] dts: Use 32KiHz oscillator on devkit8000
    - [arm64] soc: fsl: guts: Revert commit 3c0d64e867ed
    - [arm64] soc: fsl: guts: Add a missing memory allocation failure check
    - [arm64] soc: imx: gpcv2: Fix clock disabling imbalance in error path
    - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
    - [armhf] tegra: Move panels to AUX bus
    - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
    - net: stmmac: enhance XDP ZC driver level switching performance
    - net: stmmac: only enable DMA interrupts when ready
    - net: chelsio: cxgb3: check the return value of pci_find_capability()
    - iavf: Add trace while removing device
    - iavf: Rework mutexes for better synchronisation
    - iavf: Add waiting so the port is initialized in remove
    - iavf: Fix init state closure on remove
    - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS
    - iavf: Fix race in init state
    - iavf: Fix __IAVF_RESETTING state usage
    - [x86] drm/i915/guc/slpc: Correct the param count for unset param
    - e1000e: Fix possible HW unit hang after an s0ix exit
    - nl80211: Handle nla_memdup failures in handle_nan_filter
    - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments
    - drm/amdgpu: fix suspend/resume hang regression
    - net: dcb: disable softirqs in dcbnl_flush_dev()
    - net: stmmac: perserve TX and RX coalesce value during XDP setup
    - Input: elan_i2c - move regulator_[en|dis]able() out of
      elan_[en|dis]able_power()
    - Input: elan_i2c - fix regulator enable count imbalance after
      suspend/resume
    - HID: add mapping for KEY_DICTATE
    - HID: add mapping for KEY_ALL_APPLICATIONS
    - tracing/histogram: Fix sorting on old "cpu" value
    - tracing: Fix return value of __setup handlers
    - btrfs: fix lost prealloc extents beyond eof after full fsync
    - btrfs: fix relocation crash due to premature return from
      btrfs_commit_transaction()
    - btrfs: subpage: fix a wrong check on subpage->writers
    - btrfs: do not WARN_ON() if we have PageError set
    - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
    - btrfs: add missing run of delayed items after unlink during log replay
    - btrfs: fallback to blocking mode when doing async dio over multiple
      extents
    - btrfs: do not start relocation until in progress drops are done
    - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
    - proc: fix documentation and description of pagemap
    - [x86] kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64
    - [s390x] ftrace: fix arch_ftrace_get_regs implementation
    - [s390x] ftrace: fix ftrace_caller/ftrace_regs_caller generation
    - [x86] KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.14
    - [armhf] report Spectre v2 status through sysfs
    - [armel,armhf] early traps initialisation
    - [armel,armhf] use LOADADDR() to get load address of sections
    - [armel,armhf] Spectre-BHB workaround
    - [armhf] include unprivileged BPF status in Spectre V2 reporting
    - [arm64] add ID_AA64ISAR2_EL1 sys register
    - [arm64] cpufeature: add HWCAP for FEAT_AFP
    - [arm64] cpufeature: add HWCAP for FEAT_RPRES
    - [arm64] entry.S: Add ventry overflow sanity checks
    - [arm64] spectre: Rename spectre_v4_patch_fw_mitigation_conduit
    - [arm64] KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A
    - [arm64] entry: Make the trampoline cleanup optional
    - [arm64] entry: Free up another register on kpti's tramp_exit path
    - [arm64] entry: Move the trampoline data page before the text page
    - [arm64] entry: Allow tramp_alias to access symbols after the 4K boundary
    - [arm64] entry: Don't assume tramp_vectors is the start of the vectors
    - [arm64] entry: Move trampoline macros out of ifdef'd section
    - [arm64] entry: Make the kpti trampoline's kpti sequence optional
    - [arm64] entry: Allow the trampoline text to occupy multiple pages
    - [arm64] entry: Add non-kpti __bp_harden_el1_vectors for mitigations
    - [arm64] entry: Add vectors that have the bhb mitigation sequences
    - [arm64] entry: Add macro for reading symbol addresses from the trampoline
    - [arm64] Add percpu vectors for EL1
    - [arm64] proton-pack: Report Spectre-BHB vulnerabilities as part of
      Spectre-v2
    - [arm64] Mitigate spectre style branch history side channels
    - [arm64] KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and
      migrated
    - [arm64] Use the clearbhb instruction in mitigations
    - [arm64] proton-pack: Include unprivileged eBPF status in Spectre v2
      mitigation reporting
    - [armel,armhf] fix co-processor register typo
    - [armel,armhf] Do not use NOCROSSREFS directive with ld.lld
    - [arm64] Do not include __READ_ONCE() block in assembly files
    - [armhf] fix build warning in proc-v7-bugs.c
    - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
      (CVE-2022-23040, XSA-396)
    - xen/grant-table: add gnttab_try_end_foreign_access() (CVE-2022-23036,
      CVE-2022-23038, XSA-396)
    - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
      (CVE-2022-23036, XSA-396)
    - xen/netfront: don't use gnttab_query_foreign_access() for mapped status
      (CVE-2022-23037, XSA-396)
    - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
      (CVE-2022-23038, XSA-396)
    - xen/gntalloc: don't use gnttab_query_foreign_access() (CVE-2022-23039,
      XSA-396)
    - xen: remove gnttab_query_foreign_access()
    - xen/9p: use alloc/free_pages_exact() (CVE-2022-23041, XSA-396)
    - xen/pvcalls: use alloc/free_pages_exact() (CVE-2022-23041, XSA-396)
    - xen/gnttab: fix gnttab_end_foreign_access() without page specified
      (CVE-2022-23041, XSA-396)
    - xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
      (CVE-2022-23042, XSA-396)
    - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE"
.
  [ Bastian Blank ]
  * [arm64] Enable hyperv-daemons package.
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 5

linux (5.16.12-2parrot1) parrot-updates; urgency=medium
.
  * Import new Debian release.
  * Apply parrot patches for wifi drivers.
  * Disable secure boot on debian build configs.
  * Switch timer frequency from 250hz to 300hz.
.
linux (5.16.12-1) unstable; urgency=high
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.12
    - mm/filemap: Fix handling of THPs in generic_file_buffered_read()
    - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
    - btrfs: tree-checker: check item_size for inode_item
    - btrfs: tree-checker: check item_size for dev_item
    - slab: remove __alloc_size attribute from __kmalloc_track_caller
    - io_uring: don't convert to jiffies for waiting on timeouts
    - io_uring: disallow modification of rsrc_data during quiesce
    - selinux: fix misuse of mutex_is_locked()
    - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
    - [x86] KVM: x86/mmu: make apf token non-zero to fix bug
    - [x86] KVM: x86: nSVM: disallow userspace setting of MSR_AMD64_TSC_RATIO to
      non default value when tsc scaling disabled
    - drm/amd: Check if ASPM is enabled from PCIe subsystem
    - drm/amdgpu: disable MMHUB PG for Picasso
    - drm/amdgpu: do not enable asic reset for raven2
    - [x86] drm/i915: Widen the QGV point mask
    - [x86] drm/i915: Disconnect PHYs left connected by BIOS on disabled ports
    - [x86] drm/i915: Correctly populate use_sagv_wm for all pipes
    - [x86] drm/i915: Fix bw atomic check when switching between SAGV vs. no
      SAGV
    - sr9700: sanity check for packet length
    - USB: zaurus: support another broken Zaurus
    - CDC-NCM: avoid overflow in sanity checking
    - ping: remove pr_err from ping_lookup
    - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC"
    - [arm64,armhf] gpu: host1x: Always return syncpoint value when waiting
    - perf data: Fix double free in perf_session__delete()
    - mptcp: fix race in incoming ADD_ADDR option processing
    - mptcp: add mibs counter for ignored incoming options
    - bnx2x: fix driver load from initrd
    - bnxt_en: Fix devlink fw_activate
    - bnxt_en: Fix active FEC reporting to ethtool
    - bnxt_en: Fix offline ethtool selftest with RDMA enabled
    - bnxt_en: Fix occasional ethtool -t loopback test failures
    - bnxt_en: Fix incorrect multicast rx mask setting when not requested
    - bnxt_en: Restore the resets_reliable flag in bnxt_open()
    - hwmon: Handle failure to register sensor with thermal zone correctly
    - net/mlx5: Fix tc max supported prio for nic mode
    - ice: fix setting l4 port flag when adding filter
    - ice: fix concurrent reset and removal of VFs
    - ice: check the return of ice_ptp_gettimex64
    - ice: initialize local variable 'tlv'
    - net/mlx5: Update the list of the PCI supported devices
    - bpf: Fix crash due to incorrect copy_map_value
    - bpf: Do not try bpf_msg_push_data with len 0
    - bpf: Fix a bpf_timer initialization issue
    - bpf: Add schedule points in batch ops
    - io_uring: add a schedule point in io_add_buffers()
    - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
    - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info
    - tipc: Fix end of loop tests for list_for_each_entry()
    - gso: do not skip outer ip header in case of ipip and net_failover
    - [armel,armhf] net: mv643xx_eth: process retval from of_get_mac_address
    - openvswitch: Fix setting ipv6 fields causing hw csum failure
    - drm/edid: Always set RGB444
    - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
    - net/mlx5e: TC, Reject rules with forward and drop actions
    - net/mlx5e: TC, Reject rules with drop and modify hdr action
    - block: clear iocb->private in blkdev_bio_end_io_async()
    - [arm*] drm/vc4: crtc: Fix runtime_pm reference counting
    - [x86] drm/i915/dg2: Print PHY name properly on calibration error
    - drm/amd/display: For vblank_disable_immediate, check PSR is really used
    - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones
    - net: Force inlining of checksum functions in net/checksum.h
    - netfilter: nf_tables: unregister flowtable hooks on netns exit
    - [arm64,armhf] net: dsa: avoid call to __dev_set_promiscuity() while
      rtnl_mutex isn't held
    - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
    - netfilter: nf_tables: fix memory leak during stateful obj update
    - net/smc: Use a mutex for locking "struct smc_pnettable"
    - [x86] surface: surface3_power: Fix battery readings on batteries without a
      serial number
    - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister()
    - net/mlx5: DR, Cache STE shadow memory
    - net/mlx5: DR, Don't allow match on IP w/o matching on full
      ethertype/ip_version
    - net/mlx5: Fix possible deadlock on rule deletion
    - net/mlx5: Fix wrong limitation of metadata match on ecpf
    - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated
    - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches
    - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets
    - net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
    - net/mlx5: Update log_max_qp value to be 17 at most
    - net/mlx5e: Add missing increment of count
    - [armel,armhf] PCI: mvebu: Fix device enumeration regression
    - [arm64,armhf] gpio: rockchip: Reset int_bothedge when changing trigger
    - regmap-irq: Update interrupt clear register for proper reset
    - net: use sk_is_tcp() in more places
    - net-timestamp: convert sk->sk_tskey to atomic_t
    - bnxt_en: Increase firmware message response DMA wait time
    - configfs: fix a race in configfs_{,un}register_subsystem()
    - RDMA/ib_srp: Fix a deadlock
    - bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
    - bpf: Fix crash due to out of bounds access into reg2btf_ids.
    - tracing: Dump stacktrace trigger to the corresponding instance
    - tracing: Have traceon and traceoff trigger honor the instance
    - iio:imu:adis16480: fix buffering for devices with no burst mode
    - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
    - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot
    - iio: Fix error handling for PM
    - ata: pata_hpt37x: disable primary channel on HPT371
    - Revert "USB: serial: ch341: add new Product ID for CH341A"
    - usb: gadget: rndis: add spinlock for rndis response list
    - tracefs: Set the group ownership in apply_options() not parse_options()
    - USB: serial: option: add support for DW5829e
    - USB: serial: option: add Telit LE910R1 compositions
    - [arm*] usb: dwc2: drd: fix soft connect when gadget is unconfigured
    - [arm64] usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail
    - [arm64] usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
    - [arm64,armhf] usb: dwc3: gadget: Let the interrupt handler disable bottom
      halves.
    - xhci: re-initialize the HC during resume if HCE was set
    - xhci: Prevent futile URB re-submissions due to incorrect return value.
    - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
    - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property
    - driver core: Free DMA range map when device is released
    - btrfs: defrag: don't try to merge regular extents with preallocated
      extents
    - btrfs: defrag: don't defrag extents which are already at max capacity
    - btrfs: defrag: remove an ambiguous condition for rejection
    - btrfs: prevent copying too big compressed lzo segment
    - btrfs: defrag: allow defrag_one_cluster() to skip large extent which is
      not a target
    - btrfs: autodefrag: only scan one inode once
    - btrfs: reduce extent threshold for autodefrag
    - RDMA/cma: Do not change route.addr.src_addr outside state checks
    - [amd64] thermal: int340x: fix memory leak in int3400_notify()
    - [x86] tps6598x: clear int mask on probe failure
    - [amd64] IB/qib: Fix duplicate sysfs directory name
    - mm/hugetlb: fix kernel crash with hugetlb mremap
    - hugetlbfs: fix a truncation issue in hugepages parameter
    - tty: n_gsm: fix encoding of control signal octet bit DV
    - tty: n_gsm: fix encoding of command/response bit
    - tty: n_gsm: fix proper link termination after failed open
    - tty: n_gsm: fix NULL pointer access due to DLCI release
    - tty: n_gsm: fix wrong tty control line for flow control
    - tty: n_gsm: fix wrong modem processing in convergence layer type 2
    - tty: n_gsm: fix deadlock in gsmtty_open()
    - memblock: use kfree() to release kmalloced memblock regions
.
  [ Vincent Blut ]
  * drivers/leds: Enable LEDS_CLASS_MULTICOLOR as module (Closes: #1006490)
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 4
  * Mitigate Spectre v2-type Branch History Buffer attacks (CVE-2022-0001,
    CVE-2022-0002)
    - [x86] speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
    - [x86] speculation: Add eIBRS + Retpoline options
    - Documentation/hw-vuln: Update spectre doc
    - [x86] speculation: Include unprivileged eBPF status in Spectre v2
      mitigation reporting
    - [x86] speculation: Use generic retpoline by default on AMD
    - [x86] speculation: Update link to AMD speculation whitepaper
    - [x86] speculation: Warn about Spectre v2 LFENCE mitigation
    - [x86] speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
.
  [ Ben Hutchings [
  * module: Avoid ABI changes when debug info is disabled
.
linux (5.16.11-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.11
    - drm/nouveau/pmu/gm200-: use alternate falcon reset sequence
    - HID:Add support for UGTABLET WP5540
    - [x86] Revert "svm: Add warning message for AVIC IPI invalid target"
    - mmc: block: fix read single on recovery logic
    - mm: don't try to NUMA-migrate COW pages that have other uses
    - [amd64] HID: amd_sfh: Add illuminance mask to limit ALS max value
    - [amd64] HID: amd_sfh: Increase sensor command timeout
    - [amd64] HID: amd_sfh: Correct the structure field name
    - [amd64] PCI: hv: Fix NUMA node assignment when kernel boots with custom
      NUMA topology
    - HID: apple: Set the tilde quirk flag on the Wellspring 5 and later
    - btrfs: don't hold CPU for too long when defragging a file
    - btrfs: send: in case of IO error log it
    - btrfs: defrag: don't try to defrag extents which are under writeback
    - [amd64] platform/x86: amd-pmc: Correct usage of SMU version
    - net: ieee802154: at86rf230: Stop leaking skb's
    - ax25: improve the incomplete fix to avoid UAF and NPD bugs
    - cifs: unlock chan_lock before calling cifs_put_tcp_session
    - vfs: make freeze_super abort when sync_filesystem returns error
    - vfs: make sync_filesystem return errors from ->sync_fs
    - quota: make dquot_quota_sync return errors from ->sync_fs
    - scsi: pm80xx: Fix double completion for SATA devices
    - scsi: core: Reallocate device's budget map on queue depth change
    - scsi: pm8001: Fix use-after-free for aborted TMF sas_task
    - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
    - drm/amd: Warn users about potential s0ix problems
    - nvme: fix a possible use-after-free in controller reset during load
    - nvme-tcp: fix possible use-after-free in transport error_recovery work
    - nvme-rdma: fix possible use-after-free in transport error_recovery work
    - drm/amd: add support to check whether the system is set to s3
    - drm/amd: Only run s3 or s0ix if system is configured properly
    - drm/amdgpu: fix logic inversion in check
    - [amd64] x86/Xen: streamline (and fix) PV CPU enumeration
    - Revert "module, async: async_synchronize_full() on module init iff async
      is used"
    - random: wake up /dev/random writers after zap
    - [x86] KVM: x86/xen: Fix runstate updates to be atomic when preempting vCPU
    - [x86] KVM: x86: nSVM/nVMX: set nested_run_pending on VM entry which is a
      result of RSM
    - [x86] KVM: x86: SVM: don't passthrough SMAP/SMEP/PKE bits in !NPT &&
      !gCR0.PG case
    - [x86] KVM: x86: nSVM: fix potential NULL derefernce on nested migration
    - [x86] KVM: x86: nSVM: mark vmcb01 as dirty when restoring SMM saved state
    - iwlwifi: remove deprecated broadcast filtering feature
    - iwlwifi: fix use-after-free (Closes: #1005884)
    - drm/radeon: Fix backlight control on iMac 12,1
    - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers
    - drm/amdgpu: skipping SDMA hw_init and hw_fini for S0ix.
    - [x86] drm/i915/opregion: check port number bounds for SWSCI display power
      state
    - [x86] drm/i915: Fix dbuf slice config lookup
    - [x86] drm/i915: Fix mbus join config lookup
    - vsock: remove vsock from connected table when connect is interrupted by a
      signal
    - [arm64] tee: export teedev_open() and teedev_close_context()
    - [arm64] optee: use driver internal tee_context for some rpc
    - [arm*] drm/cma-helper: Set VM_DONTEXPAND for mmap
    - [x86] drm/i915/gvt: Make DRM_I915_GVT depend on X86
    - [x86] drm/i915/ttm: tweak priority hint selection
    - iwlwifi: pcie: fix locking when "HW not ready"
    - iwlwifi: pcie: gen2: fix locking when "HW not ready"
    - iwlwifi: mvm: fix condition which checks the version of rate_n_flags
    - iwlwifi: fix iwl_legacy_rate_to_fw_idx
    - iwlwifi: mvm: don't send SAR GEO command for 3160 devices
    - netfilter: nft_synproxy: unregister hooks on init error path
    - ipv4: fix data races in fib_alias_hw_flags_set
    - ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
    - ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
    - ipv6: per-netns exclusive flowlabel checks
    - Revert "net: ethernet: bgmac: Use devm_platform_ioremap_resource_byname"
    - mac80211: mlme: check for null after calling kmemdup
    - brcmfmac: firmware: Fix crash in brcm_alt_fw_path
    - cfg80211: fix race in netlink owner interface destruction
    - [arm64,armhf] net: dsa: mv88e6xxx: flush switchdev FDB workqueue before
      removing VLAN
    - ping: fix the dif and sdif check in ping_lookup
    - bonding: force carrier update when releasing slave
    - mctp: fix use after free
    - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
    - net_sched: add __rcu annotation to netdev->qdisc
    - crypto: af_alg - get rid of alg_memory_allocated
    - bonding: fix data-races around agg_select_timer
    - net/smc: Avoid overwriting the copies of clcsock callback functions
    - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC
    - tipc: fix wrong publisher node address in link publications
    - [arm64] dpaa2-eth: Initialize mutex used in one step timestamping path
    - [arm64] net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
    - net: bridge: multicast: notify switchdev driver whenever MC processing
      gets disabled
    - [arm64] Correct wrong label in macro __init_el2_gicv3
    - ALSA: usb-audio: Don't abort resume upon errors
    - ALSA: usb-audio: revert to IMPLICIT_FB_FIXED_DEV for M-Audio FastTrack
      Ultra
    - ALSA: memalloc: Fix dma_need_sync() checks
    - ALSA: memalloc: invalidate SG pages before sync
    - ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
    - ALSA: hda/realtek: Fix deadlock by COEF mutex
    - ALSA: hda: Fix regression on forced probe mask option
    - ALSA: hda: Fix missing codec probe on Shenker Dock 15
    - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
    - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
    - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_sx()
    - ASoC: ops: Fix stereo change notifications in snd_soc_put_xr_sx()
    - cifs: fix set of group SID via NTSD xattrs
    - cifs: fix confusing unneeded warning message on smb2.1 and earlier
    - ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40
    - [armhf] mtd: rawnand: gpmi: don't leak PM reference in error path
    - smb3: fix snapshot mount option
    - tipc: fix wrong notification node addresses
    - scsi: ufs: Remove dead code
    - scsi: ufs: Fix a deadlock in the error handler
    - [arm64] ASoC: qcom: Actually clear DMA interrupt register for HDMI
    - block/wbt: fix negative inflight counter when remove scsi device
    - NFS: Remove an incorrect revalidation in nfs4_update_changeattr_locked()
    - NFS: LOOKUP_DIRECTORY is also ok with symlinks
    - NFS: Do not report writeback errors in nfs_getattr()
    - tty: n_tty: do not look ahead for EOL character past the end of the buffer
    - block: fix surprise removal for drivers calling blk_set_queue_dying
    - mtd: phram: Prevent divide by zero bug in phram_setup()
    - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
    - EDAC: Fix calculation of returned address and next offset in
      edac_align_ptr()
    - [x86] ptrace: Fix xfpregs_set()'s incorrect xmm clearing
    - ucounts: Base set_cred_ucounts changes on the real user
    - ucounts: Handle wrapping in is_ucounts_overlimit
    - ucounts: Enforce RLIMIT_NPROC not RLIMIT_NPROC+1
    - rlimit: Fix RLIMIT_NPROC enforcement failure caused by capability calls in
      set_user
    - ucounts: Move RLIMIT_NPROC handling after set_user
    - net: sched: limit TC_ACT_REPEAT loops
    - [armhf] dmaengine: stm32-dmamux: Fix PM disable depth imbalance in
      stm32_dmamux_probe
    - copy_process(): Move fd_install() out of sighand->siglock critical section
    - scsi: qedi: Fix ABBA deadlock in qedi_process_tmf_resp() and
      qedi_process_cmd_cleanup_resp()
    - ice: enable parsing IPSEC SPI headers for RSS
    - [arm*] i2c: brcmstb: fix support for DSL and CM variants
    - HID: elo: fix memory leak in elo_probe
    - [x86,arm64] Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
    - [x86] KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
    - [x86] KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a
      perf event
    - [x86] KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
    - [armhf] OMAP2+: hwmod: Add of_node_put() before break
    - [armhf] OMAP2+: adjust the location of put_device() call in
      omapdss_init_of
    - [arm*] staging: vc04_services: Fix RCU dereference check
    - [riscv64] irqchip/sifive-plic: Add missing thead,c900-plic match string
    - [x86] bug: Merge annotate_reachable() into _BUG_FLAGS() asm
    - netfilter: conntrack: don't refresh sctp entries in closed state
    - ksmbd: fix same UniqueId for dot and dotdot entries
    - ksmbd: don't align last entry offset in smb2 query directory
    - lib/iov_iter: initialize "flags" in new pipe_buffer
    - mm: io_uring: allow oom-killer from io_uring_setup
    - [x86] ACPI: PM: Revert "Only mark EC GPE for wakeup on Intel systems"
    - kconfig: let 'shell' return enough output for deep path names
    - ata: libata-core: Disable TRIM on M88V29
    - [armhf] soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
    - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
    - [arm64,armhf] drm/rockchip: dw_hdmi: Do not leave clock enabled in error
      case
    - tracing: Fix tp_printk option related with tp_printk_stop_on_boot
    - drm/amdgpu: add utcl2_harvest to gc 10.3.1
    - net: usb: qmi_wwan: Add support for Dell DW5829e
    - [arm64,riscv64] net: macb: Align the dma and coherent dma masks
    - kconfig: fix failing to generate auto.conf
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 3
  * cgroup-v1: Correct privileges check in release_agent writes
  * netfilter: xt_socket: fix a typo in socket_mt_destroy()
  * netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency
  * netfilter: nf_tables_offload: incorrect flow offload action array size
    (CVE-2022-25636)
.
  [ Vincent Blut ]
  * drivers/hid: Enable HID_NINTENDO as module and NINTENDO_FF as built-in
    (Closes: #1006275)
.
linux (5.16.10-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.8
    - [x86] drm/i915: Disable DSB usage for now
    - selinux: fix double free of cond_list on error paths
    - audit: improve audit queue handling when "audit=1" on cmdline
    - ipc/sem: do not sleep with a spin lock held
    - [armhf] spi: stm32-qspi: Update spi registering
    - ASoC: hdmi-codec: Fix OOB memory accesses
    - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
    - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
    - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
    - ALSA: usb-audio: Correct quirk for VF0770
    - ALSA: hda: Fix UAF of leds class devs at unbinding
    - ALSA: hda: realtek: Fix race at concurrent COEF updates
    - ALSA: hda/realtek: Add quirk for ASUS GU603
    - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220
      quirks
    - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer
      chipset)
    - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after
      reboot from Windows
    - ata: libata-core: Introduce ATA_HORKAGE_NO_LOG_DIR horkage
    - btrfs: don't start transaction for scrub if the fs is mounted read-only
    - btrfs: fix deadlock between quota disable and qgroup rescan worker
    - btrfs: fix use-after-free after failure to create a snapshot
    - Revert "fs/9p: search open fids first"
    - drm/nouveau: fix off by one in BIOS boundary checking
    - [x86] drm/i915/adlp: Fix TypeC PHY-ready status readout
    - drm/amdgpu: fix a potential GPU hang on cyan skillfish
    - drm/amd/display: Update watermark values for DCN301
    - drm/amd/display: watermark latencies is not enough on DCN31
    - drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple
      Retina panels
    - mm/pgtable: define pte_index so that preprocessor could recognize it
    - mm/kmemleak: avoid scanning potential huge holes
    - block: bio-integrity: Advance seed correctly for larger interval sizes
    - cifs: fix workstation_name for multiuser mounts
    - dma-buf: heaps: Fix potential spectre v1 gadget
    - [amd64] IB/hfi1: Fix panic with larger ipoib send_queue_size
    - [amd64] IB/hfi1: Fix alloc failure with larger txqueuelen
    - [amd64] IB/hfi1: Fix AIP early init panic
    - Revert "fbdev: Garbage collect fbdev scrolling acceleration, part 1 (from
      TODO list)"
    - Revert "fbcon: Disable accelerated scrolling"
    - fbcon: Add option to enable legacy hardware acceleration
    - mptcp: fix msk traversal in mptcp_nl_cmd_set_flags()
    - [riscv64] KVM: make CY, TM, and IR counters accessible in VU mode
    - [arm64] KVM: arm64: Avoid consuming a stale esr value when SError occur
    - [arm64] KVM: arm64: Stop handle_exit() from handling HVC twice when an
      SError occurs
    - [arm64] Add Cortex-A510 CPU part definition
    - RDMA/cma: Use correct address when leaving multicast group
    - RDMA/ucma: Protect mc during concurrent multicast leaves
    - [amd64] IB/rdmavt: Validate remote_addr during loopback atomic tests
    - RDMA/mlx4: Don't continue event handler after memory allocation failure
    - ALSA: usb-audio: initialize variables that could ignore errors
    - ALSA: hda: Fix signedness of sscanf() arguments
    - ALSA: hda: Skip codec shutdown in case the codec is not registered
    - [amd64] iommu/vt-d: Fix potential memory leak in
      intel_setup_irq_remapping()
    - [amd64] iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
    - [arm64,armhf] spi: meson-spicc: add IRQ check in meson_spicc_probe
    - [amd64] IB/hfi1: Fix tstats alloc and dealloc
    - IB/cm: Release previously acquired reference counter in the cm_id_priv
    - net: ieee802154: hwsim: Ensure proper channel selection at probe time
    - netfilter: nft_reject_bridge: Fix for missing reply from prerouting
    - net: ieee802154: Return meaningful error codes from the netlink helpers
    - net/smc: Forward wakeup to smc socket waitqueue after fallback
    - net: stmmac: properly handle with runtime pm in stmmac_dvr_remove()
    - net: macsec: Fix offload support for NETDEV_UNREGISTER event
    - net: macsec: Verify that send_sci is on when setting Tx sci explicitly
    - net: stmmac: dump gmac4 DMA registers correctly
    - net, neigh: Do not trigger immediate probes on NUD_FAILED from
      neigh_managed_work
    - net: stmmac: ensure PTP time register reads are consistent
    - [arm64] drm: mxsfb: Fix NULL pointer dereference
    - [x86] drm/i915/overlay: Prevent divide by zero bugs in scaling
    - [x86] drm/i915: Lock timeline mutex directly in error path of
      eb_pin_timeline
    - drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime PM enabled
    - ASoC: rt5682: Fix deadlock on resume
    - [arm*] ASoC: simple-card: fix probe failure on platform component
    - [arm64] pinctrl: sunxi: Fix H616 I2S3 pin data
    - [x86] pinctrl: intel: Fix a glitch when updating IRQ flags on a
      preconfigured line
    - [x86] pinctrl: intel: fix unexpected interrupt
    - [arm*] pinctrl: bcm2835: Fix a few error paths
    - btrfs: fix use of uninitialized variable at rm device ioctl
    - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
    - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
    - [amd64,arm64] gve: fix the wrong AdminQ buffer queue index check
    - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
    - tools/resolve_btfids: Do not print any commands when building silently
    - e1000e: Separate ADP board type from TGP
    - rtc: cmos: Evaluate century appropriate
    - kvm: add guest_state_{enter,exit}_irqoff()
    - [arm64] kvm/arm64: rework guest entry logic
    - perf: Copy perf_event_attr::sig_data on modification
    - [x86] perf/x86/intel/pt: Fix crash with stop filters in single-range mode
    - [x86] perf: Default set FREEZE_ON_SMI for all
    - [arm64] EDAC/xgene: Fix deferred probing
    - ext4: prevent used blocks from being allocated during fast commit replay
    - ext4: modify the logic of ext4_mb_new_blocks_simple
    - ext4: fix error handling in ext4_restore_inline_data()
    - ext4: fix error handling in ext4_fc_record_modified_inode()
    - ext4: fix incorrect type issue during replay_del_range
    - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
    - [arm64] gpio: mpc8xxx: Fix an ignored error return from platform_get_irq()
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.9
    - ata: libata-core: Fix ata_dev_config_cpr()
    - moxart: fix potential use-after-free on remove path (CVE-2022-0487)
    - [s390x] KVM: s390: Return error on SIDA memop on normal guest
      (CVE-2022-0516)
    - ksmbd: fix SMB 3.11 posix extension mount failure
    - crypto: api - Move cryptomgr soft dependency into algapi
    - tipc: improve size validations for received domain records CVE-2022-0435)
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10
    - integrity: check the return value of audit_log_start()
    - audit: don't deref the syscall args when checking the openat2
      open_how::flags
    - ima: fix reference leak in asymmetric_verify()
    - ima: Remove ima_policy file before directory
    - ima: Allow template selection with ima_template[_fmt]= after ima_hash=
    - ima: Do not print policy rule with inactive LSM labels
    - [arm64] mmc: sdhci-of-esdhc: Check for error num after setting mask
    - mmc: core: Wait for command setting 'Power Off Notification' bit to
      complete
    - can: isotp: fix potential CAN frame reception race in isotp_rcv()
    - can: isotp: fix error path in isotp_sendmsg() to unlock wait queue
    - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible
      PHYs
    - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
    - NFS: Fix initialisation of nfs_client cl_flags field
    - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
    - NFSD: Fix ia_size underflow
    - NFSD: Clamp WRITE offsets
    - NFSD: Fix offset type in I/O trace points
    - NFSD: Fix the behavior of READ near OFFSET_MAX
    - NFS: change nfs_access_get_cached to only report the mask
    - NFSv4 only print the label when its queried
    - nfs: nfs4clinet: check the return value of kstrdup()
    - NFSv4.1: Fix uninitialised variable in devicenotify
    - NFSv4 remove zero number of fs_locations entries error check
    - NFSv4 store server support for fs_location attribute
    - NFSv4.1 query for fs_location attr on a new file system
    - NFSv4 expose nfs_parse_server_name function
    - NFSv4 handle port presence in fs_location server string
    - SUNRPC allow for unspecified transport time in rpc_clnt_add_xprt
    - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change
    - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change()
    - [amd64] perf/x86/rapl: fix AMD event handling
    - [x86] perf: Avoid warning for Arch LBR without XSAVE
    - sched: Avoid double preemption in __cond_resched_*lock*()
    - [arm*] drm/vc4: Fix deadlock on DSI device attach error
    - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
    - net: sched: Clarify error message when qdisc kind is unknown
    - [powerpc*] fixmap: Fix VM debug warning on unmap
    - [arm64] Add Cortex-X2 CPU part definition
    - [arm64] errata: Update ARM64_ERRATUM_[2119858|2224489] with Cortex-X2
      ranges
    - scsi: target: iscsi: Make sure the np under each tpg is unique
    - scsi: qedf: Add stag_work to all the vports
    - scsi: qedf: Fix refcount issue when LOGO is received during TMF
    - scsi: qedf: Change context reset messages to ratelimited
    - scsi: pm8001: Fix bogus FW crash for maxcpus=1
    - scsi: ufs: Use generic error code in ufshcd_set_dev_pwr_mode()
    - scsi: ufs: Treat link loss as fatal error
    - scsi: myrs: Fix crash in error case
    - net: stmmac: reduce unnecessary wakeups from eee sw timer
    - PM: hibernate: Remove register_nosave_region_late()
    - [arm*] usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
    - perf: Always wake the parent event
    - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs
    - [mips*] Fix build error due to PTR used in more places
    - [arm64,armhf] net: stmmac: dwmac-sun8i: use return val of
      readl_poll_timeout()
    - [arm64] errata: Add detection for TRBE ignored system register writes
    - [arm64] errata: Add detection for TRBE invalid prohibited states
    - [arm64] errata: Add detection for TRBE trace data corruption
    - [arm64] cpufeature: List early Cortex-A510 parts as having broken dbm
    - KVM: eventfd: Fix false positive RCU usage warning
    - [x86] KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
    - [x86] KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS
    - [x86] KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode
    - [x86] KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking
      shadow
    - [x86] KVM: x86: Report deprecated x87 features in supported CPUID
    - [riscv64] Fix XIP_FIXUP_FLASH_OFFSET
    - [riscv64] cpu-hotplug: clear cpu from numa map when teardown
    - [riscv64] mm: Add XIP_FIXUP for phys_ram_base
    - [riscv64] eliminate unreliable __builtin_frame_address(1)
    - gfs2: Fix gfs2_release for non-writers regression
    - Revert "gfs2: check context in gfs2_glock_put"
    - Revert "PCI/portdrv: Do not setup up IRQs if there are no users"
    - nvme-tcp: fix bogus request completion when failing to send AER
    - [arm64] ACPI/IORT: Check node revision for PMCG resources
    - PM: s2idle: ACPI: Fix wakeup interrupts handling
    - [arm64,armhf] drm/rockchip: vop: Correct RK3399 VOP register fields
    - [x86] drm/i915: Disable DRRS on IVB/HSW port != A
    - [x86] drm/i915: Allow !join_mbus cases for adlp+ dbuf configuration
    - [x86] drm/i915: Populate pipe dbuf slices more accurately during readout
    - [x86] drm/i915: Workaround broken BIOS DBUF configuration on TGL/RKL
    - [armhf] dts: Fix timer regression for beagleboard revision c
    - [arm64] tee: optee: do not check memref size on return from Secure World
    - [arm64] optee: add error checks in optee_ffa_do_call_with_arg()
    - [armhf] phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()
    - usb: f_fs: Fix use-after-free for epfile
    - [arm64] Enable Cortex-A510 erratum 2051678 by default
    - [arm64,armhf] phy: dphy: Correct clk_pre parameter
    - NFS: Don't overfill uncached readdir pages
    - NFS: Don't skip directory entries when doing uncached readdir
    - NFS: Avoid duplicate uncached readdir calls on eof
    - [arm*] drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd.
    - netfilter: nft_payload: don't allow th access for fragments
    - netfilter: ctnetlink: disable helper autoassign
    - [arm64] dts: meson-sm1-bananapi-m5: fix wrong GPIO domain for GPIOE_2
    - ixgbevf: Require large buffers for build_skb on 82599VF
    - tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case
    - [arm64] net: mscc: ocelot: fix all IP traffic getting trapped to CPU with
      PTP over IP
    - [arm64,armhf] drm/panel: simple: Assign data from panel_dpi_probe()
      correctly
    - ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE
    - gpiolib: Never return internal error codes to user space
    - [riscv64] gpio: sifive: use the correct register to read output values
    - fbcon: Avoid 'cap' set but not used warning
    - SUNRPC: lock against ->sock changing during sysfs read
    - [arm64,arm64] gve: Recording rx queue before sending to napi
    - bonding: pair enable_port with slave_arr_updates
    - [arm64,armhf] net: dsa: mv88e6xxx: don't use devres for mdiobus
    - [armhf] net: dsa: bcm_sf2: don't use devres for mdiobus
    - [arm64] net: dsa: felix: don't use devres for mdiobus
    - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure
      path
    - nfp: flower: fix ida_idx not being released
    - net: do not keep the dst cache when uncloning an skb dst and its metadata
    - net: fix a memleak when uncloning an skb dst and its metadata
    - veth: fix races around rq->rx_notify_masked
    - [armhf] net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
    - tipc: rate limit warning for received illegal binding update
    - [amd64,armhf] net: amd-xgbe: disable interrupts during pci removal
    - [amd64,armhf] net: dsa: fix panic when DSA master device unbinds on
      shutdown
    - mptcp: netlink: process IPv6 addrs in creating listening sockets
    - [arm64] dpaa2-eth: unregister the netdev before disconnecting from the PHY
    - ice: fix an error code in ice_cfg_phy_fec()
    - ice: fix IPIP and SIT TSO offload
    - ice: Avoid RTNL lock when re-creating auxiliary device
    - [arm64] net: mscc: ocelot: fix mutex lock error during ethtool stats read
    - [arm64,armhf] net: dsa: mv88e6xxx: fix use-after-free in
      mv88e6xxx_mdios_unregister
    - vt_ioctl: fix array_index_nospec in vt_setactivate
    - vt_ioctl: add array_index_nospec to VT_ACTIVATE
    - n_tty: wake up poll(POLLRDNORM) on receiving data
    - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
    - [arm*] usb: dwc2: drd: fix soft connect when gadget is unconfigured
    - [arm*] Revert "usb: dwc2: drd: fix soft connect when gadget is
      unconfigured"
    - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
    - [arm64,armhf] usb: ulpi: Move of_node_put to ulpi_dev_release
    - [arm64,armhf] usb: ulpi: Call of_node_put correctly
    - [arm64,armhf] usb: dwc3: gadget: Prevent core from processing stale TRBs
    - USB: gadget: validate interface OS descriptor requests (CVE-2022-25258)
    - usb: gadget: rndis: check size of RNDIS_MSG_SET command
    - usb: gadget: f_uac2: Define specific wTerminalType
    - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
    - USB: serial: option: add ZTE MF286D modem
    - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
    - USB: serial: cp210x: add NCR Retail IO box id
    - USB: serial: cp210x: add CPI Bulk Coin Recycler id
    - speakup-dectlk: Restore pitch setting
    - iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL
    - fs/proc: task_mmu.c: don't read mapcount for migration entry
    - mm: vmscan: remove deadlock due to throttling failing to make progress
    - mm: memcg: synchronize objcg lists with a dedicated spinlock
    - seccomp: Invalidate seccomp mode to catch death failures
    - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE
    - [s390x] cio: verify the driver availability for path_event call
    - bus: mhi: pci_generic: Add mru_default for Foxconn SDX55
    - bus: mhi: pci_generic: Add mru_default for Cinterion MV31-W
    - scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
    - scsi: lpfc: Reduce log messages seen after firmware download
    - [mips64el,mipsel] octeon: Fix missed PTR->PTR_WD conversion
    - perf: Fix list corruption in perf_cgroup_switch()
    - iommu: Fix potential use-after-free during probe
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 2
  * [rt] Refresh "mm/memcg: Add a local_lock_t for IRQ and TASK object."
  * bpf: Introduce composable reg, ret and arg types.
  * bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL
  * bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL
  * bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL
  * bpf: Introduce MEM_RDONLY flag
  * bpf: Convert PTR_TO_MEM_OR_NULL to composable types.
  * bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM.
  * bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem.
  * bpf/selftests: Test PTR_TO_RDONLY_MEM
.
  [ Luca Boccassi ]
  * drivers/watchdog: enable CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT
.
linux (5.16.7-2) unstable; urgency=medium
.
  * linux-perf: Protect invocation of dpkg-divert to run only on relevant
    actions in maintscripts. Thanks to Guillem Jover (Closes: #1005141)
.
linux (5.16.7-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.5
    - Bluetooth: refactor malicious adv data check
    - btrfs: fix too long loop when defragging a 1 byte file
    - btrfs: allow defrag to be interruptible
    - btrfs: defrag: fix wrong number of defragged sectors
    - btrfs: defrag: properly update range->start for autodefrag
    - btrfs: fix deadlock when reserving space during defrag
    - btrfs: add back missing dirty page rate limiting to defrag
    - btrfs: update writeback index when starting defrag
    - net: sfp: ignore disabled SFP node
    - net: stmmac: configure PTP clock source prior to PTP initialization
    - net: stmmac: skip only stmmac_ptp_register when resume from suspend
    - [armel,armhf] 9179/1: uaccess: avoid alignment faults in
      copy_[from|to]_kernel_nofault
    - [armel,armhf] 9180/1: Thumb2: align ALT_UP() sections in modules
      sufficiently
    - [arm64] KVM: arm64: vgic-v3: Restrict SEIS workaround to known broken
      systems
    - [s390x] module: fix loading modules with a lot of relocations
    - [s390x] hypfs: include z/VM guests with access control group set
    - [s390x] nmi: handle guarded storage validity failures for KVM guests
    - [s390x] nmi: handle vector validity failures for KVM guests
    - bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
    - [s390x] scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV
      FCP devices
    - udf: Restore i_lenAlloc when inode expansion fails
    - udf: Fix NULL ptr deref when converting from inline format
    - [x86] efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
    - tracing: Don't inc err_log entry count if entry allocation fails
    - ceph: properly put ceph_string reference after async create attempt
    - ceph: set pool_ns in new inode layout for async creates
    - fsnotify: invalidate dcache before IN_DELETE event
    - fsnotify: fix fsnotify hooks in pseudo filesystems
    - Revert "KVM: SVM: avoid infinite loop on NPF from bad address"
    - psi: Fix uaf issue when psi trigger is destroyed while being polled
    - [x86] perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX
    - [x86] perf/x86/intel: Add a quirk for the calculation of the number of
      counters on Alder Lake
    - [arm64,armhf] drm/etnaviv: relax submit size limits
    - drm/atomic: Add the crtc to affected crtc only if uapi.enable = true
    - drm/amdgpu: filter out radeon secondary ids as well
    - [x86] KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
    - [x86] KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests
    - [x86] KVM: SVM: Don't intercept #GP for SEV guests
    - [x86] KVM: x86: nSVM: skip eax alignment check for non-SVM instructions
    - [x86] KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to
      __kvm_update_cpuid_runtime()
    - [x86] KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN
      KVM_SET_CPUID{,2}
    - [x86] KVM: x86: Forcibly leave nested virt when SMM state is toggled
    - [x86] KVM: x86: Check .flags in kvm_cpuid_check_equal() too
    - [x86] KVM: x86: Keep MSR_IA32_XSS unchanged for INIT
    - [x86] KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS
    - [x86] KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time
    - [powerpc*] KVM: PPC: Book3S HV Nested: Fix nested HFSCR being clobbered
      with multiple vCPUs
    - security, lsm: dentry_init_security() Handle multi LSM registration
    - [arm64] extable: fix load_unaligned_zeropad() reg indices
    - dm: revert partial fix for redundant bio-based IO accounting
    - block: add bio_start_io_acct_time() to control start_time
    - dm: properly fix redundant bio-based IO accounting
    - [arm*] serial: pl011: Fix incorrect rs485 RTS polarity on set_mctrl
    - serial: 8250: of: Fix mapped region size when using reg-offset property
    - [armhf] serial: stm32: fix software flow control transfer
    - tty: n_gsm: fix SW flow control encoding/handling
    - tty: Add support for Brainboxes UC cards.
    - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
    - usb: xhci-plat: fix crash when suspend if remote wake enable
    - [arm64,armhf] usb: common: ulpi: Fix crash in ulpi_match()
    - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
    - [arm64] usb: dwc3: xilinx: Skip resets and USB3 register settings for
      USB2.0 mode
    - [arm64] usb: dwc3: xilinx: Fix error handling when getting USB3 PHY
    - USB: core: Fix hang in usb_kill_urb by adding memory barriers
    - [arm64] usb: typec: tcpci: don't touch CC line if it's Vconn source
    - usb: typec: tcpm: Do not disconnect while receiving VBUS off
    - usb: typec: tcpm: Do not disconnect when receiving VSAFE0V
    - mt76: connac: introduce MCU_CE_CMD macro
    - jbd2: export jbd2_journal_[grab|put]_journal_head
    - ocfs2: fix a deadlock when commit trans
    - sched/membarrier: Fix membarrier-rseq fence command missing from query
      bitmask
    - PCI/sysfs: Find shadow ROM before static attribute initialization
    - [x86] MCE/AMD: Allow thresholding interface updates after init
    - [x86] cpu: Add Xeon Icelake-D to list of CPUs that support PPIN
    - i40e: Increase delay to 1 s after global EMP reset
    - i40e: Fix issue when maximum queues is exceeded
    - i40e: Fix queues reservation for XDP
    - i40e: Fix for failed to init adminq while VF reset
    - i40e: fix unsigned stat widths
    - scsi: bnx2fc: Flush destroy_work queue before calling
      bnx2fc_interface_put()
    - ipv6_tunnel: Rate limit warning messages
    - [armel,armhf] 9170/1: fix panic when kasan and kprobe are enabled
    - net: fix information leakage in /proc/net/ptype
    - hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
    - hwmon: (lm90) Mark alert as broken for MAX6680
    - ping: fix the sk_bound_dev_if match in ping_lookup
    - ipv4: avoid using shared IP generator for connected sockets
    - hwmon: (lm90) Reduce maximum conversion rate for G781
    - NFSv4: Handle case where the lookup of a directory fails
    - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
    - net-procfs: show net devices bound packet types
    - [arm64] drm/msm: Fix wrong size calculation
    - [arm64] drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
    - [arm64] drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
    - ipv6: annotate accesses to fn->fn_sernum
    - NFS: Ensure the server has an up to date ctime before hardlinking
    - NFS: Ensure the server has an up to date ctime before renaming
    - [arm64] KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance
    - SUNRPC: Don't dereference xprt->snd_task if it's a cookie
    - netfilter: conntrack: don't increment invalid counter on NF_REPEAT
    - [powerpc*] 64s: Mask SRR0 before checking against the masked NIP
    - perf: Fix perf_event_read_local() time
    - sched/pelt: Relax the sync of util_sum with util_avg
    - net: phy: broadcom: hook up soft_reset for BCM54616S
    - ethtool: Fix link extended state for big endian
    - phylib: fix potential use-after-free
    - rxrpc: Adjust retransmission backoff
    - [arm64] efi/libstub: arm64: Fix image check alignment at entry
    - io_uring: fix bug in slow unregistering of nodes
    - block: fix memory leak in disk_register_independent_access_ranges
    - [x86] Drivers: hv: balloon: account for vmbus packet header in
      max_pkt_size
    - hwmon: (lm90) Re-enable interrupts after alert clears
    - hwmon: (lm90) Mark alert as broken for MAX6654
    - hwmon: (lm90) Fix sysfs and udev notifications
    - hwmon: (adt7470) Prevent divide by zero in adt7470_fan_write()
    - ipv4: fix ip option filtering for locally generated fragments
    - net/smc: Transitional solution for clcsock race issue
    - video: hyperv_fb: Fix validation of screen resolution
    - hwmon: (nct6775) Fix crash in clear_caseopen
    - [arm64] drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
    - [arm64] drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
    - [arm64] drm/msm/a6xx: Add missing suspend_count increment
    - yam: fix a memory leak in yam_siocdevprivate()
    - [armhf] net: cpsw: Properly initialise struct page_pool_params
    - [arm64] net: hns3: handle empty unknown interrupt for VF
    - sch_htb: Fail on unsupported parameters when offload is requested
    - ceph: put the requests/sessions when it fails to alloc memory
    - gve: Fix GFP flags when allocing pages
    - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
    - net: bridge: vlan: fix single net device option dumping
    - ipv4: raw: lock the socket in raw_bind()
    - ipv4: tcp: send zero IPID in SYNACK messages
    - ipv4: remove sparse error in ip_neigh_gw4()
    - net: bridge: vlan: fix memory leak in __allowed_ingress
    - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
    - perf/core: Fix cgroup event list management
    - [arm64] usb: dwc3: xilinx: fix uninitialized return value
    - [x86] KVM: nVMX: Rename vmcs_to_field_offset{,_table}
    - [x86] KVM: nVMX: Implement evmcs_field_offset() suitable for
      handle_vmread()
    - [x86] KVM: nVMX: Allow VMREAD when Enlightened VMCS is in use
    - block: Fix wrong offset in bio_truncate()
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.6
    - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
    - [arm*] drm/vc4: hdmi: Make sure the device is powered with CEC
    - cgroup-v1: Require capabilities to set release_agent (CVE-2022-0492)
    - Revert "mm/gup: small refactoring: simplify try_grab_page()"
    - net: phy: Fix qca8081 with speeds lower than 2.5Gb/s
    - ovl: don't fail copy up if no fileattr support on upper
    - lockd: fix server crash on reboot of client holding lock
    - lockd: fix failure to cleanup client locks
    - net/mlx5e: TC, Reject rules with drop and modify hdr action
    - net/mlx5: Bridge, take rtnl lock in init error handler
    - net/mlx5e: Fix handling of wrong devices during bond netevent
    - net/mlx5: Use del_timer_sync in fw reset flow of halting poll
    - net/mlx5e: Fix module EEPROM query
    - net/mlx5e: TC, Reject rules with forward and drop actions
    - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE
    - net/mlx5e: Don't treat small ceil values as unlimited in HTB offload
    - net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion
    - net/mlx5e: Avoid field-overflowing memcpy()
    - net/mlx5e: Fix wrong calculation of header index in HW_GRO
    - net/mlx5e: Fix broken SKB allocation in HW-GRO
    - net/mlx5: E-Switch, Fix uninitialized variable modact
    - net/mlx5e: Avoid implicit modify hdr for decap drop rule
    - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
    - i40e: Fix reset bw limit when DCB enabled with 1 TC
    - i40e: Fix reset path while removing the driver
    - [amd64,arm64] net: amd-xgbe: ensure to reset the tx_timer_active flag
    - [amd64,arm64] net: amd-xgbe: Fix skb data length underflow
    - fanotify: Fix stale file descriptor in copy_event_to_user()
    - net: sched: fix use-after-free in tc_new_tfilter()
    - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
    - bpf: Fix possible race in inc_misses_counter
    - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask()
    - e1000e: Handshake with CSME starts from ADL platforms
    - af_packet: fix data-race in packet_setsockopt / packet_setsockopt
    - tcp: fix mem under-charging with zerocopy sendmsg()
    - tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data()
    - ovl: fix NULL pointer dereference in copy up warning
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.7
    - [arm*] Revert "drm/vc4: hdmi: Make sure the device is powered with CEC"
    - [arm*] Revert "drm/vc4: hdmi: Make sure the device is powered with CEC"
      again
.
  [ Salvatore Bonaccorso ]
  * Set ABI to 1
.
linux (5.16.4-1~exp1) experimental; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.4
    - io_uring: fix not released cached task refs
    - bnx2x: Utilize firmware 7.13.21.0
    - bnx2x: Invalidate fastpath HSI version for VFs
    - memcg: better bounds on the memcg stats updates
    - rcu: Tighten rcu_advance_cbs_nowake() checks
    - select: Fix indefinitely sleeping task in poll_schedule_timeout()
    - [arm64] bpf: Remove 128MB limit for BPF JIT programs
.
  * objtool: check: give big enough buffer for pv_ops (Closes: #1004495)
  * Refresh "firmware: Remove redundant log messages from drivers"
  * [rt] Refresh "mm/memcg: Protect per-CPU counter by disabling preemption on
    PREEMPT_RT where needed."
.
linux (5.16.3-1~exp1) experimental; urgency=medium
.
  * New upstream release: https://kernelnewbies.org/Linux_5.16
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.1
    - bpf: Fix out of bounds access from invalid *_or_null type verification
      (CVE-2022-23222)
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.2
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3
    - netfilter: nft_payload: do not update layer 4 checksum when mangling
      fragments (Closes: #1002706)
.
  [ Helmut Grohne ]
  * Multiarchify python build-depends. (Closes: #983757)
.
  [ Ben Hutchings ]
  * linux-perf: Fix detection of libperl and libpython in cross-build
  * debian/README.source: Tag signatures are automatically verified
  * [rt] trace: Enable OSNOISE_TRACER, TIMERLAT_TRACER, HIST_TRIGGERS
  * d/bin/git-tag-gpg-wrapper, debian/upstream: Use ASCII-armored keyring
  * d/watch: Rewrite to find all upstream versions through Git
  * d/bin/genorig.py, d/README.source: Only support Git as upstream
  * d/bin/genorig.py, d/README.source: Add support for remote upstream repos
  * lintian: Refresh lintian-overrides
  * d/copyright: Fix license name with spaces in it
  * d/copyright: Update for removed and renamed source files
  * d/tests/selftests: Use $AUTOPKGTEST_TMP instead of $ADTTMP
  * Fix missing user-space hardening:
    - d/rules.real: Define KBUILD_HOST{C,LD}FLAGS for sub-make
    - linux-kbuild: Build modpost with standard CPPFLAGS
    - cpupower: Build with standard CPPFLAGS
    - usbip: Build with standard CPPFLAGS
    - objtool: Build with standard CFLAGS and CPPFLAGS
    - tools/perf: Define DEBUG=0 for sub-make so libapi doesn't use wrong flags
    - libapi: Define _FORTIFY_SOURCE as 2, not empty
    - tools/perf: Fix missing LDFLAGS for some programs
  * d/rules: Tell blhc to ignore missing flags for perf-read-vdso* helpers
  * d/rules: Tell blhc to ignore kernel compilation
  * d/rules: Filter out -s option so that Kbuild is not silent
  * d/bin/gencontrol.py, d/lib/python: Use classes for build restriction
    formulae
  * d/bin/gencontrol.py, d/rules.real: Replace DEBUG variable with if_package
  * Introduce pkg.linux.quick build profile for quicker CI builds
  * d/salsa-ci.yml: Add CI config using some of the common pipeline
  * d/salsa-ci.yml, d/tests/python: Only run static checks in CI
  * d/salsa-ci.yml: Run kconfigeditor2 as kconfig static check
  * d/rules, d/salsa-ci.yml: Enable blhc, ignoring terse output
  * bpftool, objtool, usbip: Always build with V=1 so blhc can check them
  * d/salsa-ci.yml: Use per-release cache of orig tarballs
  * linux-perf: Build a single unversioned package of perf, as it is no
    longer necessary to match the kernel version
.
  [ Vincent Blut ]
  * drivers/net/wireless/realtek/rtw89: Enable RTW89 and RTW89_8852AE as
    modules (Closes: #1004095)
.
  [ Aurelien Jarno ]
  * [riscv64] Add support for SBI SRST extension
.
  [ YunQiang Su ]
  * [mips*/generic] Change zload address for QEMU compatibility.
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.16.2-rt18
  * [rt] Update to 5.16.2-rt19
  * [x86] drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330)
  * drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942)
.
  [ Bastian Blank ]
  * Build-depend on pahole after rename from dwarves.
  * Remove remaining aufs patches for good.
.
linux (5.16~rc8-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ YunQiang Su ]
  * [mips*] unify installer flavors
  * [mips*] add generic platform and remove 5kc-malta from 32bit ports
.
  [ Alper Nebi Yasak ]
  * [armhf,arm64] drivers/gpu/drm/panel: Enable DRM_PANEL_EDP as module
  * [arm64] Include panel-edp in fb-modules udeb
.
  [ Noah Meyerhans ]
  * net: Use fq_codel as the default network qdisc (Closes: #890343)
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.16-rc8-rt13
.
linux (5.16~rc7-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Uwe Kleine-König ]
  * [arm64] enable DRM_VMWGFX_FBCON to get a tty to login in the absence of a
    graphical login manager.
.
  [ Vincent Blut ]
  * [x86] drivers/platform/surface/aggregator: Enable SURFACE_AGGREGATOR as
    module (Closes: #1002460)
  * [x86] drivers/platform/surface: Enable SURFACE_3_POWER_OPREGION,
    SURFACE_ACPI_NOTIFY, SURFACE_AGGREGATOR_REGISTRY, SURFACE_DTX,
    SURFACE_GPE, SURFACE_HOTPLUG and SURFACE_PLATFORM_PROFILE as modules
  * [x86] drivers/hid/surface-hid: Enable SURFACE_HID and SURFACE_KBD as
    modules
  * [x86] drivers/power/supply: Enable BATTERY_SURFACE and CHARGER_SURFACE as
    modules
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.16-rc6-rt12
  * [x86] drivers/firmware/google: Re-enable GOOGLE_FIRMWARE (Closes: #947179)
.
linux (5.16~rc6-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Aurelien Jarno ]
  * [riscv64] Improve HiFive Unmatched support: enable INPUT_DA9063_ONKEY,
    MFD_DA9063, REGULATOR_DA9063, RTC_DRV_DA9063, DA9063_WATCHDOG.
.
  [ Salvatore Bonaccorso ]
  * xen/blkfront: harden blkfront against event channel storms (CVE-2021-28711)
  * xen/netfront: harden netfront against event channel storms (CVE-2021-28712)
  * xen/console: harden hvc_xen against event channel storms (CVE-2021-28713)
  * xen/netback: fix rx queue stall detection (CVE-2021-28714)
  * xen/netback: don't queue unlimited number of packages (CVE-2021-28715)
.
linux (5.16~rc5-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
    - nfsd: fix use-after-free due to delegation race (Closes: #988044)
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.16-rc5-rt10
  * Refresh "Export symbols needed by Android drivers"
  * net/tls: Enable TLS_DEVICE (Closes: #1001731)
.
linux (5.16~rc4-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.16-rc4-rt8
  * Makefile: Do not quote value for CONFIG_CC_IMPLICIT_FALLTHROUGH
    (Closes: #1001083)
  * [arm64] drivers/iio/adc: Enable QCOM_SPMI_IADC, QCOM_SPMI_VADC and
    ROCKCHIP_SARADC as modules (Closes: #1001080)
  * [armhf] drivers/iio/adc: Enable ASPEED_ADC, EXYNOS_ADC, ROCKCHIP_SARADC,
    TI_AM335X_ADC and TWL4030_MADC as modules (Closes: #1001080)
.
linux (5.16~rc3-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.16-rc2-rt4
  * [arm64] drivers/firmware/efi: Enable
    EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER (Closes: #997907)
  * liblockdep: Remove code to build liblockdep packages
  * [rt] Update to 5.16-rc3-rt5
.
  [ Uwe Kleine-König ]
  * [arm*] Enable support for Raspberry Pi POE hat (PWM_RASPBERRYPI_POE)
  * [arm*] Enable suport for pinctrl-based I2C multiplexer (I2C_MUX_PINCTRL).
    These are used (among others) on the Raspberry Pi CM4 IO Board.
.
linux (5.16~rc1-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.16-rc1-rt2
  * fs/ksmbd: Enable SMB_SERVER as module (Closes: #998835)
.
  [ Aurelien Jarno ]
  * [riscv64] Enable VIRTUALIZATION and KVM.

linux (5.15.15-15parrot2) parrot-updates; urgency=medium
.
  * Import Debian backports settings.

linux (5.15.15-15parrot1) parrot-updates; urgency=medium
.
  * Import new Debian release.
  * Import Parrot patches and customizations.
.
linux (5.15.15-2) unstable; urgency=high
.
  [ Bastian Blank ]
  * Build-depend on pahole after rename from dwarves.
.
  [ Salvatore Bonaccorso ]
  * [x86] mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (CVE-2021-43976)
  * [x86] drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330)
  * drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942)
  * ucount:  Make get_ucount a safe get_user replacement (CVE-2022-24122)
.
linux (5.15.15-1) unstable; urgency=high
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.6
    - scsi: sd: Fix sd_do_mode_sense() buffer length handling
      (Closes: #1001559)
    - ACPI: Get acpi_device's parent from the parent field
    - ACPI: CPPC: Add NULL pointer check to cppc_get_perf()
    - USB: serial: pl2303: fix GC type detection
    - USB: serial: option: add Telit LE910S1 0x9200 composition
    - USB: serial: option: add Fibocom FM101-GL variants
    - [arm*] usb: dwc2: gadget: Fix ISOC flow for elapsed frames
    - [arm*] usb: dwc2: hcd_queue: Fix use of floating point literal
    - [arm64,armhf] usb: dwc3: leave default DMA for PCI devices
    - [arm64,armhf] usb: dwc3: core: Revise GHWPARAMS9 offset
    - [arm64,armhf] usb: dwc3: gadget: Ignore NoStream after End Transfer
    - [arm64,armhf] usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer
    - [arm64,armhf] usb: dwc3: gadget: Fix null pointer exception
    - net: usb: Correct PHY handling of smsc95xx
    - net: nexthop: fix null pointer dereference when IPv6 is not enabled
    - [arm64,armhf] usb: chipidea: ci_hdrc_imx: fix potential error pointer
      dereference in probe
    - [x86,arm64] usb: typec: fusb302: Fix masking of comparator and bc_lvl
      interrupts
    - [arm64,armhf] usb: xhci: tegra: Check padctrl interrupt presence in
      device tree
    - usb: hub: Fix usb enumeration issue due to address0 race
    - usb: hub: Fix locking issues with address0_mutex
    - binder: fix test regression due to sender_euid change
    - ALSA: ctxfi: Fix out-of-range access
    - [x86] ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100
    - [x86] ALSA: hda/realtek: Fix LED on HP ProBook 435 G7
    - media: cec: copy sequence field for the reply
    - [hppa] Revert "parisc: Fix backtrace to always include init funtion
      names" (regression in 5.15.3)
    - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
    - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
    - staging: r8188eu: Use kzalloc() with GFP_ATOMIC in atomic context
    - staging: r8188eu: Fix breakage introduced when 5G code was removed
    - staging: r8188eu: use GFP_ATOMIC under spinlock
    - staging: r8188eu: fix a memory leak in rtw_wx_read32()
    - xen: don't continue xenstore initialization in case of errors
    - xen: detect uninitialized xenbus in xenbus_init
    - io_uring: correct link-list traversal locking
    - io_uring: fail cancellation for EXITING tasks
    - io_uring: fix link traversal locking
    - drm/amdgpu: IH process reset count when restart
    - drm/amdgpu/pm: fix powerplay OD interface (regression in 5.15)
    - drm/nouveau: recognise GA106
    - [powerpc*] KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
    - tracing/uprobe: Fix uprobe_perf_open probes iteration
    - tracing: Fix pid filtering when triggers are attached
    - [arm64,armhf] mmc: sdhci-esdhc-imx: disable CMDQ support
    - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
    - [armhf] mdio: aspeed: Fix "Link is Down" issue
    - [arm64] mm: Fix VM_BUG_ON(mm != &init_mm) for trans_pgd
    - [x86] cpufreq: intel_pstate: Fix active mode offline/online EPP handling
    - [powerpc] Fix hardlockup on vmap stack overflow
    - iomap: Fix inline extent handling in iomap_readpage
    - NFSv42: Fix pagecache invalidation after COPY/CLONE
    - [arm64] PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
    - [arm64] PCI: aardvark: Implement re-issuing config requests on CRS
      response
    - [arm64] PCI: aardvark: Simplify initialization of rootcap on virtual
      bridge
    - [arm64] PCI: aardvark: Fix link training
    - drm/amd/display: Fix OLED brightness control on eDP
    - proc/vmcore: fix clearing user buffer by properly using clear_user()
    - [x86] ASoC: SOF: Intel: hda: fix hotplug when only codec is suspended
    - netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
    - netfilter: ctnetlink: do not erase error code with EINVAL
    - netfilter: ipvs: Fix reuse connection if RS weight is 0
    - netfilter: flowtable: fix IPv6 tunnel addr match
    - media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86
    - [armhf] firmware: arm_scmi: Fix null de-reference on error path
    - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
    - net: ieee802154: handle iftypes as u32
    - [armhf] firmware: arm_scmi: Fix base agent discover response
    - [armhf] firmware: arm_scmi: pm: Propagate return value to caller
    - [armhf] ASoC: stm32: i2s: fix 32 bits channel length without mclk
    - NFSv42: Don't fail clone() unless the OP_CLONE operation failed
    - [armhf] socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
    - drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks
    - scsi: qla2xxx: edif: Fix off by one bug in qla_edif_app_getfcinfo()
    - scsi: mpt3sas: Fix kernel panic during drive powercycle test
    - scsi: mpt3sas: Fix system going into read-only mode
    - scsi: mpt3sas: Fix incorrect system timestamp
    - [arm*] drm/vc4: fix error code in vc4_create_object()
    - [armhf] drm/aspeed: Fix vga_pw sysfs output
    - HID: input: Fix parsing of HID_CP_CONSUMER_CONTROL fields
    - HID: input: set usage type to key on keycode remap
    - HID: magicmouse: prevent division by 0 on scroll
    - iavf: Prevent changing static ITR values if adaptive moderation is on
    - iavf: Fix refreshing iavf adapter stats on ethtool request
    - iavf: Fix VLAN feature flags after VFR
    - [x86] ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336
      codec
    - mptcp: fix delack timer
    - mptcp: use delegate action to schedule 3rd ack retrans
    - af_unix: fix regression in read after shutdown
    - [arm64,armhf] firmware: smccc: Fix check for ARCH_SOC_ID not implemented
    - ipv6: fix typos in __ip6_finish_output()
    - nfp: checking parameter process for rx-usecs/tx-usecs is invalid
    - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls
    - net: ipv6: add fib6_nh_release_dsts stub
    - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
    - ice: fix vsi->txq_map sizing
    - ice: avoid bpf_prog refcount underflow
    - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
    - scsi: scsi_debug: Zero clear zones at reset write pointer
    - erofs: fix deadlock when shrink erofs slab
    - i2c: virtio: disable timeout handling
    - net/smc: Ensure the active closing peer first closes clcsock
    - [arm64,armhf] net: marvell: mvpp2: increase MTU limit when XDP enabled
    - [x86] cpufreq: intel_pstate: Add Ice Lake server to out-of-band IDs
    - nvmet-tcp: fix incomplete data digest send
    - [x86] drm/hyperv: Fix device removal on Gen1 VMs
    - [arm64] uaccess: avoid blocking within critical sections
    - [armhf] net/ncsi : Add payload to be 32-bit aligned to fix dropped
      packets
    - PM: hibernate: use correct mode for swsusp_close()
    - drm/amd/display: Fix DPIA outbox timeout after GPU reset
    - drm/amd/display: Set plane update flags for all planes in reset
    - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
      flows
    - lan743x: fix deadlock in lan743x_phy_link_status_change()
    - net: phylink: Force link down and retrigger resolve on interface change
    - net: phylink: Force retrigger in case of latched link-fail indicator
    - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
    - net/smc: Fix loop in smc_listen
    - nvmet: use IOCB_NOWAIT only if the filesystem supports it
    - igb: fix netpoll exit with traffic
    - [mips*el/loongson-3] fix FTLB configuration
    - tls: splice_read: fix record type check
    - tls: splice_read: fix accessing pre-processed records
    - tls: fix replacing proto_ops
    - net: stmmac: Disable Tx queues when reconfiguring the interface
    - net/sched: sch_ets: don't peek at classes beyond 'nbands'
    - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
    - net: vlan: fix underflow for the real_dev refcnt
    - net/smc: Don't call clcsock shutdown twice when smc shutdown
    - [arm64] net: hns3: fix VF RSS failed problem after PF enable multi-TCs
    - [arm64] net: hns3: fix incorrect components info of ethtool --reset
      command
    - locking/rwsem: Make handoff bit handling more consistent
    - perf: Ignore sigtrap for tracepoints destined for other tasks
    - sched/scs: Reset task stack state in bringup_cpu()
    - [arm64] iommu/rockchip: Fix PAGE_DESC_HI_MASKs for RK3568
    - [x86] iommu/vt-d: Fix unmap_pages support
    - f2fs: quota: fix potential deadlock
    - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
    - [riscv64] dts: microchip: fix board compatible
    - [riscv64] dts: microchip: drop duplicated MMC/SDHC node
    - cifs: nosharesock should not share socket with future sessions
    - ceph: properly handle statfs on multifs setups
    - [amd64] iommu/amd: Clarify AMD IOMMUv2 initialization messages
    - vhost/vsock: fix incorrect used length reported to the guest
    - tracing: Check pid filtering when creating events
    - cifs: nosharesock should be set on new server
    - io_uring: fix soft lockup when call __io_remove_buffers
    - [armhf] firmware: arm_scmi: Fix type error assignment in voltage protocol
    - [armhf] firmware: arm_scmi: Fix type error in sensor protocol
    - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and
      disk_release()
    - block: avoid to quiesce queue in elevator_init_mq
    - drm/amdgpu/gfx10: add wraparound gpu counter check for APUs as well
    - drm/amdgpu/gfx9: switch to golden tsc registers for renoir+
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.7
    - ALSA: usb-audio: Restrict rates for the shared clocks
    - ALSA: usb-audio: Rename early_playback_start flag with lowlatency_playback
    - ALSA: usb-audio: Disable low-latency playback for free-wheel mode
    - ALSA: usb-audio: Disable low-latency mode for implicit feedback sync
    - ALSA: usb-audio: Check available frames for the next packet size
    - ALSA: usb-audio: Add spinlock to stop_urbs()
    - ALSA: usb-audio: Improved lowlatency playback support
    - ALSA: usb-audio: Avoid killing in-flight URBs during draining
    - ALSA: usb-audio: Fix packet size calculation regression
    - ALSA: usb-audio: Less restriction for low-latency playback mode
    - ALSA: usb-audio: Switch back to non-latency mode at a later point
    - ALSA: usb-audio: Don't start stream for capture at prepare
    - gfs2: release iopen glock early in evict
    - gfs2: Fix length of holes reported at end-of-file
    - [powerpc*] pseries/ddw: Revert "Extend upper limit for huge DMA window
      for persistent memory"
    - [powerpc*] pseries/ddw: Do not try direct mapping with persistent memory
      and one window
    - mac80211: do not access the IV when it was stripped
    - mac80211: fix throughput LED trigger
    - [x86] hyperv: Move required MSRs check to initial platform probing
    - net/smc: Transfer remaining wait queue entries during fallback
    - net: return correct error code
    - [x86] platform/x86: dell-wmi-descriptor: disable by default
    - [x86] platform/x86: thinkpad_acpi: Add support for dual fan control
    - [x86] platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after
      S3 deep
    - btrfs: silence lockdep when reading chunk tree during mount
    - btrfs: check-integrity: fix a warning on write caching disabled disk
    - thermal: core: Reset previous low and high trip during thermal zone init
    - scsi: iscsi: Unblock session then wake up error handler
    - net: usb: r8152: Add MAC passthrough support for more Lenovo Docks
    - drm/amd/pm: Remove artificial freq level on Navi1x
    - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered
      again
    - drm/amd/amdgpu: fix potential memleak
    - [x86] ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
    - ata: libahci: Adjust behavior when StorageD3Enable _DSD is set
    - [arm64] ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array
      overflow in hns_dsaf_ge_srst_by_port()
    - ipv6: check return value of ipv6_skip_exthdr
    - [alpha] net: tulip: de4x5: fix the problem that the array 'lp->phy[8]'
      may be out of bound
    - [alpha] net: ethernet: dec: tulip: de4x5: fix possible array overflows in
      type3_infoblock()
    - perf sort: Fix the 'weight' sort key behavior
    - perf sort: Fix the 'ins_lat' sort key behavior
    - perf sort: Fix the 'p_stage_cyc' sort key behavior
    - [arm*] perf inject: Fix ARM SPE handling
    - perf hist: Fix memory leak of a perf_hpp_fmt
    - perf report: Fix memory leaks around perf_tip()
    - tracing: Don't use out-of-sync va_list in event printing
    - net/smc: Avoid warning of possible recursive locking
    - ACPI: Add stubs for wakeup handler functions
    - net/tls: Fix authentication failure in CCM mode
    - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
    - kprobes: Limit max data_size of the kretprobe instances
    - rt2x00: do not mark device gone on EPROTO errors during start
    - ipmi: Move remove_work to dedicated workqueue
    - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
    - iwlwifi: mvm: retry init flow if failed
    - [s390x] pci: move pseudo-MMIO to prevent MIO overlap
    - scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO
    - scsi: ufs: ufs-pci: Add support for Intel ADL
    - ipv6: fix memory leak in fib6_rule_suppress
    - drm/amd/display: Allow DSC on supported MST branch devices
    - [x86] drm/i915/dp: Perform 30ms delay after source OUI write
    - [x86] KVM: fix avic_set_running for preemptable kernels
    - KVM: Disallow user memslot with size that exceeds "unsigned long"
    - [x86] KVM: x86/mmu: Fix TLB flush range when handling disconnected pt
    - KVM: Ensure local memslot copies operate on up-to-date arch-specific data
    - [x86] KVM: x86: ignore APICv if LAPIC is not enabled
    - [x86] KVM: nVMX: Emulate guest TLB flush on nested VM-Enter with new
      vpid12
    - [x86] KVM: nVMX: Flush current VPID (L1 vs. L2) for
      KVM_REQ_TLB_FLUSH_GUEST
    - [x86] KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested
      vmentry/vmexit
    - [x86] KVM: VMX: prepare sync_pir_to_irr for running with APICv disabled
    - [x86] KVM: x86: Use a stable condition around all VT-d PI paths
    - [x86] KVM: MMU: shadow nested paging does not have PKU
    - [arm64] KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and
      CPTR_EL2 to 1
    - [x86] KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
    - [x86] KVM: x86: check PIR even for vCPUs with disabled APICv
    - tracing/histograms: String compares should not care about signed values
    - [arm64,armhf] net: dsa: mv88e6xxx: Fix application of erratum 4.8 for
      88E6393X
    - [arm64,armhf] net: dsa: mv88e6xxx: Drop unnecessary check in
      mv88e6393x_serdes_erratum_4_6()
    - [arm64,armhf] net: dsa: mv88e6xxx: Save power by disabling SerDes
      trasmitter and receiver
    - [arm64,armhf] net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X
      family
    - [arm64,armhf] net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on
      88E6393X family
    - [arm64,armhf] net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is
      bypassed
    - wireguard: allowedips: add missing __rcu annotation to satisfy sparse
    - wireguard: device: reset peer src endpoint when netns exits
    - wireguard: receive: use ring buffer for incoming handshakes
    - wireguard: receive: drop handshakes if queue lock is contended
    - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
    - [armhf] i2c: stm32f7: flush TX FIFO upon transfer errors
    - [armhf] i2c: stm32f7: recover the bus on access timeout
    - [armhf] i2c: stm32f7: stop dma transfer in case of NACK
    - tcp: fix page frag corruption on page fault
    - net: qlogic: qlcnic: Fix a NULL pointer dereference in
      qlcnic_83xx_add_rings()
    - net: mpls: Fix notifications when deleting a device
    - siphash: use _unaligned version by default
    - [arm64] ftrace: add missing BTIs
    - iwlwifi: fix warnings produced by kernel debug options
    - net/mlx5e: IPsec: Fix Software parser inner l3 type setting in case of
      encapsulation
    - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
    - [armhf] net: dsa: b53: Add SPI ID table (regression in 5.15)
    - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
    - [arm64,armhf] ASoC: tegra: Fix wrong value type in ADMAIF
    - [arm64,armhf] ASoC: tegra: Fix wrong value type in I2S
    - [arm64,armhf] ASoC: tegra: Fix wrong value type in DMIC
    - [arm64,armhf] ASoC: tegra: Fix wrong value type in DSPK
    - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in ADMAIF
    - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in I2S
    - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in DMIC
    - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in DSPK
    - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in AHUB
    - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
    - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
    - [x86] ALSA: intel-dsp-config: add quirk for CML devices based on ES8336
      codec
    - net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support
    - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no
      IRQ is available
    - [arm64,armhf] net: marvell: mvpp2: Fix the computation of shared CPUs
    - [arm64] dpaa2-eth: destroy workqueue at the end of remove function
    - net: annotate data-races on txq->xmit_lock_owner
    - ipv4: convert fib_num_tclassid_users to atomic_t
    - net/smc: fix wrong list_del in smc_lgr_cleanup_early
    - net/rds: correct socket tunable error in rds_tcp_tune()
    - net/smc: Keep smc_close_final rc during active close
    - [arm64] drm/msm/a6xx: Allocate enough space for GMU registers
    - [arm64] drm/msm: Do hw_init() before capturing GPU state
    - [arm*] drm/vc4: kms: Wait for the commit before increasing our clock rate
    - [arm*] drm/vc4: kms: Fix return code check
    - [arm*] drm/vc4: kms: Add missing drm_crtc_commit_put
    - [arm*] drm/vc4: kms: Clear the HVS FIFO commit pointer once done
    - [arm*] drm/vc4: kms: Don't duplicate pending commit
    - [arm*] drm/vc4: kms: Fix previous HVS commit wait
    - atlantic: Increase delay for fw transactions
    - atlatnic: enable Nbase-t speeds with base-t
    - atlantic: Fix to display FW bundle version instead of FW mac version.
    - atlantic: Add missing DIDs and fix 115c.
    - atlantic: Remove Half duplex mode speed capabilities.
    - atlantic: Fix statistics logic for production hardware
    - atlantic: Remove warn trace message.
    - [x86] KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
    - [x86] KVM: x86/mmu: Pass parameter flush as false in
      kvm_tdp_mmu_zap_collapsible_sptes()
    - [arm64] drm/msm/devfreq: Fix OPP refcnt leak
    - [arm64] drm/msm: Fix mmap to include VM_IO and VM_DONTDUMP
    - [arm64] drm/msm: Fix wait_fence submitqueue leak
    - [arm64] drm/msm: Restore error return on invalid fence
    - iwlwifi: Fix memory leaks in error handling path
    - [x86] KVM: X86: Fix when shadow_root_level=5 && guest root_level<4
    - [x86] KVM: SEV: initialize regions_list of a mirror VM
    - net/mlx5e: Fix missing IPsec statistics on uplink representor
    - net/mlx5: Move MODIFY_RQT command to ignore list in internal error state
    - net/mlx5: E-switch, Respect BW share of the new group
    - net/mlx5: E-Switch, fix single FDB creation on BlueField
    - net/mlx5: E-Switch, Check group pointer before reading bw_share value
    - [x86] KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
    - [x86] KVM: VMX: Set failure code in prepare_vmcs02()
    - io-wq: don't retry task_work creation failure on fatal conditions
    - [x86] sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword
    - [x86] entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
    - [x86] entry: Use the correct fence macro after swapgs in kernel CR3
    - [x86] xen: Add xenpv_restore_regs_and_return_to_usermode()
    - preempt/dynamic: Fix setup_preempt_mode() return value
    - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
    - [x86] KVM: SEV: Return appropriate error codes if SEV-ES scratch setup
      fails
    - [x86] KVM: x86/mmu: Rename slot_handle_leaf to slot_handle_level_4k
    - [x86] KVM: x86/mmu: Remove spurious TLB flushes in TDP MMU zap
      collapsible path
    - net/mlx5e: Rename lro_timeout to packet_merge_timeout
    - net/mlx5e: Rename TIR lro functions to TIR packet merge functions
    - net/mlx5e: Sync TIR params updates against concurrent create/modify
    - [hppa] Fix KBUILD_IMAGE for self-extracting kernel
    - [hppa] Fix "make install" on newer debian releases
    - [hppa] Mark cr16 CPU clocksource unstable on all SMP machines
    - vgacon: Propagate console boot parameters before calling `vc_resize'
    - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
    - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
    - [x86,arm64] usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
    - [x86] tsc: Add a timer to make sure TSC_adjust is always checked
    - [x86] tsc: Disable clocksource watchdog for TSC on qualified platorms
    - [amd64] mm: Map all kernel memory into trampoline_pgd
    - [arm64] tty: serial: msm_serial: Deactivate RX DMA for polling support
    - [arm*] serial: pl011: Add ACPI SBSA UART match id
    - [arm64,armhf] serial: tegra: Change lower tolerance baud rate limit for
      tegra20 and tegra30
    - serial: core: fix transmit-buffer reset and memleak
    - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
    - serial: 8250_pci: rewrite pericom_do_set_divisor()
    - serial: 8250: Fix RTS modem control while in rs485 mode
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.8
    - usb: gadget: uvc: fix multiple opens
    - [x86] HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
    - HID: google: add eel USB id
    - [x86] HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
    - HID: bigbenff: prevent null pointer dereference
    - HID: wacom: fix problems when device is not a valid USB device
    - HID: check for valid USB device for many HID drivers
    - mtd: dataflash: Add device-tree SPI IDs (regression in 5.15)
    - mmc: spi: Add device-tree SPI IDs
    - HID: sony: fix error path in probe
    - [x86] HID: Ignore battery for Elan touchscreen on Asus UX550VE
    - [x86] platform/x86/intel: hid: add quirk to support Surface Go 3
    - [x86] nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six
      8-bit groups
    - IB/hfi1: Insure use of smp_processor_id() is preempt disabled
    - IB/hfi1: Fix early init panic
    - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
    - can: kvaser_usb: get CAN clock frequency from device
    - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
      stats->{rx,tx}_errors counter
    - can: sja1000: fix use after free in ems_pcmcia_add_card()
    - [i386] can: pch_can: pch_can_rx_normal: fix use after free
    - [arm64,armhf] net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal
      PHY's"
    - [arm64,armhf] net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
    - [x86] sme: Explicitly map new EFI memmap table as encrypted
    - [x86] platform/x86: amd-pmc: Fix s2idle failures on certain AMD laptops
    - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
    - vrf: don't run conntrack on vrf with !dflt qdisc
    - bpf, sockmap: Attach map progs to psock early for feature probes
    - bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
    - bpf: Fix the off-by-two error in range markings
    - ice: ignore dropped packets during init
    - ethtool: do not perform operations on net devices being unregistered
    - bonding: make tx_rebalance_counter an atomic
    - nfp: Fix memory leak in nfp_cpp_area_cache_add()
    - seg6: fix the iif in the IPv6 socket control block
    - udp: using datalen to cap max gso segments
    - netfilter: nft_exthdr: break evaluation if setting TCP option fails
    - netfilter: conntrack: annotate data-races around ct->timeout
    - iavf: restore MSI state on reset
    - iavf: Fix reporting when setting descriptor count
    - IB/hfi1: Correct guard on eager buffer deallocation
    - devlink: fix netns refcount leak in devlink_nl_cmd_reload()
    - [arm64,armhf] net: dsa: mv88e6xxx: error handling for serdes_power
      functions
    - [arm64] net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
    - net/sched: fq_pie: prevent dismantle issue
    - [arm64,armhf] net: mvpp2: fix XDP rx queues registering
    - [x86] KVM: x86: Don't WARN if userspace mucks with RCX during string I/O
      exit
    - [x86] KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse
      IPI req
    - [x86] KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB
      flush hypercall
    - timers: implement usleep_idle_range()
    - mm/slub: fix endianness bug for alloc/free_traces attributes
    - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
    - ALSA: ctl: Fix copy of updated id with element read/write
    - [x86] ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897
      platform
    - [x86] ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
    - ALSA: pcm: oss: Fix negative period/buffer sizes
    - ALSA: pcm: oss: Limit the period size to 16MB
    - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
    - cifs: Fix crash on unload of cifs_arc4.ko
    - scsi: qla2xxx: Format log strings only if needed
    - btrfs: clear extent buffer uptodate when we fail to write it
    - btrfs: fix re-dirty process of tree-log nodes
    - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error
      handling
    - btrfs: free exchange changeset on failures
    - [x86] perf intel-pt: Fix some PGE (packet generation enable/control flow
      packets) usage
    - [x86] perf intel-pt: Fix sync state when a PSB (synchronization) packet
      is found
    - [x86] perf intel-pt: Fix intel_pt_fup_event() assumptions about setting
      state type
    - [x86] perf intel-pt: Fix state setting when receiving overflow (OVF)
      packet
    - [x86] perf intel-pt: Fix next 'err' value, walking trace
    - [x86] perf intel-pt: Fix missing 'instruction' events with 'q' option
    - [x86] perf intel-pt: Fix error timestamp setting on the decoder error
      path
    - md: fix update super 1.0 on rdev size change
    - nfsd: Fix nsfd startup race (again)
    - tracefs: Have new files inherit the ownership of their parent
    - hwmon: (pwm-fan) Ensure the fan going on in .probe()
    - [arm64] clk: qcom: regmap-mux: fix parent clock lookup
    - [x86] thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
    - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
    - libata: add horkage for ASMedia 1092
    - io_uring: ensure task_work gets run as part of cancelations
    - wait: add wake_up_pollfree()
    - binder: use wake_up_pollfree()
    - signalfd: use wake_up_pollfree()
    - aio: keep poll requests on waitqueue until completed
    - aio: fix use-after-free due to missing POLLFREE handling
    - tracefs: Set all files to the same group ownership as the mount option
    - [powerpc*] i2c: mpc: Use atomic read and fix break condition
    - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
    - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
    - scsi: scsi_debug: Fix buffer size of REPORT ZONES command
    - ALSA: usb-audio: Reorder snd_djm_devices[] entries
    - qede: validate non LSO skb length
    - PM: runtime: Fix pm_runtime_active() kerneldoc comment
    - ASoC: rt5682: Fix crash due to out of scope stack vars
    - [arm64] RDMA/hns: Do not halt commands during reset until later
    - [arm64] RDMA/hns: Do not destroy QP resources in the hw resetting phase
    - [x86] hwmon: (dell-smm) Fix warning on /proc/i8k creation error
    - [arm64] clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
    - i40e: Fix failed opcode appearing if handling messages from VF
    - i40e: Fix pre-set max number of queues for VF
    - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
    - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
    - [arm64] Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on
      emulated bridge" (regression in 5.15.3)
    - drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset
    - perf tools: Fix SMT detection fast read path
    - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
    - [arm64] net: fec: only clear interrupt of handling queue in
      fec_enet_rx_queue()
    - net, neigh: clear whole pneigh_entry at alloc time
    - net/qla3xxx: fix an error code in ql_adapter_up()
    - [arm64] Revert "usb: dwc3: dwc3-qcom: Enable tx-fifo-resize property by
      default" (regression in 5.15)
    - usb: core: config: fix validation of wMaxPacketValue entries
    - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
      suspending
    - xhci: avoid race between disable slot command and host runtime suspend
    - iio: gyro: adxrs290: fix data signedness
    - iio: trigger: Fix reference counting
    - iio: stk3310: Don't return error code in interrupt handler
    - iio: mma8452: Fix trigger reference couting
    - iio: ltr501: Don't return error code in trigger handler
    - iio: kxsd9: Don't return error code in trigger handler
    - iio: itg3200: Call iio_trigger_notify_done() on error
    - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
    - iio: ad7768-1: Call iio_trigger_notify_done() on error
    - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
    - misc: rtsx: Avoid mangling IRQ during runtime PM
    - nvmem: eeprom: at25: fix FRAM byte_len
    - bus: mhi: pci_generic: Fix device recovery failed issue
    - bus: mhi: core: Add support for forced PM resume
    - [armhf] irqchip/aspeed-scu: Replace update_bits with write_bits.
    - [armhf] irqchip/armada-370-xp: Fix return value of
      armada_370_xp_msi_alloc()
    - [armhf] irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
    - aio: Fix incorrect usage of eventfd_signal_allowed()
    - [arm64,armhf] irqchip/irq-gic-v3-its.c: Force synchronisation when
      issuing INVALL
    - [armhf] clocksource/drivers/dw_apb_timer_of: Fix probe failure
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.9
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.10
    - nfc: fix segfault in nfc_genl_dump_devices_done
    - [x86] hwmon: (corsair-psu) fix plain integer used as NULL pointer
    - RDMA: Fix use-after-free in rxe_queue_cleanup
    - RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
    - mtd: rawnand: Fix nand_erase_op delay
    - mtd: rawnand: Fix nand_choose_best_timings() on unsupported interface
    - netfs: Fix lockdep warning from taking sb_writers whilst holding
      mmap_lock
    - ice: fix FDIR init missing when reset VF
    - [x86] vmxnet3: fix minimum vectors alloc issue
    - [arm64] drm/msm: Fix null ptr access msm_ioctl_gem_submit()
    - [arm64] drm/msm/a6xx: Fix uinitialized use of gpu_scid
    - [arm64] drm/msm/dsi: set default num_data_lanes
    - [arm64] drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
    - [arm64] KVM: arm64: Save PSTATE early on exit
    - [arm64] Revert "tty: serial: fsl_lpuart: drop earlycon entry for
      i.MX8QXP"
    - net/mlx4_en: Update reported link modes for 1/10G
    - loop: Use pr_warn_once() for loop_control_remove() warning
    - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
    - [x86] ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
    - [arm64,armhf] i2c: rk3x: Handle a spurious start completion interrupt
      flag
    - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
    - drm/amdgpu: cancel the correct hrtimer on exit
    - drm/amdgpu: check atomic flag to differeniate with legacy path
    - drm/amd/display: Fix for the no Audio bug with Tiled Displays
    - drm/amdkfd: fix double free mem structure
    - drm/amd/display: add connector type check for CRC source set
    - drm/amdkfd: process_info lock not needed for svm
    - tracing: Fix a kmemleak false positive in tracing_map
    - fuse: make sure reclaim doesn't write the inode
    - perf inject: Fix itrace space allowed for new attributes
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.11
    - [x86] KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
    - KVM: downgrade two BUG_ONs to WARN_ON_ONCE
    - [x86] kvm: remove unused ack_notifier callbacks
    - [x86] KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid()
    - mac80211: fix rate control for retransmitted frames
    - mac80211: fix regression in SSN handling of addba tx
    - mac80211: mark TX-during-stop for TX in in_reconfig
    - mac80211: send ADDBA requests using the tid/queue of the aggregation
      session
    - mac80211: validate extended element ID is present
    - [arm64] firmware: arm_scpi: Fix string overflow in SCPI genpd driver
    - virtio_ring: Fix querying of maximum DMA mapping size for virtio device
    - [s390x] entry: fix duplicate tracking of irq nesting level
    - [s390x] recordmcount.pl: look for jgnop instruction as well as bcrl on
      s390
    - [arm64] dts: ten64: remove redundant interrupt declaration for gpio-keys
    - ceph: fix up non-directory creation in SGID directories
    - dm btree remove: fix use after free in rebalance_children()
    - audit: improve robustness of the audit queue handling
    - btrfs: convert latest_bdev type to btrfs_device and rename
    - btrfs: use latest_dev in btrfs_show_devname
    - btrfs: update latest_dev when we create a sprout device
    - btrfs: remove stale comment about the btrfs_show_devname
    - scsi: ufs: core: Retry START_STOP on UNIT_ATTENTION
    - [x86] drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
    - [x86] drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->
      shutdown()
    - [x86] pinctrl: amd: Fix wakeups when IRQ is shared with SCI
    - [arm64] dts: rockchip: remove mmc-hs400-enhanced-strobe from
      rk3399-khadas-edge
    - [arm64] dts: rockchip: fix rk3308-roc-cc vcc-sd supply
    - [arm64] dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
    - [arm64] dts: rockchip: fix audio-supply for Rock Pi 4
    - [arm64] dts: rockchip: fix poweroff on helios64
    - mac80211: track only QoS data frames for admission control
    - ceph: fix duplicate increment of opened_inodes metric
    - ceph: initialize pathlen variable in reconnect_caps_cb
    - [armhf] socfpga: dts: fix qspi node compatible
    - [arm64] dts: imx8mq: remove interconnect property from lcdif
    - clk: Don't parent clks until the parent is fully registered
    - [armhf] soc: imx: Register SoC device only on i.MX boards
    - iwlwifi: mvm: don't crash on invalid rate w/o STA
    - virtio/vsock: fix the transport to work with VMADDR_CID_ANY
    - Revert "drm/fb-helper: improve DRM fbdev emulation device names"
    - sch_cake: do not call cake_destroy() from cake_init()
    - inet_diag: fix kernel-infoleak for UDP sockets
    - netdevsim: don't overwrite read only ethtool parms
    - [arm64] net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
    - [arm64] net: hns3: fix race condition in debugfs
    - net/sched: sch_ets: don't remove idle classes from the round-robin list
    - [arm64,armhf] net: dsa: mv88e6xxx: Unforce speed & duplex in
      mac_link_down()
    - mptcp: never allow the PM to close a listener subflow
    - drm/ast: potential dereference of null pointer
    - [x86] drm/i915/display: Fix an unsigned subtraction which can never be
      negative.
    - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
    - cfg80211: Acquire wiphy mutex on regulatory work
    - mac80211: fix lookup when adding AddBA extension element
    - net: stmmac: fix tc flower deletion for VLAN priority Rx steering
    - flow_offload: return EOPNOTSUPP for the unsupported mpls action type
    - rds: memory leak in __rds_conn_create() (CVE-2021-45480)
    - ice: Use div64_u64 instead of div_u64 in adjfine
    - ice: Don't put stale timestamps in the skb
    - drm/amd/display: Set exit_optimized_pwr_state for DCN31
    - drm/amd/pm: fix a potential gpu_metrics_table memory leak
    - mptcp: remove tcp ulp setsockopt support
    - mptcp: clear 'kern' flag from fallback sockets
    - mptcp: fix deadlock in __mptcp_push_pending()
    - [arm64,armhf] soc/tegra: fuse: Fix bitwise vs. logical OR warning
    - igb: Fix removal of unicast MAC filters of VFs
    - igbvf: fix double free in `igbvf_probe`
    - igc: Fix typo in i225 LTR functions
    - ixgbe: Document how to enable NBASE-T support
    - ixgbe: set X550 MDIO speed before talking to PHY
    - netdevsim: Zero-initialize memory for new map's value in function
      nsim_bpf_map_alloc (CVE-2021-4135)
    - net/packet: rx_owner_map depends on pg_vec
    - [arm64,armhf] net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup
    - sfc_ef100: potential dereference of null pointer
    - [arm64,armhf] dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
    - net: Fix double 0x prefix print in SKB dump
    - net/smc: Prevent smc_release() from long blocking
    - sit: do not call ipip6_dev_free() from sit_init_net()
    - afs: Fix mmap
    - [arm64] kexec: Fix missing error code 'ret' warning in
      load_other_segments()
    - bpf: Fix extable fixup offset.
    - USB: gadget: bRequestType is a bitfield, not a enum
    - Revert "usb: early: convert to readl_poll_timeout_atomic()"
    - [x86] KVM: x86: Drop guest CPUID check for host initiated writes to
      MSR_IA32_PERF_CAPABILITIES
    - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
    - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
    - [arm*] usb: dwc2: fix STM ID/VBUS detection startup delay in
      dwc2_driver_probe
    - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
    - PCI/MSI: Mask MSI-X vectors only on success
    - [x86] usb: xhci: Extend support for runtime power management for AMD's
      Yellow carp.
    - [x86,arm64] usb: typec: tcpm: fix tcpm unregister port but leave a
      pending timer
    - usb: gadget: u_ether: fix race in setting MAC address in setup phase
    - USB: serial: cp210x: fix CP2105 GPIO registration
    - USB: serial: option: add Telit FN990 compositions
    - selinux: fix sleeping function called from invalid context
    - btrfs: fix memory leak in __add_inode_ref()
    - btrfs: fix double free of anon_dev after failure to create subvolume
    - btrfs: check WRITE_ERR when trying to read an extent buffer
    - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
    - zonefs: add MODULE_ALIAS_FS
    - iocost: Fix divide-by-zero on donation from low hweight cgroup
    - [x86] serial: 8250_fintek: Fix garbled text for console
    - timekeeping: Really make sure wall_to_monotonic isn't positive
    - cifs: sanitize multiple delimiters in prepath
    - locking/rtmutex: Fix incorrect condition in rtmutex_spin_on_owner()
    - [riscv64] dts: unleashed: Add gpio card detect to mmc-spi-slot
    - [riscv64] dts: unmatched: Add gpio card detect to mmc-spi-slot
    - perf inject: Fix segfault due to close without open
    - perf inject: Fix segfault due to perf_data__fd() without open
    - libata: if T_LENGTH is zero, dma direction should be DMA_NONE
    - [powerpc*] powerpc/module_64: Fix livepatching for RO modules
    - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
    - drm/amdgpu: don't override default ECO_BITs setting
    - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
    - [armhf] dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
    - mptcp: add missing documented NL params
    - [amd64] bpf, x64: Factor out emission of REX byte in more cases
    - bpf: Fix extable address check.
    - USB: core: Make do_proc_control() and do_proc_bulk() killable
    - media: mxl111sf: change mutex_init() location
    - ovl: fix warning in ovl_create_real()
    - scsi: scsi_debug: Don't call kcalloc() if size arg is zero
    - scsi: scsi_debug: Fix type in min_t to avoid stack OOB
    - scsi: scsi_debug: Sanity check block descriptor length in
      resp_mode_select()
    - io-wq: remove spurious bit clear on task_work addition
    - io-wq: check for wq exit after adding new worker task_work
    - rcu: Mark accesses to rcu_state.n_force_qs
    - io-wq: drop wqe lock before creating new worker
    - [armhf] bus: ti-sysc: Fix variable set but not used warning for
      reinit_modules
    - xen/blkfront: harden blkfront against event channel storms
      (CVE-2021-28711)
    - xen/netfront: harden netfront against event channel storms
      (CVE-2021-28712)
    - xen/console: harden hvc_xen against event channel storms
      (CVE-2021-28713)
    - xen/netback: fix rx queue stall detection (CVE-2021-28714)
    - xen/netback: don't queue unlimited number of packages (CVE-2021-28715)
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.12
    - net: usb: lan78xx: add Allied Telesis AT29M2-AF
    - ext4: prevent partial update of the extent blocks
    - ext4: check for out-of-order index extents in ext4_valid_extent_entries()
    - ext4: check for inconsistent extents between index and leaf block
    - HID: holtek: fix mouse probing
    - HID: potential dereference of null pointer
    - NFSD: Fix READDIR buffer overflow
    - PM: sleep: Fix error handling in dpm_prepare()
    - [arm64] dts: allwinner: orangepi-zero-plus: fix PHY mode
    - [arm64,armhf] bus: sunxi-rsb: Fix shutdown
    - spi: change clk_disable_unprepare to clk_unprepare
    - ucounts: Fix rlimit max values check
    - [arm64,armhf] ASoC: meson: aiu: fifo: Add missing
      dma_coerce_mask_and_coherent()
    - [arm64] RDMA/hns: Fix RNR retransmission issue for HIP08
    - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
    - [arm64] RDMA/hns: Replace kfree() with kvfree()
    - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
    - netfilter: fix regression in looped (broad|multi)cast's MAC handling
    - [armhf] dts: imx6qdl-wandboard: Fix Ethernet support
    - ice: Use xdp_buf instead of rx_buf for xsk zero-copy
    - ice: xsk: return xsk buffers back to pool when cleaning the ring
    - qlcnic: potential dereference null pointer of rx_queue->page_ring
    - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
    - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
    - inet: fully convert sk->sk_rx_dst to RCU rules
    - net: accept UFOv6 packages in virtio_net_hdr_to_skb
    - net: skip virtio_net_hdr_set_proto if protocol already set
    - igb: fix deadlock caused by taking RTNL in RPM resume path
    - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
    - bonding: fix ad_actor_system option setting to default
    - [amd64] fjes: Check for error irq
    - [armhf] drivers: net: smc911x: Check for error irq
    - asix: fix uninit-value in asix_mdio_read()
    - asix: fix wrong return value in asix_check_host_enable()
    - io_uring: zero iocb->ki_pos for stream file types
    - veth: ensure skb entering GRO are not cloned.
    - net: stmmac: ptp: fix potentially overflowing expression
    - net: bridge: Use array_size() helper in copy_to_user()
    - net: bridge: fix ioctl old_deviceless bridge argument
    - r8152: fix the force speed doesn't work for RTL8156
    - Input: elantech - fix stack out of bound access in
      elantech_change_report_id()
    - [arm*] pinctrl: bcm2835: Change init order for gpio hogs
    - hwmon: (lm90) Fix usage of CONFIG2 register in detect function
    - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis
      calculations
    - hwmon: (lm90) Introduce flag indicating extended temperature support
    - hwmon: (lm90) Add basic support for TI TMP461
    - hwmon: (lm90) Drop critical attribute support for MAX6654
    - kernel/crash_core: suppress unknown crashkernel parameter warning
    - [x86] Revert "x86/boot: Pull up cmdline preparation and early param
      parsing"
    - [x86] boot: Move EFI range reservation after cmdline parsing
    - ALSA: jack: Check the return value of kstrdup()
    - ALSA: drivers: opl3: Fix incorrect use of vp->state
    - ALSA: rawmidi - fix the uninitalized user_pversion
    - [x86] ALSA: hda/hdmi: Disable silent stream on GLK
    - [x86] ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
    - [x86] ALSA: hda/realtek: Add new alc285-hp-amp-init model
    - [x86] ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
    - [x86] ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
    - [arm64,armhf] ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to
      aiu-fifo-i2s
    - [arm64,armhf] ASoC: tegra: Add DAPM switches for headphones and mic jack
    - [armhf] ASoC: tegra: Restore headphones jack name on Nyan Big
    - Input: atmel_mxt_ts - fix double free in mxt_read_info_block
    - ipmi: bail out if init_srcu_struct fails
    - ipmi: ssif: initialize ssif_info->client early
    - ipmi: fix initialization when workqueue allocation fails
    - [hppa] Correct completer in lws start
    - [hppa] Fix mask used to select futex spinlock
    - tee: handle lookup of shm with reference count 0
    - [x86] pkey: Fix undefined behaviour with PKRU_WD_BIT
    - [amd64] platform/x86: amd-pmc: only use callbacks for suspend
    - [x86] platform/x86: intel_pmc_core: fix memleak on registration failure
    - [x86] KVM: x86: Always set kvm_run->if_flag
    - [x86] KVM: x86/mmu: Don't advance iterator after restart due to yielding
    - [x86] KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
    - [x86] KVM: VMX: Always clear vmx->fail on emulation_required
    - [x86] KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this
      vCPU
    - [armhf] pinctrl: stm32: consider the GPIO offset to expose all the GPIO
      lines
    - [arm64,armhf] mmc: sdhci-tegra: Fix switch to HS400ES mode
    - [armhf] mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
    - mmc: core: Disable card detect during shutdown
    - [armhf] mmc: mmci: stm32: clear DLYB_CR after sending tuning command
    - mac80211: fix locking in ieee80211_start_ap error path
    - mm: mempolicy: fix THP allocations escaping mempolicy restrictions
    - mm, hwpoison: fix condition in free hugetlb page path
    - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
    - [arm64] tee: optee: Fix incorrect page free bug
    - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
      (CVE-2021-45469)
    - netfs: fix parameter of cleanup()
    - [x86] KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
    - [arm64] dts: lx2160a: fix scl-gpios property name
    - [arm64] Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
    - Input: goodix - add id->model mapping for the "9111" model
    - [x86] ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
    - [x86] ASoC: SOF: Intel: pci-tgl: add ADL-N support
    - ASoC: rt5682: fix the wrong jack type detected
    - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
    - hwmon: (lm90) Do not report 'busy' status bit as alarm
    - r8152: sync ocp base
    - ax25: NPD bug when detaching AX25 device
    - hamradio: defer ax25 kfree after unregister_netdev
    - hamradio: improve the incomplete fix to avoid NPD
    - tun: avoid double free in tun_free_netdev
    - phonet/pep: refuse to enable an unbound pipe
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.13
    - Input: i8042 - add deferred probe support
    - Input: i8042 - enable deferred probe quirk for ASUS UM325UA
    - tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
    - tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
    - net/sched: Extend qdisc control block with tc control block
    - [x86] platform/x86: apple-gmux: use resource_size() with res
    - memblock: fix memblock_phys_alloc() section mismatch error
    - ALSA: hda: intel-sdw-acpi: harden detection of controller
    - ALSA: hda: intel-sdw-acpi: go through HDAS ACPI at max depth of 2
    - efi: Move efifb_setup_from_dmi() prototype from arch headers
    - selinux: initialize proto variable in selinux_ip_postroute_compat()
    - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
    - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
    - net/mlx5: Fix error print in case of IRQ request failed
    - net/mlx5: Fix SF health recovery flow
    - net/mlx5: Fix tc max supported prio for nic mode
    - net/mlx5e: Wrap the tx reporter dump callback to extract the sq
    - net/mlx5e: Fix interoperability between XSK and ICOSQ recovery flow
    - net/mlx5e: Fix ICOSQ recovery flow for XSK
    - net/mlx5e: Use tc sample stubs instead of ifdefs in source file
    - net/mlx5e: Delete forward rule for ct or sample action
    - udp: using datalen to cap ipv6 udp max gso segments
    - sctp: use call_rcu to free endpoint
    - net/smc: fix using of uninitialized completions
    - net: usb: pegasus: Do not drop long Ethernet frames
    - net/smc: don't send CDC/LLC message if link not ready
    - net/smc: fix kernel panic caused by race of smc_sock
    - igc: Do not enable crosstimestamping for i225-V models
    - igc: Fix TX timestamp support for non-MSI-X platforms
    - drm/amd/display: Send s0i2_rdy in stream_count == 0 optimization
    - drm/amd/display: Set optimize_pwr_state for DCN31
    - net/mlx5e: Fix wrong features assignment in case of error
    - net: bridge: mcast: add and enforce query interval minimum
    - net: bridge: mcast: add and enforce startup query interval minimum
    - net: bridge: mcast: fix br_multicast_ctx_vlan_global_disabled helper
    - [armhf] net/ncsi: check for error return from call to nla_put_u32
    - i2c: validate user data in compat ioctl
    - nfc: uapi: use kernel size_t to fix user-space builds
    - uapi: fix linux/nfc.h userspace compilation errors
    - drm/nouveau: wait for the exclusive fence after the shared ones v2
      (Closes: #1000681)
    - drm/amdgpu: When the VCN(1.0) block is suspended, powergating is
      explicitly enabled
    - drm/amdgpu: add support for IP discovery gc_info table v2
    - drm/amd/display: Changed pipe split policy to allow for multi-display pipe
      split
    - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
    - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
    - [arm*] binder: fix async_free_space accounting for empty parcels
    - [x86] scsi: vmw_pvscsi: Set residual data length conditionally
    - Input: appletouch - initialize work before device registration
    - Input: spaceball - fix parsing of movement data packets
    - net: fix use-after-free in tw_timer_handler
    - fs/mount_setattr: always cleanup mount_kattr
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.14
    - fscache_cookie_enabled: check cookie is valid before accessing it
    - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
    - tracing: Tag trace_percpu_buffer as a percpu pointer
    - Revert "RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow"
    - ieee802154: atusb: fix uninit value in atusb_set_extended_addr
    - i40e: Fix to not show opcode msg on unsuccessful VF MAC change
    - iavf: Fix limit of total number of queues to active queues of VF
    - RDMA/core: Don't infoleak GRH fields
    - Revert "net: usb: r8152: Add MAC passthrough support for more Lenovo
      Docks"
    - netrom: fix copying in user data in nr_setsockopt
    - RDMA/uverbs: Check for null return of kmalloc_array
    - mac80211: initialize variable have_higher_than_11mbit
    - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
    - sfc: The RX page_ring is optional
    - i40e: fix use-after-free in i40e_sync_filters_subtask()
    - i40e: Fix for displaying message regarding NVM version
    - i40e: Fix incorrect netdev's real number of RX/TX queues
    - ipv4: Check attribute length for RTA_GATEWAY in multipath route
    - ipv4: Check attribute length for RTA_FLOW in multipath route
    - ipv6: Check attribute length for RTA_GATEWAY in multipath route
    - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
    - lwtunnel: Validate RTA_ENCAP_TYPE attribute length
    - sctp: hold endpoint before calling cb in sctp_transport_lookup_process
    - batman-adv: mcast: don't send link-local multicast to mcast routers
    - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
    - net: ena: Fix undefined state when tx request id is out of bounds
    - net: ena: Fix wrong rx request id by resetting device
    - net: ena: Fix error handling when calculating max IO queues number
    - md/raid1: fix missing bitmap update w/o WriteMostly devices
    - [x86] KVM: x86: Check for rmaps allocation
    - cgroup: Use open-time credentials for process migraton perm checks
      (CVE-2021-4197)
    - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
      (CVE-2021-4197)
    - cgroup: Use open-time cgroup namespace for process migration perm checks
      (CVE-2021-4197)
    - Revert "i2c: core: support bus regulator controlling in adapter"
    - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
      (CVE-2021-4155)
    - power: supply: core: Break capacity loop
    - rndis_host: support Hytera digital radios
    - net ticp:fix a kernel-infoleak in __tipc_sendmsg()
    - phonet: refcount leak in pep_sock_accep (CVE-2021-45095)
    - fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb
    - drm/amdgpu: disable runpm if we are the primary adapter
    - [arm64] power: bq25890: Enable continuous conversion for ADC at charging
    - ipv6: Continue processing multipath route even if gateway attribute is
      invalid
    - ipv6: Do cleanup if attribute validation fails in multipath route
    - drm/amdgpu: fix dropped backing store handling in
      amdgpu_dma_buf_move_notify
    - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
    - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
    - net: udp: fix alignment problem in udp4_seq_show()
    - atlantic: Fix buff_ring OOB in aq_ring_rx_clean
    - drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume
    - drm/amdgpu: always reset the asic in suspend (v2)
    - drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable
      platform
    - mISDN: change function names to avoid conflicts
    - drm/amd/display: fix B0 TMDS deepcolor no dislay issue
    - drm/amd/display: Added power down for DCN10
    - ipv6: raw: check passed optlen before reading
    - Revert "drm/amdgpu: stop scheduler when calling hw_fini (v2)"
    - drm/amd/pm: keep the BACO feature enabled for suspend
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.15
    - workqueue: Fix unbind_workers() VS wq_worker_running() race
    - staging: r8188eu: switch the led off during deinit
    - bpf: Fix out of bounds access from invalid *_or_null type verification
      (CVE-2022-23222)
    - Bluetooth: btusb: Add protocol for MediaTek bluetooth devices(MT7922)
    - Bluetooth: btusb: Add the new support ID for Realtek RTL8852A
    - Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921)
    - Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE
    - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
    - Bluetooth: btusb: enable Mediatek to support AOSP extension
    - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
    - Bluetooth: btusb: Add the new support IDs for WCN6855
    - fget: clarify and improve __fget_files() implementation
    - Bluetooth: btusb: Add one more Bluetooth part for WCN6855
    - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
    - Bluetooth: btusb: Add support for Foxconn MT7922A
    - Bluetooth: btintel: Fix broken LED quirk for legacy ROM devices
    - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
    - Bluetooth: bfusb: fix division by zero in send path
    - [armhf] dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
    - USB: core: Fix bug in resuming hub's handling of wakeup requests
    - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
    - ath11k: Fix buffer overflow when scanning with extraie
    - mmc: sdhci-pci: Add PCI ID for Intel ADL
    - Bluetooth: add quirk disabling LE Read Transmit Power
    - Bluetooth: btbcm: disable read tx power for some Macs with the T2 Security
      chip
    - Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2
    - veth: Do not record rx queue hint in veth_xmit
    - [x86] mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
    - can: gs_usb: fix use of uninitialized variable, detach device on reception
      of invalid USB data
    - can: isotp: convert struct tpcon::{idx,len} to unsigned int
    - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
    - random: fix data race on crng_node_pool
    - random: fix data race on crng init time
    - random: fix crash on multiple early calls to add_bootloader_randomness()
    - [x86] platform/x86/intel: hid: add quirk to support Surface Go 3
    - media: Revert "media: uvcvideo: Set unique vdev name based in type"
    - [x86] drm/i915: Avoid bitwise vs logical OR warning in
      snb_wm_latency_quirk()
.
  [ Ben Hutchings ]
  * Bump ABI to 3
  * wait: Export new function __wake_up_pollfree() needed by binder
  * [rt] Add new signing key for Clark Williams
  * [rt] Update to 5.15.10-rt24
  * debian/control: Add version to libopencsd-dev build-dependency
  * [armhf] media: Set MEDIA_SUPPORT=m so drivers are no longer built-in
.
  [ Andrew Balmos ]
  * net/can: Enable CONFIG_CAN_MCP251X as module
.
  [ Salvatore Bonaccorso ]
  * drivers/infiniband/hw/irdma: Enable INFINIBAND_IRDMA as module
    (Closes: #1003082)
  * vfs: fs_context: fix up param length parsing in legacy_parse_param
    (CVE-2022-0185)

linux (5.15.5-2parrot1) lts-updates; urgency=medium
.
  * Import new Debian release.
  * Re-include Wireless patches.
  * Disable kernel signing.
.
linux (5.15.5-2~bpo11+1) bullseye-backports; urgency=medium
.
  * Rebuild for bullseye-backports:
    - Change ABI number to 0.bpo.2
    - Revert "Compile with gcc-11 on all architectures"
    - perf: Disable use of libopencsd, as bullseye's version is too old
.
linux (5.15.5-2) unstable; urgency=medium
.
  * atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
    (CVE-2021-43975)
  * fget: check that the fd still exists after getting a ref to it
    (CVE-2021-4083)
  * USB: gadget: detect too-big endpoint 0 requests (CVE-2021-39685)
  * USB: gadget: zero allocate endpoint 0 buffers (CVE-2021-39685)
  * [x86] Revert "drm/i915: Implement Wa_1508744258" (Closes: #1001128)
  * nfsd: fix use-after-free due to delegation race (Closes: #988044)
  * bpf: Fix kernel address leakage in atomic fetch
  * bpf: Fix signed bounds propagation after mov32
  * bpf: Make 32->64 bounds propagation slightly more robust
  * bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
.
linux (5.15.5-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.4
    - string: uninline memcpy_and_pad
    - [x86] KVM: Fix steal time asm constraints
    - btrfs: introduce btrfs_is_data_reloc_root
    - btrfs: zoned: add a dedicated data relocation block group
    - btrfs: zoned: only allow one process to add pages to a relocation inode
    - btrfs: zoned: use regular writes for relocation
    - btrfs: check for relocation inodes on zoned btrfs in should_nocow
    - btrfs: zoned: allow preallocation for relocation inodes
    - block: Add a helper to validate the block size
    - loop: Use blk_validate_block_size() to validate block size
    - Bluetooth: btusb: Add support for TP-Link UB500 Adapter
    - PCI/MSI: Deal with devices lying about their MSI mask capability
    - PCI: Add MSI masking quirk for Nvidia ION AHCI
    - perf/core: Avoid put_page() when GUP fails
    - thermal: Fix NULL pointer dereferences in of_thermal_ functions
    - Revert "ACPI: scan: Release PM resources blocked by unused objects"
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.5
    - [arm64] zynqmp: Do not duplicate flash partition label property
    - [arm64] zynqmp: Fix serial compatible string
    - [arm64,armhf] clk: sunxi-ng: Unregister clocks/resets when unbinding
    - scsi: pm80xx: Fix memory leak during rmmod
    - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
    - [armhf] bus: ti-sysc: Add quirk handling for reinit on context lost
    - [armhf] bus: ti-sysc: Use context lost quirk for otg
    - [armhf] usb: musb: tusb6010: check return value after calling
      platform_get_resource()
    - [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
    - staging: rtl8723bs: remove possible deadlock when disconnect (v2)
    - staging: rtl8723bs: remove a second possible deadlock
    - staging: rtl8723bs: remove a third possible deadlock
    - [arm64] dts: ls1012a: Add serial alias for ls1012a-rdb
    - RDMA/rxe: Separate HW and SW l/rkeys
    - [x86] ASoC: SOF: Intel: hda-dai: fix potential locking issue
    - scsi: core: Fix scsi_mode_sense() buffer length handling
    - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
      UFX1604
    - [armhf] clk: imx: imx6ul: Move csi_sel mux to correct base register
    - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
    - [x86] ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
    - [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
    - scsi: advansys: Fix kernel pointer leak
    - scsi: smartpqi: Add controller handshake during kdump
    - [arm64] dts: imx8mm-kontron: Fix reset delays for ethernet PHY
    - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
      codec
    - [x86] ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
    - [x86] ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
    - firmware_loader: fix pre-allocated buf built-in firmware use
    - HID: multitouch: disable sticky fingers for UPERFECT Y
    - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
    - ASoC: rt5682: fix a little pop while playback
    - [amd64] iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel
      option
    - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
    - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
    - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
    - scsi: target: Fix ordered tag handling
    - scsi: target: Fix alua_tg_pt_gps_count tracking
    - iio: imu: st_lsm6dsx: Avoid potential array overflow in
      st_lsm6dsx_set_odr()
    - RDMA/core: Use kvzalloc when allocating the struct ib_port
    - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
    - scsi: lpfc: Fix link down processing to address NULL pointer dereference
    - scsi: lpfc: Allow fabric node recovery if recovery is in progress before
      devloss
    - [i386] ALSA: gus: fix null pointer dereference on pointer block
    - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
    - f2fs: fix up f2fs_lookup tracepoints
    - f2fs: fix to use WHINT_MODE
    - f2fs: fix wrong condition to trigger background checkpoint correctly
    - f2fs: compress: disallow disabling compress on non-empty compressed file
    - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
    - [armhf] clk/ast2600: Fix soc revision for AHB
    - [arm64] clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
    - [arm64] KVM: arm64: Fix host stage-2 finalization
    - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
    - sched/fair: Prevent dead task groups from regaining cfs_rq's
    - [x86] perf/x86/vlbr: Add c->flags to vlbr event constraints
    - blkcg: Remove extra blkcg_bio_issue_init
    - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
    - bpf: Fix inner map state pruning regression.
    - tcp: Fix uninitialized access in skb frags array for Rx 0cp.
    - tracing: Add length protection to histogram string copies
    - nl80211: fix radio statistics in survey dump
    - mac80211: fix monitor_sdata RCU/locking assertions
    - net: bnx2x: fix variable dereferenced before check
    - bnxt_en: reject indirect blk offload when hw-tc-offload is off
    - tipc: only accept encrypted MSG_CRYPTO msgs
    - sock: fix /proc/net/sockstat underflow in sk_clone_lock()
    - net/smc: Make sure the link_id is unique
    - NFSD: Fix exposure in nfsd4_decode_bitmap()
    - iavf: Fix return of set the new channel count
    - iavf: check for null in iavf_fix_features
    - iavf: free q_vectors before queues in iavf_disable_vf
    - iavf: don't clear a lock we don't hold
    - iavf: Fix failure to exit out from last all-multicast mode
    - iavf: prevent accidental free of filter structure
    - iavf: validate pointers
    - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
    - iavf: Fix for setting queues to 0
    - iavf: Restore VLAN filters after link down
    - bpf: Fix toctou on read-only map's constant scalar tracking
      (CVE-2021-4001)
    - [x86] platform/x86: hp_accel: Fix an error handling path in
      'lis3lv02d_probe()'
    - udp: Validate checksum in udp_read_sock()
    - btrfs: make 1-bit bit-fields of scrub_page unsigned int
    - RDMA/core: Set send and receive CQ before forwarding to the driver
    - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
    - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
    - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
    - net/mlx5: Update error handler for UCTX and UMEM
    - net/mlx5: E-Switch, rebuild lag only when needed
    - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
    - net/mlx5: Lag, update tracker when state change event received
    - net/mlx5: E-Switch, return error if encap isn't supported
    - scsi: ufs: core: Improve SCSI abort handling
    - scsi: core: sysfs: Fix hang when device state is set via sysfs
    - scsi: ufs: core: Fix task management completion timeout race
    - scsi: ufs: core: Fix another task management completion race
    - [arm*] net: mvmdio: fix compilation warning
    - net: sched: act_mirred: drop dst for the direction from egress to ingress
    - [arm64] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
    - net: virtio_net_hdr_to_skb: count transport header in UFO
    - i40e: Fix correct max_pkt_size on VF RX queue
    - i40e: Fix NULL ptr dereference on VSI filter sync
    - i40e: Fix changing previously set num_queue_pairs for PFs
    - i40e: Fix ping is lost after configuring ADq on VF
    - RDMA/mlx4: Do not fail the registration on port stats
    - i40e: Fix warning message and call stack during rmmod i40e driver
    - i40e: Fix creation of first queue by omitting it if is not power of two
    - i40e: Fix display error code in dmesg
    - e100: fix device suspend/resume (Closes: #995927)
    - [powerpc*] KVM: PPC: Book3S HV: Use GLOBAL_TOC for
      kvmppc_h_set_dabr/xdabr()
    - [powerpc*] pseries: rename numa_dist_table to form2_distances
    - [powerpc*] pseries: Fix numa FORM2 parsing fallback code
    - [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
      Server
    - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
    - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
    - [s390x] kexec: fix return code handling
    - blk-cgroup: fix missing put device in error path from blkg_conf_pref()
    - tun: fix bonding active backup with arp monitoring
    - tipc: check for null after calling kmemdup
    - ipc: WARN if trying to remove ipc object which is absent
    - shm: extend forced shm destroy to support objects from several IPC nses
    - hugetlb, userfaultfd: fix reservation restore on userfaultfd error
    - [x86] boot: Pull up cmdline preparation and early param parsing
    - [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup
      fails
    - [x86] KVM: x86: Assume a 64-bit hypercall for guests with protected state
    - [x86] KVM: x86: Fix uninitialized eoi_exit_bitmap usage in
      vcpu_load_eoi_exitmap()
    - [x86] KVM: x86/mmu: include EFER.LMA in extended mmu role
    - [x86] KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO
    - [powerpc*] xive: Change IRQ domain to a tree domain
    - [x86] Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
    - ata: libata: improve ata_read_log_page() error message
    - ata: libata: add missing ata_identify_page_supported() calls
    - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
    - [s390x] setup: avoid reserving memory above identity mapping
    - [s390x] boot: simplify and fix kernel memory layout setup
    - [s390x] vdso: filter out -mstack-guard and -mstack-size
    - [s390x] dump: fix copying to user-space of swapped kdump oldmem
    - block: Check ADMIN before NICE for IOPRIO_CLASS_RT
    - fbdev: Prevent probing generic drivers if a FB is already registered
    - [x86] KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
    - [x86] KVM: nVMX: don't use vcpu->arch.efer when checking host state on
      nested state load
    - drm/cma-helper: Release non-coherent memory with dma_free_noncoherent()
    - printk: restore flushing of NMI buffers on remote CPUs after NMI
      backtraces
    - udf: Fix crash after seekdir
    - spi: fix use-after-free of the add_lock mutex
    - [armhf] net: stmmac: socfpga: add runtime suspend/resume callback for
      stratix10 platform
    - [x86] Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
    - btrfs: fix memory ordering between normal and ordered work functions
    - fs: handle circular mappings correctly
    - net: stmmac: Fix signed/unsigned wreckage
    - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
    - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
    - drm/amd/display: Update swizzle mode enums
    - drm/amd/display: Limit max DSC target bpp for specific monitors
    - [x86] drm/i915/guc: Fix outstanding G2H accounting
    - [x86] drm/i915/guc: Don't enable scheduling on a banned context, guc_id
      invalid, not registered
    - [x86] drm/i915/guc: Workaround reset G2H is received after schedule done
      G2H
    - [x86] drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context
    - [x86] drm/i915/guc: Unwind context requests in reverse order
    - drm/udl: fix control-message timeout
    - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
    - drm/nouveau: Add a dedicated mutex for the clients list (CVE-2020-27820)
    - drm/nouveau: use drm_dev_unplug() during device removal (CVE-2020-27820)
    - drm/nouveau: clean up all clients on device removal (CVE-2020-27820)
    - [x86] drm/i915/dp: Ensure sink rate values are always valid
    - [x86] drm/i915/dp: Ensure max link params are always valid
    - [x86] drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern
      platforms
    - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
      and dvi connectors
    - drm/amd/pm: avoid duplicate powergate/ungate setting
    - signal: Implement force_fatal_sig
    - exit/syscall_user_dispatch: Send ordinary signals on failure
    - [powerpc*] signal/powerpc: On swapcontext failure force SIGSEGV
    - [s390x] signal/s390: Use force_sigsegv in default_trap_handler
    - [x86] signal/x86: In emulate_vsyscall force a signal instead of calling
      do_exit
    - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV)
    - signal: Don't always set SA_IMMUTABLE for forced signals
    - signal: Replace force_fatal_sig with force_exit_sig when in doubt
    - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (CVE-2021-4002)
    - RDMA/netlink: Add __maybe_unused to static inline in C file
    - bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
    - selinux: fix NULL-pointer dereference when hashtab allocation fails
    - ASoC: DAPM: Cover regression by kctl change notification fix
    - ice: Fix VF true promiscuous mode
    - ice: Delete always true check of PF pointer
    - fs: export an inode_update_time helper
    - btrfs: update device path inode time instead of bd_inode
    - net: add and use skb_unclone_keeptruesize() helper
    - [x86] ALSA: hda: hdac_ext_stream: fix potential locking issues
    - ALSA: hda: hdac_stream: fix potential locking issue in
      snd_hdac_stream_assign()
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.15.3-rt21
  * Drop "arm64: dts: rockchip: disable USB type-c DisplayPort"
  * [rt] Refresh "printk: move console printing to kthreads"
  * [rt] Refresh "printk: remove deferred printing"
  * Bump ABI to 2
  * fuse: release pipe buf after last use (Closes: #1000504)
.
linux (5.15.3-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3
    - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
      (CVE-2021-3640)
.
  [ Vincent Blut ]
  * [arm64] sound/soc/meson: Enable SND_MESON_AXG_SOUND_CARD as module
    (Closes: #999638)
  * [arm64,armhf] sound/soc/meson: Enable SND_MESON_GX_SOUND_CARD as module
  * drivers/bluetooth: Enable BT_HCIBTUSB_MTK (Closes: #999748)
.
  [ Salvatore Bonaccorso ]
  * mac80211: fix radiotap header generation
  * [rt] Update to 5.15.2-rt20
  * [rt] Refresh "printk: introduce kernel sync mode"
  * [rt] Refresh "printk: move console printing to kthreads"
  * [rt] Drop "rcutorture: Avoid problematic critical section nesting on
    PREEMPT_RT"
  * [rt] Drop "lockdep: Let lock_is_held_type() detect recursive read as read"
  * [rt] Refresh "x86/softirq: Disable softirq stacks on PREEMPT_RT"
  * [rt] Refresh "POWERPC: Allow to enable RT"
  * Set ABI to 1
.
linux (5.15.2-1~exp1) experimental; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.2
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.15-rt17 and reenable (Closes: #995466)
  * perf srcline: Use long-running addr2line per DSO (Closes: #911815)
  * Refresh "Export symbols needed by Android drivers"
  * [rt] Update to 5.15.2-rt19
  * Input: elantench - fix misreporting trackpoint coordinates (Closes: #989285)
  * kernel/time: Enable NO_HZ_FULL (Closes: #804857)
  * io-wq: serialize hash clear with wakeup (Closes: #996951)
.
  [ Vincent Blut ]
  * [x86] drivers/ptp: Enable PTP_1588_CLOCK_VMW as module
  * drivers/ptp: Enable PTP_1588_CLOCK_DTE, PTP_1588_CLOCK_IDT82P33,
    PTP_1588_CLOCK_IDTCM, PTP_1588_CLOCK_OCP as modules
  * drivers/ptp, net: Enable DP83640_PHY, PTP_1588_CLOCK_INES,
    NET_PTP_CLASSIFY, NETWORK_PHY_TIMESTAMPING
.
linux (5.15.1-1~exp1) experimental; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.1
.
  [ Salvatore Bonaccorso ]
  * [arm*] drop cc-option fallbacks for architecture selection
  * net/tls: Enable TLS as module (Closes: #919807)
.
  [ Diederik de Haas ]
  * [x86] drivers/hwmon: Enable SENSORS_CORSAIR_PSU as module
  * [arm64] drivers/hwmon: Enable SENSORS_GPIO_FAN as module
.
linux (5.15-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Diederik de Haas ]
  * [arm*] drivers/led/trigger: Make LEDS_TRIGGER_HEARTBEAT builtin
    (Closes: #992184)
  * [arm64] sound/soc/codecs: Enable SND_SOC_SPDIF as module
  * [armel/rpi] Enable RPi's clock framework and CPU Freq scaling
  * [armel/rpi] Change default governor to 'ondemand' for RPi 0/0w/1
    (Closes: #991921)
  * [arm64] sound/soc/rockchip: Enable SND_SOC_ROCKCHIP_PDM as module
  * [armel] Make explicit that -rpi kernel variant is for RPi 0/0w/1, not the
    others
.
  [ Nathan Schulte ]
  * [arm64] drivers/staging/media/hantro: Enable VIDEO_HANTRO as module
  * [arm64] drivers/staging/media/rkvdec: Enable VIDEO_ROCKCHIP_VDEC as module
    (Closes: #993902)
.
  [ Vincent Blut ]
  * [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM, CRYPTO_SHA256_ARM and
    CRYPTO_SHA512_ARM as modules
  * [armhf] arch/arm/crypto: Enable most NEON based implementation of
    cryptographic algorithms as modules
  * [arm] Move CRYPTO_NHPOLY1305_NEON in armhf config file
  * [arm64] drivers/gpu/drm/vmwgfx: Enable DRM_VMWGFX as module
    (Closes: #995276)
  * [armhf] sound/soc/sunxi: Enable SND_SUN4I_I2S as module (Closes: #971892)
  * [armhf] drivers/gpu/drm/bridge/synopsys: Enable DRM_DW_HDMI_I2S_AUDIO as
    module
  * drivers/usb/serial: Enable USB_SERIAL_XR as module (Closes: #996962)
  * drivers/bus/mhi: Enable MHI_BUS, MHI_BUS_PCI_GENERIC as modules
    (Closes: #995407)
  * drivers/net: Enable MHI_NET as module
  * drivers/net/wwan: Enable WWAN, MHI_WWAN_CTRL as modules
.
  [ YunQiang Su ]
  * [mipsel,mips64el/loongson-3] linux-image: Recommend pmon-update
.
  [ Salvatore Bonaccorso ]
  * Compile with gcc-11 on all architectures
  * [arm64] drivers/net: Enable VMXNET3 as module
.
  [ Uwe Kleine-König ]
  * [arm64] Enable various symbols for the librem5 devkit and iMX8MN Variscite
    Symphony (Patches by Guido Günther and Ariel D'Alessandro)
  * [armhf,arm64] Cherrypick fix for snvs_pwrkey to prevent a machine hang.
.
  [ Heiko Thiery ]
  * [arm64] drivers/mtd/spi-nor: enable MTD_SPI_NOR as module
  * [arm64] drivers/net/can/spi: enable CAN_MCP251X as module
  * [arm64] drivers/net/phy: enable MICROSEMI_PHY as module
  * [arm64] drivers/net/usb: enable USB_NET_SMSC95XX as module
.
  [ Ryutaroh Matsumoto ]
  * [arm64] Enable TOUCHSCREEN_RASPBERRYPI_FW and
    REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY (Closes: #977575)
.
  [ Ariel D'Alessandro ]
  * [arm64] drivers/regulator: Enable REGULATOR_BD718XX as module
.
  [ Lubomir Rintel ]
  * [armhf] Add support for Marvell MMP3
  * [armhf] Enable SND_MMP_SOC_SSPA, COMMON_CLK_MMP2_AUDIO, PHY_MMP3_USB,
    MFD_ENE_KB3930 and LEDS_ARIEL as modules.
.
  [ Sean McAvoy ]
  * [armel] marvell: Enable CONFIG_SENSORS_LM63 as a module.
.
  [ Dan Stefura ]
  * [arm64] enable i6300esb watchdog kernel module
.
  [ Thore Sommer ]
  * drivers/md: Enable DM_VERITY_FEC
.
  [ Aurelien Jarno ]
  * [riscv64] Enable NUMA (Closes: #993453)
.
linux (5.14.16-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.13
    - ext4: check and update i_disksize properly
    - ext4: correct the error path of ext4_write_inline_data_end()
    - [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
    - ALSA: oxfw: fix transmission method for Loud models based on OXFW971
    - ALSA: usb-audio: Unify mixer resume and reset_resume procedure
    - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
    - netfilter: ip6_tables: zero-initialize fragment offset
    - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
    - [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid
      batching
    - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
    - netfilter: nf_nat_masquerade: defer conntrack walk to work queue
    - mac80211: Drop frames from invalid MAC address in ad-hoc mode
    - [m68k] Handle arrivals of multiple signals correctly
    - net: prevent user from passing illegal stab size
    - mac80211: check return value of rhashtable_init
    - [x86] vboxfs: fix broken legacy mount signature checking
    - drm/amdgpu: fix gart.bo pin_count leak
    - scsi: ses: Fix unsigned comparison with less than zero
    - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
    - scsi: qla2xxx: Fix excessive messages during device logout
    - perf/core: fix userpage->time_enabled of inactive events
    - sched: Always inline is_percpu_thread()
    - io_uring: kill fasync
    - [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.14
    - ALSA: usb-audio: Add quirk for VF0770
    - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
    - ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer
    - ALSA: seq: Fix a potential UAF by wrong private_free call order
    - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
    - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
    - ALSA: hda/realtek: Complete partial device name to avoid ambiguity
    - ALSA: hda/realtek: Add quirk for Clevo X170KM-G
    - ALSA: hda/realtek - ALC236 headset MIC recording issue
    - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
    - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
      13s Gen2
    - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
    - [amd64] platform/x86: amd-pmc: Add alternative acpi id for PMC controller
    - dm: fix mempool NULL pointer race when completing IO
    - [x86] ACPI: PM: Include alternate AMDI0005 id in special behaviour
    - dm rq: don't queue request to blk-mq during DM suspend
    - [s390x] fix strrchr() implementation
    - drm/fbdev: Clamp fbdev surface size if too large
    - [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
    - drm/nouveau/fifo: Reinstate the correct engine bit programming
    - [arm64] drm/msm: Do not run snapshot on non-DPU devices
    - [arm64] drm/msm: Avoid potential overflow in timeout_to_jiffies()
    - btrfs: unlock newly allocated extent buffer after error
    - btrfs: deal with errors when replaying dir entry during log replay
    - btrfs: deal with errors when adding inode reference during log replay
    - btrfs: check for error when looking up inode during dir entry replay
    - btrfs: update refs for any root except tree log roots
    - btrfs: fix abort logic in btrfs_replace_file_extents
    - [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
    - [x86] mei: me: add Ice Lake-N device id.
    - [x86] mei: hbm: drop hbm responses on early shutdown
    - xhci: guard accesses to ep_state in xhci_endpoint_reset()
    - xhci: add quirk for host controllers that don't update endpoint DCS
    - xhci: Fix command ring pointer corruption while aborting a command
    - xhci: Enable trust tx length quirk for Fresco FL11 USB controller
    - cb710: avoid NULL pointer subtraction
    - [arm64,x86] efi/cper: use stack buffer for error record decoding
    - efi: Change down_interruptible() in virt_efi_reset_system() to
      down_trylock()
    - [armhf] usb: musb: dsps: Fix the probe error path
    - Input: xpad - add support for another USB ID of Nacon GC-100
    - USB: serial: qcserial: add EM9191 QDL support
    - USB: serial: option: add Quectel EC200S-CN module support
    - USB: serial: option: add Telit LE910Cx composition 0x1204
    - USB: serial: option: add prod. id for Quectel EG91
    - virtio: write back F_VERSION_1 before validate
    - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
    - virtio-blk: remove unneeded "likely" statements
    - Revert "virtio-blk: Add validation for block size in config space"
    - [x86] fpu: Mask out the invalid MXCSR bits properly
    - [x86] Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
      automatically
    - [powerpc*] xive: Discard disabled interrupts in get_irqchip_state()
    - [armhf] drivers: bus: simple-pm-bus: Add support for probing simple bus
      only devices
    - driver core: Reject pointless SYNC_STATE_ONLY device links
    - iio: adc: ad7192: Add IRQ flag
    - iio: adc: ad7780: Fix IRQ flag
    - iio: adc: ad7793: Fix IRQ flag
    - iio: adis16480: fix devices that do not support sleep mode
    - iio: adc128s052: Fix the error handling path of 'adc128_probe()'
    - iio: adc: max1027: Fix wrong shift with 12-bit devices
    - iio: adis16475: fix deadlock on frequency set
    - iio: light: opt3001: Fixed timeout error when 0 lux
    - iio: adc: max1027: Fix the number of max1X31 channels
    - eeprom: at25: Add SPI ID table
    - iio: dac: ti-dac5571: fix an error code in probe()
    - [arm64] tee: optee: Fix missing devices unregister during optee_remove
    - [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address
    - [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
    - [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
    - nvme-pci: Fix abort command id
    - sctp: account stream padding length for reconf chunk
    - [arm64,armhf] gpio: pca953x: Improve bias setting
    - net/smc: improved fix wait on already cleared link
    - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
    - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
    - net/mlx5e: Switchdev representors are not vlan challenged
    - net: stmmac: fix get_hw_feature() on old hardware
    - net: phy: Do not shutdown PHYs in READY state
    - [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
    - [arm64,armhf] net: dsa: fix spurious error message when unoffloaded port
      leaves bridge
    - ethernet: s2io: fix setting mac address during resume
    - nfc: fix error handling of nfc_proto_register()
    - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
    - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
    - pata_legacy: fix a couple uninitialized variable bugs
    - ata: ahci_platform: fix null-ptr-deref in
      ahci_platform_enable_regulators()
    - spi: spidev: Add SPI ID table
    - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
    - [arm64] drm/msm: Fix null pointer dereference on pointer edp
    - [arm64] drm/msm/mdp5: fix cursor-related warnings
    - [arm64] drm/msm/submit: fix overflow check on 64-bit architectures
    - [arm64] drm/msm/a6xx: Track current ctx by seqno
    - [arm64] drm/msm/a4xx: fix error handling in a4xx_gpu_init()
    - [arm64] drm/msm/a3xx: fix error handling in a3xx_gpu_init()
    - [arm64] drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
      poll_for_ready
    - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
    - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
    - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
    - [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time
    - mqprio: Correct stats in mqprio_dump_class_stats().
    - mptcp: fix possible stall on recvmsg()
    - qed: Fix missing error code in qed_slowpath_start()
    - ice: fix locking for Tx timestamp tracking flush
    - nfp: flow_offload: move flow_indr_dev_register from app init to app start
    - [arm64] net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
    - [arm64] net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
    - [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
      skb
    - [arm64] net: mscc: ocelot: deny TX timestamping of non-PTP packets
    - [arm64] net: mscc: ocelot: cross-check the sequence id from the timestamp
      FIFO with the skb PTP header
    - [arm64] net: dsa: felix: break at first CPU port during init and teardown
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15
    - [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address
    - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
    - [x86] xen/x86: prevent PVH type from getting clobbered
    - r8152: avoid to resubmit rx immediately
    - drm/amdgpu: init iommu after amdkfd device init
    - NFSD: Keep existing listeners on portlist error
    - [powerpc*] powerpc/lib: Add helper to check if offset is within
      conditional branch range
    - [powerpc*] powerpc/bpf: Validate branch ranges
    - [powerpc*] powerpc/security: Add a helper to query stf_barrier type
    - [powerpc*] powerpc/bpf: Emit stf barrier instruction sequences for
      BPF_NOSPEC
    - [arm64] KVM: arm64: Fix host stage-2 PGD refcount
    - [arm64] KVM: arm64: Release mmap_lock when using VM_SHARED with MTE
    - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
      value
    - netfilter: nf_tables: skip netdev events generated on netns removal
    - ice: Fix failure to re-add LAN/RDMA Tx queues
    - ice: Avoid crash from unnecessary IDA free
    - ice: fix getting UDP tunnel entry
    - ice: Print the api_patch as part of the fw.mgmt.api
    - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
    - netfilter: ipvs: make global sysctl readonly in non-init netns
    - sctp: fix transport encap_port update in sctp_vtag_verify
    - tcp: md5: Fix overlap between vrf and non-vrf keys
    - ipv6: When forwarding count rx stats on the orig netdev
    - hamradio: baycom_epp: fix build for UML
    - net/sched: act_ct: Fix byte count on fragmented packets
    - [arm64,armhf] net: dsa: Fix an error handling path in
      'dsa_switch_parse_ports_of()'
    - [powerpc*] smp: do not decrement idle task preempt count in CPU offline
    - [arm64] net: hns3: Add configuration of TM QCN error event
    - [arm64] net: hns3: reset DWRR of unused tc to zero
    - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
    - [arm64] net: hns3: schedule the polling again when allocation fails
    - [arm64] net: hns3: fix vf reset workqueue cannot exit
    - [arm64] net: hns3: disable sriov before unload hclge layer
    - net: stmmac: Fix E2E delay mechanism
    - ptp: Fix possible memory leak in ptp_clock_register()
    - e1000e: Fix packet loss on Tiger Lake and later
    - igc: Update I226_K device ID
    - ice: Add missing E810 device ids
    - net/mlx5e: IPsec: Fix a misuse of the software parser's fields
    - net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags
    - [arm64] net: enetc: fix ethtool counter name for PM0_TERR
    - [arm64] net: enetc: make sure all traffic classes can send large frames
    - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
      notification
    - can: peak_pci: peak_pci_remove(): fix UAF
    - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
    - can: isotp: isotp_sendmsg(): add result check for
      wait_event_interruptible()
    - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
      isotp_sendmsg()
    - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
    - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
    - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
      error length
    - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
    - ceph: skip existing superblocks that are blocklisted or shut down when
      mounting
    - ceph: fix handling of "meta" errors
    - tracing: Have all levels of checks prevent recursion
    - ocfs2: fix data corruption after conversion from inline format
    - ocfs2: mount fails with buffer overflow in strlen
    - userfaultfd: fix a race between writeprotect and exit_mmap()
    - mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in
      mbind()
    - vfs: check fd has read access in kernel_read_file_from_fd()
    - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
    - ALSA: hda/realtek: Add quirk for Clevo PC50HS
    - ASoC: DAPM: Fix missing kctl change notifications
    - [x86] ASoC: nau8824: Fix headphone vs headset, button-press detection no
      longer working
    - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on
      blkg->iostat_cpu
    - audit: fix possible null-pointer dereference in audit_filter_rules
    - ucounts: Move get_ucounts from cred_alloc_blank to
      key_change_session_keyring
    - ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds
    - ucounts: Proper error handling in set_cred_ucounts
    - ucounts: Fix signal ucount refcounting
    - [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in
      idle_kvm_start_guest()
    - [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it
      went to guest (CVE-2021-43056)
    - [powerpc*] idle: Don't corrupt back chain when going idle
    - mm, slub: fix mismatch between reconstructed freelist depth and cnt
    - mm, slub: fix potential memoryleak in kmem_cache_open()
    - mm, slub: fix potential use-after-free in slab_debugfs_fops
    - mm, slub: fix incorrect memcg slab count for bulk free
    - [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode
    - [x86] KVM: SEV: Flush cache on non-coherent systems before
      RECEIVE_UPDATE_DATA
    - [x86] KVM: SEV-ES: rename guest_ins_data to sev_pio_data
    - [x86] KVM: SEV-ES: clean up kvm_sev_es_ins/outs
    - [x86] KVM: SEV-ES: keep INS functions together
    - [x86] KVM: SEV-ES: fix length of string I/O
    - [x86] KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if
      needed
    - [x86] KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
    - [x86] KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
    - [x86] KVM: x86: check for interrupts before deciding whether to exit the
      fast path
    - [x86] KVM: x86: split the two parts of emulator_pio_in
    - [x86] KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
    - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
    - isdn: cpai: check ctr->cnr to avoid array index out of bound
      (CVE-2021-3896)
    - [sh4] net: bridge: mcast: use multicast_membership_interval for IGMPv3
    - [x86] KVM: SEV-ES: Set guest_state_protected after VMSA update
    - [arm64] net: hns3: fix the max tx size according to user manual
    - [x86] KVM: MMU: Reset mmu->pkru_mask to avoid stale data
    - [arm64] drm/msm/a6xx: Serialize GMU communication
    - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
    - btrfs: deal with errors when checking if a dir entry exists during log
      replay
    - net: stmmac: add support for dwmac 3.40a
    - [x86] platform/x86: intel_scu_ipc: Increase virtual timeout to 10s
    - [x86] platform/x86: intel_scu_ipc: Update timeout value in comment
    - ALSA: hda: avoid write to STATESTS if controller is in reset
    - spi: Fix deadlock when adding SPI controllers on SPI buses
    - spi-mux: Fix false-positive lockdep splats
    - [x86] perf/x86/msr: Add Sapphire Rapids CPU support
    - scsi: iscsi: Fix set_param() handling
    - [x86] scsi: storvsc: Fix validation for unsolicited incoming packets
    - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
    - mm/thp: decrease nr_thps in file's mapping on THP split
    - sched/scs: Reset the shadow stack when idle_task_exit
    - [arm64] net: hns3: fix for miscalculation of rx unused desc
    - net/mlx5: Lag, move lag destruction to a workqueue
    - net/mlx5: Lag, change multipath and bonding to be mutually exclusive
    - autofs: fix wait name hash calculation in autofs_wait()
    - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
    - [s390x] pci: cleanup resources only if necessary
    - [s390x] pci: fix zpci_zdev_put() on reserve
    - net: mdiobus: Fix memory leak in __mdiobus_register
    - e1000e: Separate TGP board type from SPT
    - [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16
    - [armel,armhf] 9134/1: remove duplicate memcpy() definition
    - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
    - [armel,armhf] 9148/1: handle CONFIG_CPU_ENDIAN_BE32 in
      arch/arm/kernel/head.S
    - usbnet: sanity check for maxpacket
    - usbnet: fix error return code in usbnet_probe()
    - pinctrl: amd: disable and mask interrupts on probe
    - ata: sata_mv: Fix the error handling of mv_chip_id()
    - tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267)
    - nfc: port100: fix using -ERRNO as command type mask
    - Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
    - mmc: vub300: fix control-message timeouts
    - mmc: cqhci: clear HALT state after CQE enable
    - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
    - mmc: sdhci: Map more voltage level to SDHCI_POWER_330
    - mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield
    - [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
      standard tuning circuit
    - block: Fix partition check for host-aware zoned block devices
    - ocfs2: fix race between searching chunks and release journal_head from
      buffer_head
    - nvme-tcp: fix H2CData PDU send accounting (again)
    - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
    - cfg80211: fix management registrations locking
    - net: lan78xx: fix division by zero in send path
    - mm: hwpoison: remove the unnecessary THP check
    - mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
    - mm, thp: bail out early in collapse_file for writeback page
    - mm: khugepaged: skip huge page collapse for special files
    - [arm64] dts: imx8mm-kontron: Fix polarity of reg_rst_eth2
    - [arm64] dts: imx8mm-kontron: Fix CAN SPI clock frequency
    - [arm64] dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY
    - [arm64] dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV
    - [arm64] dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are
      correct
    - mac80211: mesh: fix HE operation element length check
    - drm/ttm: fix memleak in ttm_transfered_destroy
    - [x86] drm/i915: Convert unconditional clflush to drm_clflush_virt_range()
    - [x86] drm/i915: Catch yet another unconditioal clflush
    - [x86] drm/i915/dp: Skip the HW readout of DPCD on disabled encoders
    - drm/amdgpu: Fix even more out of bound writes from debugfs
    - drm/amdgpu: fix out of bounds write (CVE-2021-42327)
    - drm/amdgpu: support B0&B1 external revision id for yellow carp
    - drm/amd/display: Limit display scaling to up to true 4k for DCN 3.1
    - drm/amd/display: Fix prefetch bandwidth calculation for DCN3.1
    - drm/amd/display: increase Z9 latency to workaround underflow in Z9
    - drm/amd/display: Increase watermark latencies for DCN3.1
    - drm/amd/display: Moved dccg init to after bios golden init
    - drm/amd/display: Fallback to clocks which meet requested voltage on DCN31
    - drm/amd/display: Fix deadlock when falling back to v2 from v3
    - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
    - cgroup: Fix memory leak caused by missing cgroup_bpf_offline
    - [riscv64] riscv, bpf: Fix potential NULL dereference
    - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
    - bpf: Fix potential race in tail call compatibility check
    - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
    - [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt
      fields
    - [amd64] IB/hfi1: Fix abba locking issue with sc_disable()
    - nvmet-tcp: fix data digest pointer calculation
    - nvme-tcp: fix data digest pointer calculation
    - nvme-tcp: fix possible req->offset corruption
    - ice: Respond to a NETDEV_UNREGISTER event for LAG
    - RDMA/mlx5: Set user priority for DCT
    - ice: check whether PTP is initialized in ice_ptp_release()
    - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
    - regmap: Fix possible double-free in regcache_rbtree_exit()
    - net: batman-adv: fix error handling
    - net-sysfs: initialize uid and gid before calling net_ns_get_ownership
    - cfg80211: correct bridge/4addr mode check
    - net: Prevent infinite while loop in skb_tx_hash()
    - RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
    - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
    - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
      fails
    - net: ethernet: microchip: lan743x: Fix dma allocation failure by using
      dma_set_mask_and_coherent
    - [arm64] net: hns3: fix pause config problem after autoneg disabled
    - [arm64] net: hns3: fix data endian problem of some functions of debugfs
    - net: ethernet: microchip: lan743x: Fix skb allocation failure
    - phy: phy_ethtool_ksettings_get: Lock the phy for consistency
    - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
    - phy: phy_start_aneg: Add an unlocked version
    - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
    - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
    - sctp: fix the processing for INIT chunk (CVE-2021-3772)
    - sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772)
    - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
    - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
    - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
    - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
    - bpf: Use kvmalloc for map values in syscall
    - [arm64] watchdog: sbsa: only use 32-bit accessors
    - bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of
      CONFIG_NET
    - [arm64] net: hns3: add more string spaces for dumping packets number of
      queue info in debugfs
    - [arm64] net: hns3: expand buffer len for some debugfs command
    - virtio-ring: fix DMA metadata flags
    - [s390x] KVM: s390: clear kicked_mask before sleeping again
    - [s390x] KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
    - [powerpc*] scsi: ibmvfc: Fix up duplicate response detection
    - [riscv64] fix misalgned trap vector base address
    - [x86] KVM: switch pvclock_gtod_sync_lock to a raw spinlock
    - [x86] KVM: SEV-ES: fix another issue with string I/O VMGEXITs
    - [x86] KVM: Take srcu lock in post_kvm_run_save()
.
  [ Salvatore Bonaccorso ]
  * Revert "[amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT"
  * Bump ABI to 4
  * media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
    (Closes: #994050)
  * [x86] media: ite-cir: IR receiver stop working after receive overflow
    (Closes: #996672)
  * scsi: core: Put LLD module refcnt after SCSI device is released
  * sfc: Fix reading non-legacy supported link modes
  * vrf: Revert "Reset skb conntrack connection..."
  * media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
    (CVE-2021-42739)
.
linux (5.14.12-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10
    - [arm64,armhf] media: cedrus: Fix SUNXI tile size calculation
    - [arm64] ASoC: fsl_sai: register platform component before registering cpu
      dai
    - [armhf] ASoC: fsl_spdif: register platform component before registering
      cpu dai
    - [x86] ASoC: SOF: Fix DSP oops stack dump output contents
    - [arm64] pinctrl: qcom: spmi-gpio: correct parent irqspec translation
    - net/mlx4_en: Resolve bad operstate value
    - [s390x] qeth: Fix deadlock in remove_discipline
    - [s390x] qeth: fix deadlock during failing recovery
    - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
      (CVE-2021-3744, CVE-2021-3764)
    - [m68k] Update ->thread.esp0 before calling syscall_trace() in
      ret_from_signal
    - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference
    - tty: Fix out-of-bound vmalloc access in imageblit
    - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
    - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
    - drm/amdgpu: adjust fence driver enable sequence
    - drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2)
    - drm/amdgpu: stop scheduler when calling hw_fini (v2)
    - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
    - scsi: ufs: ufs-pci: Fix Intel LKF link stability
    - ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
    - ALSA: firewire-motu: fix truncated bytes in message tracepoints
    - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
      15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
    - [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT
      table is incorrect
    - fs-verity: fix signed integer overflow with i_size near S64_MAX
    - hwmon: (tmp421) handle I2C errors
    - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
      structure field
    - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
      structure field
    - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
      structure field
    - [arm64,armhf] gpio: pca953x: do not ignore i2c errors
    - scsi: ufs: Fix illegal offset in UPIU event trace
    - mac80211: fix use-after-free in CCMP/GCMP RX
    - [x86] platform/x86/intel: hid: Add DMI switches allow list
    - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
    - [x86] ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
    - [x86] KVM: x86: Fix stack-out-of-bounds memory access from
      ioapic_write_indirect()
    - [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12
    - [x86] KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
    - [x86] KVM: x86: Swap order of CPUID entry "index" vs. "significant flag"
      checks
    - [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was
      activated
    - [x86] KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES
    - [x86] KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
    - [x86] KVM: SEV: Acquire vcpu mutex when updating VMSA
    - [x86] KVM: SEV: Allow some commands for mirror VM
    - [x86] KVM: SVM: fix missing sev_decommission in sev_receive_start
    - [x86] KVM: nVMX: Fix nested bus lock VM exit
    - [x86] KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
    - RDMA/cma: Do not change route.addr.src_addr.ss_family
    - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
    - nbd: use shifts rather than multiplies
    - drm/amd/display: initialize backlight_ramping_override to false
    - drm/amd/display: Pass PCI deviceid into DC
    - drm/amd/display: Fix Display Flicker on embedded panels
    - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
    - drm/amdgpu: check tiling flags when creating FB on GFX8-
    - drm/amdgpu: correct initial cp_hqd_quantum for gfx9
    - [amd64] drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
    - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
    - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
    - IB/cma: Do not send IGMP leaves for sendonly Multicast groups
    - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
    - netfilter: nf_tables: unlink table before deleting it
    - netfilter: log: work around missing softdep backend module
    - Revert "mac80211: do not use low data rates for data frames with no ack
      flag"
    - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
    - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
    - mac80211: mesh: fix potentially unaligned access
    - mac80211-hwsim: fix late beacon hrtimer handling
    - driver core: fw_devlink: Add support for
      FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD
    - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents
    - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
    - mptcp: don't return sockets in foreign netns
    - mptcp: allow changing the 'backup' bit when no sockets are open
    - [arm64] RDMA/hns: Work around broken constant propagation in gcc 8
    - hwmon: (tmp421) report /PVLD condition as fault
    - hwmon: (tmp421) fix rounding for negative values
    - [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits
    - net: ipv4: Fix rtnexthop len when RTA_FLOW is present
    - smsc95xx: fix stalled rx after link change
    - [x86] drm/i915/request: fix early tracepoints
    - [x86] drm/i915: Remove warning from the rps worker
    - [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
    - [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition
    - [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for
      DSA and CPU ports
    - e100: fix length calculation in e100_get_regs_len
    - e100: fix buffer overrun in e100_get_regs
    - [amd64] RDMA/hfi1: Fix kernel pointer leak
    - [arm64] RDMA/hns: Fix the size setting error when copying CQE in
      clean_cq()
    - [arm64] RDMA/hns: Add the check of the CQE size of the user space
    - bpf: Exempt CAP_BPF from checks against bpf_jit_limit
    - [amd64] bpf, x86: Fix bpf mapping of atomic fetch implementation
    - Revert "block, bfq: honor already-setup queue merges"
    - scsi: csiostor: Add module softdep on cxgb4
    - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
    - [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly
    - [arm64] net: hns3: remove tc enable checking
    - [arm64] net: hns3: don't rollback when destroy mqprio fail
    - [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
      HCLGE_FLAG_DCB_ENABLE
    - [arm64] net: hns3: fix show wrong state when add existing uc mac address
    - [arm64] net: hns3: reconstruct function hns3_self_test
    - [arm64] net: hns3: fix always enable rx vlan filter problem after selftest
    - [arm64] net: hns3: disable firmware compatible features when uninstall PF
    - [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
    - net: sched: flower: protect fl_walk() with rcu
    - net: stmmac: fix EEE init issue when paired with EEE capable PHYs
    - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
    - [x86] perf/x86/intel: Update event constraints for ICX
    - sched/fair: Add ancestors of unthrottled undecayed cfs_rq
    - sched/fair: Null terminate buffer when updating tunable_scaling
    - [armhf] hwmon: (occ) Fix P10 VRM temp sensors
    - [x86] kvm: fix objtool relocation warning
    - nvme: add command id quirk for apple controllers
    - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
    - driver core: fw_devlink: Improve handling of cyclic dependencies
    - debugfs: debugfs_create_file_size(): use IS_ERR to check for error
    - ext4: fix loff_t overflow in ext4_max_bitmap_size()
    - ext4: fix reserved space counter leakage
    - ext4: add error checking to ext4_ext_replay_set_iblocks()
    - ext4: fix potential infinite loop in ext4_dx_readdir()
    - ext4: flush s_error_work before journal destroy in ext4_fill_super
    - HID: u2fzero: ignore incomplete packets without data (Closes: #994535)
    - net: udp: annotate data race around udp_sk(sk)->corkflag
    - usb: hso: remove the bailout parameter
    - HID: betop: fix slab-out-of-bounds Write in betop_probe
    - netfilter: ipset: Fix oversized kvmalloc() calls
    - mm: don't allow oversized kvmalloc() calls
    - HID: usbhid: free raw_report buffers in usbhid_stop
    - [x86] crypto: aesni - xts_crypt() return if walk.nbytes is 0
    - [x86] KVM: x86: Handle SRCU initialization failure during page track init
    - netfilter: conntrack: serialize hash resizes and cleanups
    - netfilter: nf_tables: Fix oversized kvmalloc() calls
    - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - take 2
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.11
    - [arm64,armhf] spi: rockchip: handle zero length transfers without timing
      out
    - afs: Add missing vnode validation checks
    - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
    - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
    - btrfs: fix mount failure due to past and transient device flush error
    - net: mdio: introduce a shutdown method to mdio device drivers
    - xen-netback: correct success/error reporting for the SKB-with-fraglist
      case
    - [sparc64] fix pci_iounmap() when CONFIG_PCI is not set
    - scsi: sd: Free scsi_disk device via put_device()
    - [arm*] usb: dwc2: check return value after calling platform_get_resource()
    - Xen/gntdev: don't ignore kernel unmapping error
    - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests
    - nvme-fc: update hardware queues before using them
    - nvme-fc: avoid race between time out and tear down
    - [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
    - scsi: ses: Retry failed Send/Receive Diagnostic commands
    - [arm64,armhf] irqchip/gic: Work around broken Renesas integration
    - smb3: correct smb3 ACL security descriptor
    - [x86] insn, tools/x86: Fix undefined behavior due to potential unaligned
      accesses
    - io_uring: allow conditional reschedule for intensive iterators
    - block: don't call rq_qos_ops->done_bio if the bio isn't tracked
    - KVM: do not shrink halt_poll_ns below grow_start
    - [x86] KVM: x86: reset pdptrs_from_userspace when exiting smm
    - [x86] kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
    - [x86] KVM: x86: nSVM: restore int_vector in svm_clear_vintr
    - [x86] perf/x86: Reset destroy callback on event init failure
    - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
    - Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback"
    - [armhf] Revert "ARM: imx6q: drop of_platform_default_populate() from
      init_machine"
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12
    - usb: cdc-wdm: Fix check for WWAN
    - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
    - usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize
    - USB: cdc-acm: fix racy tty buffer accesses
    - USB: cdc-acm: fix break reporting
    - usb: typec: tcpm: handle SRC_STARTUP state if cc changes
    - [x86] usb: typec: tipd: Remove dependency on "connector" child fwnode
    - drm/amdgpu: During s0ix don't wait to signal GFXOFF
    - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
    - drm/nouveau/ga102-: support ttm buffer moves via copy engine
    - [x86] drm/i915: Fix runtime pm handling in i915_gem_shrink
    - [x86] drm/i915: Extend the async flip VT-d w/a to skl/bxt
    - xen/privcmd: fix error handling in mmap-resource processing
    - [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
    - ovl: fix missing negative dentry check in ovl_rename()
    - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
    - nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
    - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
    - SUNRPC: fix sign error causing rpcsec_gss drops
    - xen/balloon: fix cancelled balloon action
    - [armhf] dts: omap3430-sdp: Fix NAND device node
    - scsi: ufs: core: Fix task management completion
    - [riscv64] Flush current cpu icache before other cpus
    - [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc()
    - iwlwifi: mvm: Fix possible NULL dereference
    - [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
    - [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo
    - [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo
    - [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child
      devices from the bus
    - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
    - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
    - netfilter: nf_tables: add position handle in event notification
    - netfilter: nf_tables: reverse order in rule replacement expansion
    - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
    - [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss
    - bpf: Fix integer overflow in prealloc_elems_and_freelist()
      (CVE-2021-41864)
    - net/mlx5e: IPSEC RX, enable checksum complete
    - net/mlx5e: Keep the value for maximum number of channels in-sync
    - net/mlx5: E-Switch, Fix double allocation of acl flow counter
    - net/mlx5: Force round second at 1PPS out start time
    - net/mlx5: Avoid generating event after PPS out in Real time mode
    - net/mlx5: Fix length of irq_index in chars
    - net/mlx5: Fix setting number of EQs of SFs
    - net/mlx5e: Fix the presented RQ index in PTP stats
    - phy: mdio: fix memory leak
    - net_sched: fix NULL deref in fifo_set_limit()
    - [arm64] net: mscc: ocelot: fix VCAP filters remaining active after being
      deleted
    - [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
    - [mips*] Revert "add support for buggy MT7621S core detection"
    - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event
      notification
    - [i386] ptp_pch: Load module automatically if ID matches
    - [armhf] dts: imx: change the spi-nor tx
    - [arm64] dts: imx8: change the spi-nor tx
    - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
      sequence
    - [x86] drm/i915/audio: Use BIOS provided value for RKL HDA link
    - [x86] drm/i915/jsl: Add W/A 1409054076 for JSL
    - [x86] drm/i915/tc: Fix TypeC port init/resume time sanitization
    - [x86] drm/i915/bdb: Fix version check
    - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
    - afs: Fix afs_launder_page() to set correct start file position
    - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
    - net: bridge: fix under estimation in br_get_linkxstats_size()
    - net/sched: sch_taprio: properly cancel timer from taprio_destroy()
    - net: sfp: Fix typo in state machine debug string
    - net: pcs: xpcs: fix incorrect CL37 AN sequence
    - netlink: annotate data races around nlk->bound
    - drm/amdgpu: handle the case of pci_channel_io_frozen only in
      amdgpu_pci_resume
    - [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
    - [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
    - drm/nouveau: avoid a use-after-free when BO init fails
    - drm/nouveau/kms/nv50-: fix file release memory leak
    - drm/nouveau/debugfs: fix file release memory leak
    - net: pcs: xpcs: fix incorrect steps on disable EEE
    - net: stmmac: trigger PCS EEE to turn off on link down
    - [amd64,arm64] gve: Correct available tx qpl check
    - [amd64,arm64] gve: Avoid freeing NULL pointer
    - [amd64,arm64] gve: Properly handle errors in gve_assign_qpl
    - rtnetlink: fix if_nlmsg_stats_size() under estimation
    - [amd64,arm64] gve: fix gve_get_stats()
    - [amd64,arm64] gve: report 64bit tx_bytes counter from
      gve_handle_report_stats()
    - i40e: fix endless loop under rtnl
    - i40e: Fix freeing of uninitialized misc IRQ vector
    - iavf: fix double unlock of crit_lock
    - net: prefer socket bound to interface when not in VRF
    - [powerpc*] iommu: Report the correct most efficient DMA mask for PCI
      devices
    - i2c: acpi: fix resource leak in reconfiguration device addition
    - [riscv64] explicitly use symbol offsets for VDSO
    - [riscv64] vdso: Refactor asm/vdso.h
    - [riscv64] vdso: Move vdso data page up front
    - [riscv64] vdso: make arch_setup_additional_pages wait for mmap_sem for
      write killable
    - [s390x] bpf, s390: Fix potential memory leak about jit_data
    - [riscv64] Include clone3() on rv32
    - scsi: iscsi: Fix iscsi_task use after free
    - [powerpc*] bpf: Fix BPF_MOD when imm == 1
    - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
    - [powerpc*] 64s: fix program check interrupt emergency stack path
    - [powerpc*] traps: do not enable irqs in _exception
    - [powerpc*] 64s: Fix unrecoverable MCE calling async handler from NMI
    - [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
    - [i386] x86/platform/olpc: Correct ifdef symbol to intended
      CONFIG_OLPC_XO15_SCI
    - [x86] fpu: Restore the masking out of reserved MXCSR bits
    - [x86] entry: Correct reference to intended CONFIG_64_BIT
    - [x86] hpet: Use another crystalball to evaluate HPET usability
    - [arm64,armhf] dsa: tag_dsa: Fix mask for trunked packets
.
  [ Ben Hutchings ]
  * debian/.gitignore: Ignore debian/tests/control again
  * integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after 5.13
  * tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix
    reproducibility"
  * debian/rules.real: Stop invoking obsolete headers_check target
  * libcpupower: Update symbols file for changes in 5.13.9-1~exp1
.
  [ John Paul Adrian Glaubitz ]
  * [alpha] Re-enable CONFIG_EISA which was disabled upstream by accident
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 3
  * mm/secretmem: Fix NULL page->mapping dereference in page_is_secretmem()
    (Closes: #996175)
.
  [ Aurelien Jarno ]
  * [riscv64] Improve HiFive Unmatched support: enable SENSORS_LM90.

linux (5.14.9-9parrot1) lts-updates; urgency=medium
.
  * Import new Debian release.
  * Add Parrot wireless patches.
  * Disable kernel signing.
.
linux (5.14.9-2) unstable; urgency=medium
.
  * [amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT.
    Do not activate AMD Secure Memory Encryption (SME) by default, until
    AMDGPU related incompatibilities are fixed. (Closes: #994453)
.
linux (5.14.9-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.7
    - [amd64] net: stmmac: fix MAC not working when system resume back with WoL
      active
    - [amd64,arm64] swiotlb-xen: avoid double free
    - swiotlb-xen: fix late init retry
    - [amd64] xen: reset legacy rtc flag for PV domU
    - [amd64] xen: fix usage of pmd_populate in mremap for pv guests
    - [arm64] sve: Use correct size when reinitialising SVE state
    - PCI: Add AMD GPU multi-function power dependencies
    - drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
    - drm/amd/display: Fix white screen page fault for gpuvm
    - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
    - drm/amdgpu: use IS_ERR for debugfs APIs
    - drm/amdgpu: fix use after free during BO move
    - drm/amdgpu: add amdgpu_amdkfd_resume_iommu
    - drm/amdgpu: move iommu_resume before ip init/resume
    - drm/radeon: pass drm dev radeon_agp_head_init directly
    - io_uring: allow retry for O_NONBLOCK if async is supported
    - [x86] drm/i915/dp: Use max params for panels < eDP 1.4
    - [armhf] drm/etnaviv: return context from etnaviv_iommu_context_get
    - [armhf] drm/etnaviv: put submit prev MMU context when it exists
    - [armhf] drm/etnaviv: stop abusing mmu_context as FE running marker
    - [armhf] drm/etnaviv: keep MMU context across runtime suspend/resume
    - [armhf] drm/etnaviv: exec and MMU state is lost when resetting the GPU
    - [armhf] drm/etnaviv: fix MMU context leak on GPU reset
    - [armhf] drm/etnaviv: reference MMU context when setting up hardware state
    - [armhf] drm/etnaviv: add missing MMU context put when reaping MMU mapping
    - [s390x] sclp: fix Secure-IPL facility detection
    - net: qrtr: revert check in qrtr_endpoint_post() (Closes: #995491)
    - [x86] pat: Pass valid address to sanitize_phys()
    - [x86] mm: Fix kern_addr_valid() to cope with existing but not present
      entries
    - x86/mce: Avoid infinite loop for copy from user recovery
    - tipc: fix an use-after-free issue in tipc_recvmsg
    - net: remove the unnecessary check in cipso_v4_doi_free
    - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
    - net/l2tp: Fix reference count leak in l2tp_udp_recv_core
    - r6040: Restore MDIO clock frequency after MAC reset
    - tipc: increase timeout in tipc_sk_enqueue()
    - [arm64] drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused
    - rtc: cmos: Disable irq around direct invocation of cmos_interrupt()
    - [x86] drm/i915/dp: return proper DPRX link training result
    - net/mlx5: FWTrace, cancel work on alloc pd error flow
    - net/mlx5: Fix potential sleeping in atomic context
    - net: stmmac: fix system hang caused by eee_ctrl_timer during
      suspend/resume
    - igc: fix tunnel offloading
    - nvme-tcp: fix io_work priority inversion
    - [powerpc*] 64s: system call scv tabort fix for corrupt irq soft-mask state
    - events: Reuse value read using READ_ONCE instead of re-reading it
    - vhost_net: fix OoB on sendmsg() failure.
    - net/af_unix: fix a data-race in unix_dgram_poll
    - [arm64,armhf] net: dsa: destroy the phylink instance on any error in
      dsa_slave_phy_setup
    - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
    - qed: Handle management FW error
    - udp_tunnel: Fix udp_tunnel_nic work-queue type
    - dt-bindings: arm: Fix Toradex compatible typo
    - [powerpc*] KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
      changing registers
    - [powerpc*] 64s: system call rfscv workaround for TM bugs
    - [powerpc*] mce: Fix access error in mce handler
    - [s390x] pci_mmio: fully validate the VMA before calling follow_pte()
    - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem()
    - [arm64] net: hns3: pad the short tunnel frame before sending to hardware
    - [arm64] net: hns3: change affinity_mask to numa node range
    - [arm64] net: hns3: disable mac in flr process
    - [arm64] net: hns3: fix the timing issue of VF clearing interrupt sources
    - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP
    - [x86] Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from
      uio_hv_generic driver
    - net/mlx5e: Fix mutual exclusion between CQE compression and HW TS
    - ice: Correctly deal with PFs that do not support RDMA
    - [arm64] net: hns3: fix the exception when query imp info
    - nvme: avoid race in shutdown namespace removal
    - blkcg: fix memory leak in blk_iolatency_init
    - [arm64,armhf] net: dsa: flush switchdev workqueue before tearing down
      CPU/DSA ports
    - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
    - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
    - fuse: fix use after free in fuse_read_interrupt()
    - [arm64,armhf] PCI: tegra: Fix OF node reference leak
    - [armhf] mfd: Don't use irq_create_mapping() to resolve a mapping
    - [riscv64] fix the global name pfn_base confliction error
    - [arm64] KVM: Make hyp_panic() more robust when protected mode is enabled
    - tracing/probes: Reject events which have the same name of existing one
    - PCI: Add ACS quirks for Cavium multi-function devices
    - watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if
      appropriate
    - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
    - flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common()
    - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
    - block, bfq: honor already-setup queue merges
    - [i386] PCI: ibmphp: Fix double unmap of io_mem
    - loop: reduce the loop_ctl_mutex scope
    - ethtool: Fix an error code in cxgb2.c
    - net: phylink: add suspend/resume support
    - mfd: axp20x: Update AXP288 volatile ranges
    - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges'
    - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
    - [arm64] KVM: Restrict IPA size to maximum 48 bits on 4K and 16K page size
    - PCI: Fix pci_dev_str_match_path() alloc while atomic bug
    - mtd: mtdconcat: Judge callback existence based on the master
    - mtd: mtdconcat: Check _read, _write callbacks existence before assignment
    - [arm64] KVM: Fix read-side race on updates to vcpu reset state
    - [arm64] KVM: Handle PSCI resets before userspace touches vCPU state
    - PCI/PTM: Remove error message at boot
    - watchdog: Fix NULL pointer dereference when releasing cdev
    - mtd: rawnand: cafe: Fix a resource leak in the error handling path of
      'cafe_nand_probe()'
    - [arm64] gpio: mpc8xxx: Fix a resources leak in the error handling path of
      'mpc8xxx_probe()'
    - [arm64] gpio: mpc8xxx: Fix a potential double iounmap call in
      'mpc8xxx_probe()'
    - [arm64] gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code
      and avoid a leak
    - io_uring: retry in case of short read on block device
    - mptcp: fix possible divide by zero
    - net: hso: add failure handler for add_net_device
    - [armhf] net: dsa: b53: Fix calculating number of switch ports
    - [armhf] net: dsa: b53: Set correct number of ports in the DSA struct
    - mptcp: Only send extra TCP acks in eligible socket states
    - netfilter: socket: icmp6: fix use-after-scope
    - fq_codel: reject silly quantum parameters
    - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
    - iwlwifi: move get pnvm file name to a separate function
    - iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
    - ip_gre: validate csum_start only on pull
    - [armhf] net: dsa: b53: Fix IMP port setup on BCM5301x
    - bnxt_en: fix stored FW_PSID version masks
    - bnxt_en: Fix asic.rev in devlink dev info command
    - bnxt_en: Fix possible unintended driver initiated error recovery
    - ip6_gre: Revert "ip6_gre: add validation for csum_start"
    - mfd: lpc_sch: Rename GPIOBASE to prevent build error
    - cxgb3: fix oops on module removal
    - bnxt_en: Fix error recovery regression
    - [armhf] net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports()
    - [s390x] bpf: Fix optimizing out zero-extensions
    - [s390x] bpf: Fix 64-bit subtraction of the -0x80000000 constant
    - [s390x] bpf: Fix branch shortening during codegen pass
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.8
    - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
    - [arm64] PCI: aardvark: Fix reporting CRS value
    - console: consume APC, DM, DCS
    - [x86] staging: rtl8192u: Fix bitwise vs logical operator in
      TranslateRxSignalStuff819xUsb()
    - coredump: fix memleak in dump_vma_snapshot()
    - [arm64] RDMA/hns: Enable stash feature of HIP09
    - RDMA/mlx5: Fix xlt_chunk_align calculation
    - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
    - staging: rtl8723bs: fix wpa_set_auth_algs() function
    - [armhf] thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
    - 9p/trans_virtio: Remove sysfs file on probe failure
    - prctl: allow to setup brk for et_dyn executables
    - nilfs2: use refcount_dec_and_lock() to fix potential UAF
    - profiling: fix shift-out-of-bounds bugs
    - PM: sleep: core: Avoid setting power.must_resume to false
    - ceph: cancel delayed work instead of flushing on mdsc teardown
    - platform/chrome: sensorhub: Add trace events for sample
    - platform/chrome: cros_ec_trace: Fix format warnings
    - [s390x] entry: make oklabel within CHKSTG macro local
    - SUNRPC: don't pause on incomplete allocation
    - init: move usermodehelper_enable() to populate_rootfs()
    - thermal/core: Fix thermal_cooling_device_register() prototype
    - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
    - [amd64] iommu/amd: Relocate GAMSup check to early_enable_iommus
    - [amd64] iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
    - [amd64] iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
    - [arm64] mm: limit linear region to 51 bits for KVM in nVHE mode
    - drm/ttm: Fix a deadlock if the target BO is not idle during swap
    - of: property: Disable fw_devlink DT support for X86
    - [riscv64] dts: microchip: mpfs-icicle: Fix serial console
    - [arm64,armhf] ASoC: audio-graph: respawn Platform Support
    - [x86] ACPI: PM: s2idle: Run both AMD and Microsoft methods if both are
      supported
    - ceph: fix memory leak on decode error in ceph_handle_caps
    - ceph: request Fw caps before updating the mtime in ceph_write_iter
    - ceph: remove the capsnaps when removing caps
    - ceph: lockdep annotations for try_nonblocking_invalidate
    - [s390x] unwind: use current_frame_address() to unwind current task
    - btrfs: update the bdev time directly when closing
    - btrfs: delay blkdev_put until after the device remove
    - btrfs: fix lockdep warning while mounting sprout fs
    - nilfs2: fix memory leak in nilfs_sysfs_create_device_group
    - nilfs2: fix NULL pointer in nilfs_##name##_attr_release
    - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
    - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
    - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
    - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
    - drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
    - drm/amdgpu: fix fdinfo race with process exit
    - [arm64,armhf] pwm: rockchip: Don't modify HW state in .remove() callback
    - [armhf] pwm: stm32-lp: Don't modify HW state in .remove() callback
    - nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
    - block: genhd: don't call blkdev_show() with major_names_lock held
    - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
    - blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues
    - sched/idle: Make the idle timer expire in hard interrupt context
    - cifs: properly invalidate cached root handle when closing it
    - io_uring: fix off-by-one in BUILD_BUG_ON check of __REQ_F_LAST_BIT
    - selinux,smack: fix subjective/objective credential use mixups
    - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.9
    - mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
    - ocfs2: drop acl cache for directories too
    - mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
    - mm: fix uninitialized use in overcommit_policy_handler
    - usb: gadget: u_audio: EP-OUT bInterval in fback frequency
    - [arm*] usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
    - [arm*] usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
    - [armhf] usb: musb: tusb6010: uninitialized data in
      tusb_fifo_write_unaligned()
    - cifs: Not to defer close on file when lock is set
    - cifs: Fix soft lockup during fsstress
    - cifs: fix incorrect check for null pointer in header_assemble
    - [xen] x86: fix PV trap handling on secondary processors
    - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
    - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
    - USB: cdc-acm: fix minor-number release
    - [arm*] binder: make sure fd closes complete
    - [arm*] binder: fix freeze race
    - [arm64] usb: isp1760: do not sleep in field register poll
    - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
    - [arm64,armhf] usb: dwc3: core: balance phy init and exit
    - usb: core: hcd: Add support for deferring roothub registration
    - USB: serial: mos7840: remove duplicated 0xac24 device ID
    - USB: serial: option: add Telit LN920 compositions
    - USB: serial: option: remove duplicate USB device ID
    - USB: serial: option: add device id for Foxconn T99W265
    - [powerpc*] misc: genwqe: Fixes DMA mask setting
    - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
    - erofs: fix up erofs_lookup tracepoint
    - nexthop: Fix division by zero while replacing a resilient group
    - btrfs: prevent __btrfs_dump_space_info() to underflow its free space
    - xhci: Set HCD flag to defer primary roothub registration
    - [arm64] serial: mvebu-uart: fix driver's tx_empty callback
    - scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
    - net: hso: fix muxed tty registration
    - [amd64] platform/x86: amd-pmc: Increase the response register timeout
    - [arm64] Restore forced disabling of KPTI on ThunderX
    - [arm64] Mitigate MTE issues with str{n}cmp()
    - [x86] comedi: Fix memory leak in compat_insnlist()
    - afs: Fix page leak
    - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation
    - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
    - afs: Fix updating of i_blocks on file/dir extension
    - virtio-net: fix pages leaking when building skb in big mode
    - [arm64] enetc: Fix illegal access when reading affinity_hint
    - [arm64] enetc: Fix uninitialized struct dim_sample field usage
    - [arm64,armhf] net: dsa: tear down devlink port regions when tearing down
      the devlink port on error
    - napi: fix race inside napi_enable
    - bnxt_en: Fix TX timeout when TX ring size is set to the smallest
    - [arm64] net: hns3: fix change RSS 'hfunc' ineffective issue
    - [arm64] net: hns3: fix inconsistent vf id print
    - [arm64] net: hns3: fix misuse vf id and vport id in some logs
    - [arm64] net: hns3: check queue id range before using
    - [arm64] net: hns3: check vlan id before using it
    - [arm64] net: hns3: fix a return value error in hclge_get_reset_status()
    - net/smc: add missing error check in smc_clc_prfx_set()
    - net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
    - [arm64,armhf] net: dsa: fix dsa_tree_setup error path
    - [arm64,armhf] net: dsa: don't allocate the slave_mii_bus using devres
    - spi: Revert modalias changes
    - [s390x] qeth: fix NULL deref in qeth_clear_working_pool_list()
    - gpiolib: acpi: Make set-debounce-timeout failures non fatal
    - qed: rdma - don't wait for resources under hw error recovery flow
    - mptcp: ensure tx skbs always have the MPTCP ext
    - nexthop: Fix memory leaks in nexthop notification chain listeners
    - [arm64] net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
      enabled
    - net/mlx4_en: Don't allow aRFS for encapsulated packets
    - atlantic: Fix issue in the pm resume flow.
    - scsi: iscsi: Adjust iface sysfs attr detection
    - scsi: target: Fix the pgr/alua_support_store functions
    - [x86] tty: synclink_gt: rename a conflicting function name
    - [x86] fault: Fix wrong signal when vsyscall fails with pkey
    - nvme-tcp: fix incorrect h2cdata pdu offset accounting
    - nvme: keep ctrl->namespaces ordered
    - thermal/core: Potential buffer overflow in
      thermal_build_list_of_policies()
    - cifs: fix a sign extension bug
    - scsi: sd_zbc: Support disks with more than 2**32 logical blocks
    - scsi: ufs: Revert "Utilize Transfer Request List Completion Notification
      Register"
    - scsi: ufs: Retry aborted SCSI commands instead of completing these
      successfully
    - scsi: ufs: core: Unbreak the reset handler
    - scsi: qla2xxx: Restore initiator in dual mode
    - scsi: lpfc: Use correct scnprintf() limit
    - [arm64,armhf] irqchip/gic-v3-its: Fix potential VPE leak on error
    - md: fix a lock order reversal in md_alloc
    - [x86] asm: Fix SETZ size enqcmds() build failure
    - io_uring: fix race between poll completion and cancel_hash insertion
    - io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
    - io_uring: put provided buffer meta data under memcg accounting
    - io_uring: don't punt files update to io-wq unconditionally
    - blktrace: Fix uaf in blk_trace access after removing by sysfs
    - net: phylink: Update SFP selected interface on advertising changes
    - net: stmmac: allow CSR clock of 300MHz
    - blk-mq: avoid to iterate over stale request
    - ipv6: delay fib6_sernum increase in fib6_add
    - [x86] cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
    - bpf: Add oversize check before call kvcalloc()
    - xen/balloon: use a kernel thread instead a workqueue
    - nvme-multipath: fix ANA state updates when a namespace is not present
    - nvme-rdma: destroy cm id before destroy qp to avoid use after free
    - amd/display: downgrade validation failure log level
    - drm/ttm: fix type mismatch error on sparc64
    - block: check if a profile is actually registered in
      blk_integrity_unregister
    - block: flush the integrity workqueue in blk_integrity_unregister
    - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
    - compiler.h: Introduce absolute_pointer macro
    - qnx4: avoid stringop-overread errors
    - drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
    - drm/amd/display: Link training retry fix for abort case
    - amd/display: enable panel orientation quirks
    - [arm64] Mark __stack_chk_guard as __ro_after_init
    - net: 6pack: Fix tx timeout and slot time
    - [arm64] spi: Fix tegra20 build with CONFIG_PM=n
    - [arm*] Revert drm/vc4 hdmi runtime PM changes
    - [x86] setup: Call early_reserve_memory() earlier
    - [x86] thermal/drivers/int340x: Do not set a wrong tcc offset on resume
    - [armhf] irqchip/armada-370-xp: Fix ack/eoi breakage
    - [arm64] add MTE supported check to thread switching and syscall entry/exit
    - USB: serial: cp210x: fix dropped characters with CP2102
    - software node: balance refcount for managed software nodes
    - xen/balloon: fix balloon kthread freezing
    - qnx4: work around gcc false positive warning bug
    - nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show()
    - usb: gadget: f_uac2: Add missing companion descriptor for feedback EP
    - usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 2
  * ext4: limit the number of blocks in one ADD_RANGE TLV (Closes: #995425)

linux (5.14.6-2parrot1) lts-updates; urgency=medium
.
  * Import new Debian release.
.
linux (5.14.6-2) unstable; urgency=medium
.
  * io_uring: ensure symmetry in handling iter types in loop_rw_iter()
    (CVE-2021-41073)
.
linux (5.14.6-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.4
    - locking/mutex: Fix HANDOFF condition
    - regmap: fix the offset of register error log
    - sched/deadline: Fix reset_on_fork reporting of DL tasks
    - power: supply: axp288_fuel_gauge: Report register-address on readb /
      writeb errors
    - sched/deadline: Fix missing clock update in migrate_task_rq_dl()
    - rcu/tree: Handle VM stoppage in stall detection
    - [x86] EDAC/mce_amd: Do not load edac_mce_amd module on guests
    - posix-cpu-timers: Force next expiration recalc after itimer reset
    - hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
    - hrtimer: Ensure timerfd notification for HIGHRES=n
    - udf: Check LVID earlier
    - udf: Fix iocharset=utf8 mount option
    - isofs: joliet: Fix iocharset=utf8 mount option
    - bcache: add proper error unwinding in bcache_device_init
    - nbd: add the check to prevent overflow in __nbd_ioctl()
    - blk-throtl: optimize IOPS throttle for large IO scenarios
    - nvme-tcp: don't update queue count when failing to set io queues
    - nvme-rdma: don't update queue count when failing to set io queues
    - nvmet: pass back cntlid on successful completion
    - [s390x] cio: add dev_busid sysfs entry for each subchannel
    - [s390x] zcrypt: fix wrong offset index for APKA master key valid state
    - libata: fix ata_host_start()
    - sched/topology: Skip updating masks for non-online nodes
    - [x86] crypto: qat - do not ignore errors from enable_vf2pf_comms()
    - [x86] crypto: qat - handle both source of interrupt in VF ISR
    - [x86] crypto: qat - fix reuse of completion variable
    - [x86] crypto: qat - fix naming for init/shutdown VF to PF notifications
    - [x86] crypto: qat - do not export adf_iov_putmsg()
    - crypto: tcrypt - Fix missing return value check
    - fcntl: fix potential deadlocks for &fown_struct.lock
    - fcntl: fix potential deadlock for &fasync_struct.fa_lock
    - udf_get_extendedattr() had no boundary checks.
    - io-wq: remove GFP_ATOMIC allocation off schedule out path
    - [s390x] pci: fix misleading rc in clp_set_pci_fn()
    - [s390x] debug: keep debug data on resize
    - [s390x] debug: fix debug area life cycle
    - [s390x] ap: fix state machine hang after failure to enable irq
    - [s390x] smp: enable DAT before CPU restart callback is called
    - sched/debug: Don't update sched_domain debug directories before
      sched_debug_init()
    - [arm64] power: supply: cw2015: use dev_err_probe to allow deferred probe
    - [x86] crypto: x86/aes-ni - add missing error checks in XTS code
    - sched/numa: Fix is_core_idle()
    - sched: Fix UCLAMP_FLAG_IDLE setting
    - rcu: Fix to include first blocked task in stall warning
    - rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
    - block: return ELEVATOR_DISCARD_MERGE if possible
    - [arm64] spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
    - [mips64el,mipsel] irqchip/loongson-pch-pic: Improve edge triggered
      interrupt support
    - lib/mpi: use kcalloc in mpi_resize
    - nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
    - block: nbd: add sanity check for first_minor
    - [arm64,armhf] irqchip/gic-v3: Fix priority comparison when non-secure
      priorities are used
    - [x86] crypto: qat - use proper type for vf_mask
    - [powerpc*] tpm: ibmvtpm: Avoid error message when process gets signal
      while waiting
    - [x86] mce: Defer processing of early errors
    - blk-crypto: fix check for too-large dun_bytes
    - [arm64] regulator: vctrl: Use locked regulator_get_voltage in probe path
    - [arm64] regulator: vctrl: Avoid lockdep warning in enable/disable ops
    - [arm64,armhf] drm/panfrost: Fix missing clk_disable_unprepare() on error
      in panfrost_clk_init()
    - [x86] drm/gma500: Fix end of loop tests for list_for_each_entry
    - drm/of: free the right object
    - bpf: Fix a typo of reuseport map in bpf.h.
    - bpf: Fix potential memleak and UAF in the verifier.
    - drm/of: free the iterator object on failure
    - [amd64,arm64] gve: fix the wrong AdminQ buffer overflow check
    - [armhf] dts: everest: Add phase corrections for eMMC
    - i40e: improve locking of mac_filter_hash
    - gfs2: Fix memory leak of object lsi on error return path
    - firmware: fix theoretical UAF race with firmware cache and resume
    - driver core: Fix error return code in really_probe()
    - media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
    - media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
    - media: dvb-usb: Fix error handling in dvb_usb_i2c_init
    - net: usb: asix: ax88772: add missing stop
    - media: go7007: fix memory leak in go7007_usb_probe
    - media: go7007: remove redundant initialization
    - [armhf] media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
    - Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
    - Bluetooth: btusb: Fix a unspported condition to set available debug
      features
    - [x86] drm/amdgpu/acp: Make PM domain really work
    - tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
    - [armhf] dts: meson8b: odroidc1: Fix the pwm regulator supply properties
    - [armhf] dts: meson8b: mxq: Fix the pwm regulator supply properties
    - [armhf] dts: meson8b: ec100: Fix the pwm regulator supply properties
    - net/mlx5e: Prohibit inner indir TIRs in IPoIB
    - net/mlx5e: Block LRO if firmware asks for tunneled LRO
    - cgroup/cpuset: Fix a partition bug with hotplug
    - net: cipso: fix warnings in netlbl_cipsov4_add_std
    - Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
    - drm/amd/pm: Fix a bug in semaphore double-lock
    - net/mlx5: Fix missing return value in
      mlx5_devlink_eswitch_inline_mode_set()
    - leds: lt3593: Put fwnode in any case during ->probe()
    - leds: trigger: audio: Add an activate callback to ensure the initial
      brightness is set
    - media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
    - [armhf] media: omap3isp: Fix missing unlock in
      isp_subdev_notifier_complete()
    - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
    - PCI: PM: Enable PME if it can be signaled from D3cold
    - [arm64] net: dsa: build tag_8021q.c as part of DSA core
    - debugfs: Return error during {full/open}_proxy_open() on rmmod
    - Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
    - [arm64,armhf] net: dsa: stop syncing the bridge mcast_router attribute at
      join time
    - [arm64,armhf] net: dsa: don't disable multicast flooding to the CPU even
      without an IGMP querier
    - PM: EM: Increase energy calculation precision
    - [arm64] drm/msm: Fix error return code in msm_drm_init()
    - [arm64] drm/msm/mdp4: refactor HW revision detection into
      read_mdp_hw_revision
    - [arm64] drm/msm/mdp4: move HW revision detection to earlier phase
    - [arm64] drm/msm/dp: update is_connected status base on sink count at
      dp_pm_resume()
    - [arm64] drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary
      LMs
    - cgroup/cpuset: Miscellaneous code cleanup
    - cgroup/cpuset: Fix violation of cpuset locking rule
    - [x86] ASoC: Intel: Fix platform ID matching
    - Bluetooth: fix repeated calls to sco_sock_kill
    - [arm64] drm/msm/dsi: Fix some reference counted resource leaks
    - [arm64] drm/msm/dp: replug event is converted into an unplug followed by
      an plug events
    - net/mlx5: Fix unpublish devlink parameters
    - [x86] ASoC: rt5682: Properly turn off regulators if wrong device ID
    - [arm64,armhf] usb: dwc3: meson-g12a: add IRQ check
    - [arm64,armhf] usb: dwc3: qcom: add IRQ check
    - mac80211: remove unnecessary NULL check in ieee80211_register_hw()
    - [armhf] usb: phy: twl6030: add IRQ checks
    - devlink: Clear whole devlink_flash_notify struct
    - net: stmmac: fix INTR TBU status affecting irq count statistic
    - Bluetooth: Move shutdown callback before flushing tx and rx queue
    - PM: cpu: Make notifier chain use a raw_spinlock_t
    - mac80211: Fix insufficient headroom issue for AMSDU
    - locking/local_lock: Add missing owner initialization
    - lockd: Fix invalid lockowner cast after vfs_test_lock
    - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency()
    - nfsd4: Fix forced-expiry locking
    - [arm64] dts: marvell: armada-37xx: Extend PCIe MEM space
    - [arm*] firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
    - mm/swap: consider max pages in iomap_swapfile_add_extent
    - Bluetooth: add timeout sanity check to hci_inquiry
    - [armhf] i2c: s3c2410: fix IRQ check
    - gfs2: init system threads before freeze lock
    - rsi: fix error code in rsi_load_9116_firmware()
    - rsi: fix an error code in rsi_probe()
    - [x86] ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
    - [x86] ASoC: Intel: Skylake: Fix module resource and format selection
    - mmc: sdhci: Fix issue with uninitialized dma_slave_config
    - [arm64,armhf] mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
    - bpf: Fix possible out of bound write in narrow load handling
    - [x86] hv_utils: Set the maximum packet size for VSS driver to the length
      of the receive buffer
    - CIFS: Fix a potencially linear read overflow
    - [arm64] i2c: xlp9xx: fix main IRQ check
    - [arm*] usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
    - [arm64] tty: serial: fsl_lpuart: fix the wrong mapbase value
    - iwlwifi: skip first element in the WTAS ACPI table
    - net/mlx5: Lag, fix multipath lag activation
    - net/mlx5: Remove all auxiliary devices at the unregister event
    - net/mlx5e: Fix possible use-after-free deleting fdb rule
    - net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
    - net/mlx5e: Use correct eswitch for stack devices with lag
    - [x86] misc/pvpanic: fix set driver data
    - ice: fix Tx queue iteration for Tx timestamp enablement
    - ice: add lock around Tx timestamp tracker flush
    - ice: restart periodic outputs around time changes
    - ice: Only lock to update netdev dev_addr
    - net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the
      driver probe list
    - ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
    - ALSA: usb-audio: Add lowlatency module option
    - atlantic: Fix driver resume flow.
    - bcma: Fix memory leak for internally-handled cores
    - brcmfmac: pcie: fix oops on failure to resume and reprobe
    - ipv6: make exception cache less predictible
    - ipv4: make exception cache less predictible
    - net: qrtr: make checks in qrtr_endpoint_post() stricter
    - sch_htb: Fix inconsistency when leaf qdisc creation fails
    - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
    - ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
    - [x86] ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
    - iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
    - f2fs: guarantee to write dirty data when enabling checkpoint back
    - time: Handle negative seconds correctly in timespec64_to_ns()
    - io_uring: limit fixed table size by RLIMIT_NOFILE
    - io_uring: IORING_OP_WRITE needs hash_reg_file set
    - io_uring: io_uring_complete() trace should take an integer
    - io_uring: fail links of cancelled timeouts
    - bio: fix page leak bio_add_hw_page failure
    - raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
    - cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED
    - smb3: fix posix extensions mount option
    - tty: Fix data race between tiocsti() and flush_to_ldisc()
    - [x86] perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX
    - [x86] Revert "KVM: x86: mmu: Add guest physical address check in
      translate_gpa()"
    - [s390x] KVM: index kvm->arch.idle_mask by vcpu_idx
    - [x86] KVM: x86: Update vCPU's hv_clock before back to guest when
      tsc_offset is adjusted
    - [x86] KVM: x86: clamp host mapping level to max_level in
      kvm_mmu_max_mapping_level
    - [x86] KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage
      stats
    - [x86] KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
    - [x86] KVM: nVMX: Unconditionally clear nested.pi_pending on nested
      VM-Enter
    - [arm64] KVM: arm64: Unregister HYP sections from kmemleak in protected
      mode
    - [arm64] KVM: arm64: vgic: Resample HW pending state on deactivation
    - io-wq: check max_worker limits if a worker transitions bound state
    - md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard
    - fuse: truncate pagecache on atomic_o_trunc
    - fuse: flush extending writes
    - fuse: wait for writepages in syncfs
    - fbmem: don't allow too huge resolutions
    - [amd64] ACPI: PRM: Find PRMT table before parsing it
    - RDMA/mlx5: Fix number of allocated XLT entries
    - backlight: pwm_bl: Improve bootloader/kernel device handover
    - [armel] clk: kirkwood: Fix a clocking boot regression
    - devlink: Break parameter notification sequence to be before/after
      unload/load driver
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.5
    - Revert "posix-cpu-timers: Force next expiration recalc after itimer reset"
    - Revert "time: Handle negative seconds correctly in timespec64_to_ns()"
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.6
    - io_uring: place fixed tables under memcg limits
    - io_uring: add ->splice_fd_in checks
    - io_uring: fix io_try_cancel_userdata race for iowq
    - io-wq: fix wakeup race when adding new work
    - io-wq: fix race between adding work and activating a free worker
    - btrfs: use delalloc_bytes to determine flush amount for shrink_delalloc
    - btrfs: wake up async_delalloc_pages waiters after submit
    - btrfs: wait on async extents when flushing delalloc
    - btrfs: reduce the preemptive flushing threshold to 90%
    - btrfs: do not do preemptive flushing if the majority is global rsv
    - btrfs: zoned: fix block group alloc_offset calculation
    - btrfs: zoned: suppress reclaim error message on EAGAIN
    - btrfs: fix upper limit for max_inline for page size 64K
    - btrfs: reset replace target device to allocation state on close
    - btrfs: zoned: fix double counting of split ordered extent
    - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
    - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
    - [powerpc*] perf/hv-gpci: Fix counter value parsing
    - xen: fix setting of max_pfn in shared_info
    - 9p/xen: Fix end of loop tests for list_for_each_entry
    - ceph: fix dereference of null pointer cf
    - Input: elan_i2c - reduce the resume time for controller in Whitebox
    - [armhf] soc: aspeed: lpc-ctrl: Fix boundary check for mmap
    - [armhf] soc: aspeed: p2a-ctrl: Fix boundary check for mmap
    - [arm64] Move .hyp.rodata outside of the _sdata.._edata range
    - [arm64] mm: Fix TLBI vs ASID rollover
    - [arm64] head: avoid over-mapping in map_memory
    - [arm64] Do not trap PMSNEVFR_EL1
    - iio: ltc2983: fix device probe
    - [arm64] wcn36xx: Ensure finish scan is not requested before start scan
    - block: bfq: fix bfq_set_next_ioprio_data()
    - [x86] power: supply: max17042: handle fails of reading status register
    - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
    - [x86] crypto: ccp - shutdown SEV firmware on kexec
    - [x86] VMCI: fix NULL pointer dereference when unmapping queue pair
    - media: uvc: don't do DMA on stack
    - media: rc-loopback: return number of emitters rather than error
    - nvmem: core: fix error handling while validating keepout regions
    - [s390x] qdio: fix roll-back after timeout on ESTABLISH ccw
    - [s390x] qdio: cancel the ESTABLISH ccw after timeout
    - [armhf] Revert "dmaengine: imx-sdma: refine to load context only once"
    - [armhf] dmaengine: imx-sdma: remove duplicated sdma_load_context
    - [x86] watchdog: iTCO_wdt: Fix detection of SMI-off case
    - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
    - sched: Prevent balance_push() on remote runqueues
    - f2fs: let's keep writing IOs on SBI_NEED_FSCK
    - f2fs: fix to do sanity check for sb/cp fields correctly
    - PCI/portdrv: Enable Bandwidth Notification only if port supports it
    - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
    - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
    - [arm64] PCI: xilinx-nwl: Enable the clock through CCF
    - [arm64] PCI: aardvark: Configure PCIe resources from 'ranges' DT property
    - [arm64] PCI: aardvark: Fix checking for PIO status
    - [arm64] PCI: aardvark: Increase polling delay to 1.5s while waiting for
      PIO response
    - [arm64] PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
    - HID: input: do not report stylus battery state as "full"
    - f2fs: quota: fix potential deadlock
    - [arm64] pinctrl: armada-37xx: Correct PWM pins definitions
    - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
    - [arm64,armhf] clk: rockchip: drop GRF dependency for rk3328/rk3036 pll
      types
    - [amd64] IB/hfi1: Adjust pkey entry in index 0
    - RDMA/iwcm: Release resources if iw_cm module initialization fails
    - docs: Fix infiniband uverbs minor number
    - scsi: BusLogic: Use %X for u32 sized integer rather than %lX
    - [armhf] pinctrl: samsung: Fix pinctrl bank pin count
    - f2fs: do not submit NEW_ADDR to read node block
    - f2fs: turn back remapped address in compressed page endio
    - f2fs: fix wrong checkpoint_changed value in f2fs_remount()
    - scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
    - scsi: ufs: Use DECLARE_COMPLETION_ONSTACK() where appropriate
    - scsi: ufs: Fix the SCSI abort handler
    - [powerpc*] cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
    - [powerpc*] stacktrace: Include linux/delay.h
    - [arm64] RDMA/hns: Don't overwrite supplied QP attributes
    - RDMA/mlx5: Delete not-available udata check
    - [powerpc*] cpuidle: pseries: Mark pseries_idle_proble() as __init
    - f2fs: reduce the scope of setting fsck tag when de->name_len is zero
    - xprtrdma: Put rpcrdma_reps before waking the tear-down completion
    - NFSv4/pNFS: Fix a layoutget livelock loop
    - NFSv4/pNFS: Always allow update of a zero valued layout barrier
    - NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
    - SUNRPC: Fix potential memory corruption
    - SUNRPC/xprtrdma: Fix reconnection locking
    - sunrpc: Fix return value of get_srcport()
    - scsi: ufs: Fix unsigned int compared with less than zero
    - scsi: ufshcd: Fix device links when BOOT WLUN fails to probe
    - [arm64,armhf] pinctrl: single: Fix error return code in
      pcs_parse_bits_in_pinctrl_entry()
    - [powerpc*] numa: Consider the max NUMA node for migratable LPAR
    - scsi: smartpqi: Fix an error code in pqi_get_raid_map()
    - scsi: qedi: Fix error codes in qedi_alloc_global_queues()
    - scsi: qedf: Fix error codes in qedf_alloc_global_queues()
    - f2fs: fix to keep compatibility of fault injection interface
    - iommu/vt-d: Update the virtual command related registers
    - [arm64] RDMA/hns: Fix return in hns_roce_rereg_user_mr()
    - [amd64] HID: amd_sfh: Fix period data field to enable sensor
    - HID: i2c-hid: Fix Elan touchpad regression
    - HID: thrustmaster: clean up Makefile and adapt quirks
    - [arm64] RDMA/hns: Ownerbit mode add control field
    - [arm64] clk: imx8mm: use correct mux type for clkout path
    - [arm64,armhf] clk: imx8m: fix clock tree update of TF-A managed clocks
    - [powerpc*] KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
    - [powerpc*] KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when
      guest SPRs are live
    - [powerpc*] powerpc/perf: Fix the check for SIAR value
    - [arm64] RDMA/hns: Fix incorrect lsn field
    - [arm64] RDMA/hns: Bugfix for data type of dip_idx
    - [arm64] RDMA/hns: Bugfix for the missing assignment for dip_idx
    - [arm64] RDMA/hns: Bugfix for incorrect association between dip_idx and
      dgid
    - [x86] platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from
      run_smbios_call
    - [powerpc*] smp: Fix a crash while booting kvm guest with nr_cpus=2
    - [powerpc*] smp: Update cpu_core_map on all PowerPc systems
    - [arm64] RDMA/hns: Fix query destination qpn
    - [arm64] RDMA/hns: Fix QP's resp incomplete assignment
    - fscache: Fix cookie key hashing
    - [powerpc*] KVM: PPC: Fix clearing never mapped TCEs in realmode
    - f2fs: fix to account missing .skipped_gc_rwsem
    - f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
    - f2fs: fix to unmap pages from userspace process in punch_hole()
    - f2fs: deallocate compressed pages when error happens
    - f2fs: should put a page beyond EOF when preparing a write
    - [mips64el,mipsel] Malta: fix alignment of the devicetree buffer
    - userfaultfd: prevent concurrent API initialization
    - [x86] drm/vmwgfx: Fix subresource updates with new contexts
    - [x86] drm/vmwgfx: Fix some static checker warnings
    - [arm*] drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
    - drm/ttm: Fix multihop assert on eviction.
    - [armhf] drm/omap: Follow implicit fencing in prepare_fb
    - drm/amdgpu: Fix amdgpu_ras_eeprom_init()
    - drm/amdgpu: Fix koops when accessing RAS EEPROM
    - [arm*] drm: vc4: Fix pixel-wrap issue with DVP teardown
    - dma-buf: fix dma_resv_test_signaled test_all handling v2
    - drm/panel: Fix up DT bindings for Samsung lms397kf04
    - [armhf] ASoC: ti: davinci-mcasp: Fix DIT mode support
    - media: dib8000: rewrite the init prbs logic
    - [x86] hyperv: fix for unwanted manipulation of sched_clock when TSC marked
      unstable
    - PCI: Use pci_update_current_state() in pci_enable_device_flags()
    - tipc: keep the skb in rcv queue until the whole data is read
    - net: phy: Fix data type in DP83822 dp8382x_disable_wol()
    - iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
    - iavf: do not override the adapter state in the watchdog task
    - iavf: fix locking of critical sections
    - video: fbdev: kyro: fix a DoS bug by restricting user input
    - drm/ast: Disable fast reset after DRAM initial
    - netlink: Deal with ESRCH error in nlmsg_notify()
    - [arm64] dts: qcom: Fix usb entries for SA8155p adp board
    - drm: avoid blocking in drm_clients_info's rcu section
    - drm: serialize drm_file.master with a new spinlock
    - drm: protect drm_master pointers in drm_lease.c
    - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
    - igc: Check if num of q_vectors is smaller than max before array access
    - usb: gadget: u_ether: fix a potential null pointer dereference
    - [armhf] USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
    - usb: gadget: composite: Allow bMaxPower=0 if self-powered
    - tty: serial: jsm: hold port lock when reporting modem line changes
    - [arm64] bus: fsl-mc: fix arg in call to dprc_scan_objects()
    - [arm64] bus: fsl-mc: fix mmio base address for child DPRCs
    - [x86] misc/pvpanic-pci: Allow automatic loading
    - nfp: fix return statement in nfp_net_parse_meta()
    - ethtool: improve compat ioctl handling
    - drm/amdgpu: Fix a printing message
    - [arm64] dts: allwinner: h6: tanix-tx6: Fix regulator node names
    - video: fbdev: kyro: Error out if 'pixclock' equals zero
    - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
    - flow_dissector: Fix out-of-bounds warnings
    - [s390x] jump_label: print real address in a case of a jump label bug
    - [s390x] make PCI mio support a machine flag
    - serial: 8250: Define RX trigger levels for OxSemi 950 devices
    - serial: 8250_pci: make setup_port() parameters explicitly unsigned
    - vt: keyboard.c: make console an unsigned int
    - Bluetooth: skip invalid hci_sync_conn_complete_evt
    - workqueue: Fix possible memory leaks in wq_numa_init()
    - [arm64] drm/msm/a6xx: Fix llcc configuration for a660 gpu
    - netfilter: nft_compat: use nfnetlink_unicast()
    - bonding: 3ad: fix the concurrency between __bond_release_one() and
      bond_3ad_state_machine_handler()
    - [x86] ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps
      for the matching in-/output
    - Bluetooth: Fix not generating RPA when required
    - [armhf] media: imx: imx7-media-csi: Fix buffer return upon stream start
      failure
    - media: v4l2-dv-timings.c: fix wrong condition in two for-loops
    - gfs2: Fix glock recursion in freeze_go_xmote_bh
    - [arm*] misc: sram: Only map reserved areas in Tegra SYSRAM
    - [armhf] dts: imx53-ppd: Fix ACHC entry
    - [arm64] dts: qcom: sdm660: use reg value for memory node
    - [arm64] nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
    - [arm64] net: ethernet: stmmac: Do not use unreachable() in
      ipq806x_gmac_probe()
    - [arm64] drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
    - [arm64] drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
    - [x86] thunderbolt: Fix port linking by checking all adapters
    - [x86] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
    - staging: rtl8723bs: fix right side of condition
    - Bluetooth: schedule SCO timeouts with delayed_work
    - Bluetooth: avoid circular locks in sco_sock_connect
    - [arm64] drm/msm/dp: reduce link rate if failed at link training 1
    - [arm64] drm/msm/dp: reset aux controller after dp_aux_cmd_fifo_tx()
      failed.
    - [arm64] drm/msm/dp: return correct edid checksum after corrupted edid
      checksum read
    - [arm64] drm/msm/dp: do not end dp link training until video is ready
    - net/mlx5: Fix variable type to match 64bit
    - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable
      access in amdgpu_i2c_router_select_ddc_port()
    - mac80211: Fix monitor MTU limit so that A-MSDUs get through
    - nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
    - nvme: code command_id with a genctr for use-after-free validation
    - Bluetooth: Fix handling of LE Enhanced Connection Complete
    - Bluetooth: Fix race condition in handling NOP command
    - opp: Don't print an error if required-opps is missing
    - [sh4] serial: sh-sci: fix break handling for sysrq
    - iomap: pass writeback errors to the mapping
    - tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
    - locking/rtmutex: Set proper wait context for lockdep
    - rpc: fix gss_svc_init cleanup on failure
    - iavf: use mutexes for locking of critical sections
    - [armhf] hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
    - [x86] staging: rts5208: Fix get_ms_information() heap buffer size
    - net: Fix offloading indirect devices dependency on qdisc order creation
    - gfs2: Don't call dlm after protocol is unmounted
    - [arm64,armhf] usb: chipidea: host: fix port index underflow and UBSAN
      complains
    - lockd: lockd server-side shouldn't set fl_ops
    - [armhf] drm/exynos: Always initialize mapping in exynos_drm_register_dma()
    - rtl8xxxu: Fix the handling of TX A-MPDU aggregation
    - rtw88: use read_poll_timeout instead of fixed sleep
    - rtw88: wow: build wow function only if CONFIG_PM is on
    - rtw88: wow: fix size access error of probe request
    - btrfs: remove racy and unnecessary inode transaction update when using
      no-holes
    - btrfs: tree-log: check btrfs_lookup_data_extent return value
    - soundwire: intel: fix potential race condition during power down
    - [x86] ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
    - [x86] ASoC: Intel: Skylake: Fix passing loadable flag for module
    - of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
    - [arm64] mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for
      ZynqMP
    - [arm64] mmc: sdhci-of-arasan: Check return value of non-void funtions
    - mmc: core: Avoid hogging the CPU while polling for busy in the I/O err
      path
    - mmc: core: Avoid hogging the CPU while polling for busy for mmc ioctls
    - mmc: core: Avoid hogging the CPU while polling for busy after I/O writes
    - mmc: rtsx_pci: Fix long reads when clock is prescaled
    - mmc: core: Return correct emmc response in case of ioctl error
    - cifs: fix wrong release in sess_alloc_buffer() failed path
    - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
      quirk set"
    - [arm64] usb: dwc3: imx8mp: request irq after initializing dwc3
    - [armhf] usb: musb: musb_dsps: request_irq() after initializing musb
    - usbip: give back URBs for unsent unlink requests during cleanup
    - usbip:vhci_hcd USB port can get stuck in the disabled state
    - [arm64,armhf] ASoC: rockchip: i2s: Fix regmap_ops hang
    - [arm64,armhf] ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
    - ASoC: soc-pcm: protect BE dailink state changes in trigger
    - nfs: don't atempt blocking locks on nfs reexports
    - nfsd: fix crash on LOCKT on reexported NFSv3
    - iwlwifi: pcie: free RBs during configure
    - iwlwifi: mvm: Do not use full SSIDs in 6GHz scan
    - iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
    - iwlwifi: mvm: avoid static queue number aliasing
    - iwlwifi: mvm: Fix umac scan request probe parameters
    - iwlwifi: mvm: fix access to BSS elements
    - iwlwifi: fw: correctly limit to monitor dump
    - iwlwifi: mvm: don't schedule the roc_done_wk if it is already running
    - iwlwifi: mvm: Fix scan channel flags settings
    - net/mlx5: DR, fix a potential use-after-free bug
    - net/mlx5: DR, Enable QP retransmission
    - [arm64] usb: isp1760: fix memory pool initialization
    - [arm64] usb: isp1760: fix qtd fill length
    - [arm64] usb: isp1760: write to status and address register
    - [arm64] usb: isp1760: use the right irq status bit
    - [arm64] usb: isp1760: otg control register access
    - parport: remove non-zero check on count
    - [arm64] wcn36xx: Fix missing frame timestamp for beacon/probe-resp
    - ath9k: fix OOB read ar9300_eeprom_restore_internal
    - ath9k: fix sleeping in atomic context
    - net: fix NULL pointer reference in cipso_v4_doi_free
    - fix array-index-out-of-bounds in taprio_change
    - [arm64] net: hns3: clean up a type mismatch warning
    - printk/console: Check consistent sequence number when handling race in
      console_unlock()
    - ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
    - scsi: BusLogic: Fix missing pr_cont() use
    - scsi: qla2xxx: Changes to support kdump kernel
    - scsi: qla2xxx: Sync queue idx with queue_pair_map idx
    - [powerpc*] cpufreq: powernv: Fix init_chip_info initialization in numa=off
    - [s390x] pv: fix the forcing of the swiotlb
    - [s390x] topology: fix topology information when calling cpu hotplug
      notifiers
    - mm: fix panic caused by __page_handle_poison()
    - hugetlb: fix hugetlb cgroup refcounting during vma split
    - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
    - mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
    - mm/hugetlb: initialize hugetlb_usage in mm_init
    - mm,vmscan: fix divide by zero in get_scan_count
    - mm/page_alloc.c: avoid accessing uninitialized pcp page migratetype
    - mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task
    - memcg: enable accounting for pids in nested pid namespaces
    - libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
    - platform/chrome: cros_ec_proto: Send command again when timeout occurs
    - net: stmmac: Fix overall budget calculation for rxtx_napi
    - [x86] drm/mgag200: Select clock in PLL update functions
    - [arm64] drm/msi/mdp4: populate priv->kms in mdp4_kms_init
    - drm/dp_mst: Fix return code on sideband message failure
    - [arm64,armhf] drm/panfrost: Make sure MMU context lifetime is not bound to
      panfrost_priv
    - drm/amdgpu: Fix BUG_ON assert
    - drm/amdgpu: Enable S/G for Yellow Carp
    - drm/amdgpu: Fix a deadlock if previous GEM object allocation fails
    - [arm64] drm/msm/disp/dpu1: add safe lut config in dpu driver
    - drm/ttm: Fix ttm_bo_move_memcpy() for subclassed struct ttm_resource
    - [arm64,armhf] drm/panfrost: Simplify lock_region calculation
    - [arm64,armhf] drm/panfrost: Use u64 for size in lock_region
    - [arm64,armhf] drm/panfrost: Clamp lock region to Bifrost minimum
.
  [ Vincent Blut ]
  * [arm64] drivers/bus/fsl-mc: Enable FSL_MC_UAPI_SUPPORT (Closes: #992988)
  * [arm64] drivers/vfio/fsl-mc: Enable VFIO_FSL_MC as module (Closes: #993000)
  * [arm64] drivers/firmware: Enable ARM_SCPI_PROTOCOL as module
    (Closes: #929528)
  * [arm64] drivers/hwmon: Enable SENSORS_ARM_SCPI as module
  * [arm64] drivers/mailbox: Enable ARM_MHU, PLATFORM_MHU as modules
  * [armhf] drivers/input/misc: Enable INPUT_TPS65218_PWRBUTTON as module
    (Closes: #944518)
.
  [ Heiko Thiery ]
  * [arm64] drivers/regulator: Enable REGULATOR_PCA9450 as module
  * [arm64] drivers/regulator: Enable REGULATOR_PFUZE100 as module
  * [arm64] drivers/pci/controller: Enable PCI_IMX6
.
  [ Salvatore Bonaccorso ]
  * dccp: don't duplicate ccid when cloning dccp sock (CVE-2020-16119)
  * bnx2x: Fix enabling network interfaces without VFs (Closes: #993948)
  * Refresh "kbuild: Make the toolchain variables easily overwritable"
  * Drop "Partially revert "net: socket: implement 64-bit timestamps""
  * Set ABI to 1
  * [mipsel] bpf, mips: Validate conditional branch offsets (CVE-2021-38300)
.
linux (5.14.3-1~exp1) experimental; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.3
    - firmware: dmi: Move product_sku info to the end of the modalias
    - igmp: Add ip_mc_list lock in ip_check_mc_rcu
    - Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables
      ASPM"
    - ALSA: usb-audio: Add registration quirk for JBL Quantum 800
    - Bluetooth: Add additional Bluetooth part for Realtek 8852AE
    - Bluetooth: btusb: Make the CSR clone chip force-suspend workaround more
      generic
    - xhci: fix even more unsafe memory usage in xhci tracing
    - xhci: fix unsafe memory usage in xhci tracing
    - xhci: Fix failure to give back some cached cancelled URBs.
    - [x86] reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
    - PCI: Call Max Payload Size-related fixup quirks early
.
linux (5.14.2-1~exp1) experimental; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.2
    - ext4: fix race writing to an inline_data file while its xattrs are
      changing
    - ext4: fix e2fsprogs checksum failure for mounted filesystem
    - USB: serial: pl2303: fix GL type detection
    - USB: serial: cp210x: fix control-characters error handling
    - USB: serial: cp210x: fix flow-control error handling
    - HID: usbhid: Fix flood of "control queue full" messages
    - HID: usbhid: Fix warning caused by 0-length input reports
    - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup
    - ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC
    - ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
    - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
    - ALSA: usb-audio: Work around for XRUN with low latency playback
    - media: stkwebcam: fix memory leak in stk_camera_probe
.
  [ Vincent Blut ]
  * drivers/media/cec: Enable MEDIA_CEC_RC (Closes: #872650)
  * drivers/hid: Enable various HID drivers as modules (Closes: #988277)
  * [x86] drivers/platform/chrome: Enable CROS_EC as module and set
    CROS_EC_PROTO explicitly
  * [arm64] sound/soc/generic: Enable SND_AUDIO_GRAPH_CARD as module
    (Closes: #987576)
  * drivers/net/wireless/mediatek/mt76/mt7915: Enable MT7915E as module
    (Closes: #993865)
  * drivers/net/wireless/mediatek/mt76/mt7921: Enable MT7921E as module
  * drivers/net/wireless/mediatek/mt76/mt7615: Enable MT7615E, MT7663U as
    modules
.
  [ Salvatore Bonaccorso ]
  * HID: apple: Add missing scan code event for keys handled by hid-apple
    (Closes: #757356)
.
linux (5.14.1-1~exp1) experimental; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.1
    - vt_kdsetmode: extend console locking (CVE-2021-3753)
    - Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
    - btrfs: fix NULL pointer dereference when deleting device by invalid id
      (CVE-2021-3739)
    - Revert "floppy: reintroduce O_NDELAY fix"
    - fscrypt: add fscrypt_symlink_getattr() for computing st_size
    - ext4: report correct st_size for encrypted symlinks
    - f2fs: report correct st_size for encrypted symlinks
    - ubifs: report correct st_size for encrypted symlinks
    - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
    - audit: move put_tree() to avoid trim_trees refcount underflow and UAF
.
linux (5.14-1~exp2) experimental; urgency=medium
.
  [ Bastian Blank ]
  * Fix perf build.
  * Enable EVM, ENCRYPTED_KEYS. (closes: #993535)
  * Enable IMA_SIG_TEMPLATE.
  * Enable AMD_SFH_HID, AMD_PMC. (closes: #992832)
  * Enable TMPFS_INODE64. (closes: #993641)
  * Move more into nic-shared-modules.
.
  [ Diederik de Haas ]
  * [arm64] sound/soc/codecs: Enable SND_SOC_RK3328 as module
  * [arm64,armhf] drivers/input/misc: Enable INPUT_RK805_PWRKEY as module
  * [arm64,armhf] drivers/pinctrl: Enable PINCTRL_RK805 (Closes: #990536)
  * [arm64] drivers/mfd: Make MFD_RK808 builtin
.
linux (5.14-1~exp1) experimental; urgency=medium
.
  * New upstream release: https://kernelnewbies.org/Linux_5.14
.
  [ Aurelien Jarno ]
  * [riscv64] Enable KEXEC.
  * [riscv64] Add initial Microchip Polarfire support: enable
    SOC_MICROCHIP_POLARFIRE, MMC_SDHCI_PLTFM, MMC_SDHCI_CADENCE and
    PCIE_MICROCHIP_HOST.
  * [riscv64] Improve HiFive Unmatched support: enable PCIE_DW_PLAT_HOST and
    PCIE_FU740.
.
  [ Vincent Blut ]
  * [armhf] drivers/leds: Enable LEDS_PCA963X as module (Closes: #908196)
.
  [ Salvatore Bonaccorso ]
  * net/batman-adv: Enable BATMAN_ADV_BATMAN_V
.
  [ Bastian Blank ]
  * [powerpc*] Disable support for debugging VDSO.
.
linux (5.13.12-1~exp1) experimental; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.10
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.11
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.12
.
  [ Salvatore Bonaccorso ]
  * net: Enable MPTCP (Closes: #987815)
.
  [ Bastian Blank ]
  * [mips*] Increase RELOCATION_TABLE_SIZE to 0x1c0000.
  * Enable SECURITY_LANDLOCK, SECURITY_PATH.
  * Fix external modules build. (closes: #992219)
  * Force more compressions modules into main installer package.
    (closes: #992221)
  * Drop redundant patch for overlay in user namespace.
.
  [ Uwe Kleine-König ]
  * [x86] Enable X86_PLATFORM_DRIVERS_DELL which is needed to keep some Dell
    specific drivers. (Closes: #992251)
.
linux (5.13.9-1~exp2) experimental; urgency=medium
.
  * Fix linux-cpupower installation.
.
linux (5.13.9-1~exp1) experimental; urgency=medium
.
  * New upstream release: https://kernelnewbies.org/Linux_5.11
  * New upstream release: https://kernelnewbies.org/Linux_5.12
  * New upstream release: https://kernelnewbies.org/Linux_5.13
.
  [ Bastian Blank ]
  * Always build-depend on native libelf-dev.
  * Specify trusted certs file in package config.
  * Enable PROC_VMCORE.
  * Enable SECURITYFS.
  * Re-enable IMA. (closes: #972459)
  * [x86] Enable AMD_MEM_ENCRYPT. (closes: #983586, #989040)
  * Enable UNICODE. (closes: #985689)
  * Enable CGROUP_MISC.
  * [x86] Enable PINCTRL_ALDERLAKE, PINCTRL_ELKHARTLAKE, PINCTRL_EMMITSBURG,
    PINCTRL_JASPERLAKE, PINCTRL_LAKEFIELD.
  * [amd64] Enable MICROSOFT_MANA.
  * [arm64] Enable GVE. (closes: #991835)

linux (5.10.46-8parrot1) rolling; urgency=medium
.
  * Import new Debian release.
.
linux (5.10.46-2) unstable; urgency=medium
.
  * swiotlb: manipulate orig_addr when tlb_addr has offset (Closes: #989778)
  * KVM: do not allow mapping valid but non-reference-counted pages
    (CVE-2021-22543)
  * [x86] platform/x86: toshiba_haps: Fix missing newline in pr_debug call in
    toshiba_haps_notify (Closes: #799193)
  * seq_file: Disallow extremely large seq buffer allocations (CVE-2021-33909)
.
linux (5.10.46-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.41
    - context_tracking: Move guest exit context tracking to separate helpers
    - context_tracking: Move guest exit vtime accounting to separate helpers
    - [x86] KVM: Defer vtime accounting 'til after IRQ handling
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42
    - ALSA: hda/realtek: the bass speaker can't output sound on Yoga 9i
    - ALSA: hda/realtek: Headphone volume is controlled by Front mixer
    - ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation P340
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook G8
    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 15
      G8
    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 17
      G8
    - ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
    - ALSA: usb-audio: scarlett2: Improve driver startup messages
    - cifs: set server->cipher_type to AES-128-CCM for SMB3.0
    - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
    - iommu/vt-d: Fix sysfs leak in alloc_iommu()
    - proc: Check /proc/$pid/attr/ writes against file opener
    - net: hso: fix control-request directions
    - net/sched: fq_pie: re-factor fix for fq_pie endless loop
    - net/sched: fq_pie: fix OOB access in the traffic path
    - netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to
      non-AVX2 version
    - mac80211: assure all fragments are encrypted (CVE-2020-26147)
    - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586,
      CVE-2020-24587)
    - mac80211: properly handle A-MSDUs that start with an RFC 1042 header
    - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24588)
    - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24588)
    - mac80211: add fragment cache to sta_info
    - mac80211: check defrag PN against current frame
    - mac80211: prevent attacks on TKIP/WEP as well
    - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-26139)
    - mac80211: extend protection against mixed key and fragment cache attacks
      (CVE-2020-24586, CVE-2020-24587)
    - ath10k: add CCMP PN replay protection for fragmented frames for PCIe
    - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-26145)
    - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-26145)
    - ath10k: drop MPDU which has discard flag set by firmware for SDIO
      (CVE-2020-24588)
    - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-26141)
    - ath10k: Validate first subframe of A-MSDU before processing the list
    - ath11k: Clear the fragment cache during key install (CVE-2020-24587)
    - dm snapshot: properly fix a crash when an origin has no snapshots
    - drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate
    - [amd64] drm/amdkfd: correct sienna_cichlid SDMA RLC register offset error
    - drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate
    - drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate
    - drm/amdgpu/jpeg2.0: add cancel_delayed_work_sync before power gate
    - Documentation: seccomp: Fix user notification documentation
    - seccomp: Refactor notification handler to prepare for new semantics
    - serial: core: fix suspicious security_locked_down() call
    - misc/uss720: fix memory leak in uss720_probe
    - [x86] thunderbolt: usb4: Fix NVM read buffer bounds and offset issue
    - [x86] thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
    - [x86] KVM: Fix vCPU preempted state from guest's point of view
    - [arm64] KVM: Prevent mixed-width VM creation
    - [x86] mei: request autosuspend after sending rx flow control
    - iio: gyro: fxas21002c: balance runtime power in error path
    - iio: dac: ad5770r: Put fwnode in error case during ->probe()
    - iio: adc: ad7768-1: Fix too small buffer passed to
      iio_push_to_buffers_with_timestamp()
    - iio: adc: ad7124: Fix missbalanced regulator enable / disable on error.
    - iio: adc: ad7124: Fix potential overflow due to non sequential channel
      numbers
    - iio: adc: ad7923: Fix undersized rx buffer.
    - iio: adc: ad7793: Add missing error code in ad7793_setup()
    - iio: adc: ad7192: Avoid disabling a clock that was never enabled.
    - iio: adc: ad7192: handle regulator voltage error first
    - serial: 8250: Add UART_BUG_TXRACE workaround for Aspeed VUART
    - serial: 8250_dw: Add device HID for new AMD UART controller
    - serial: 8250_pci: Add support for new HPE serial device
    - serial: 8250_pci: handle FL_NOIRQ board flag
    - USB: trancevibrator: fix control-request direction
    - Revert "irqbypass: do not start cons/prod when failed connect"
    - USB: usbfs: Don't WARN about excessively large memory allocations
    - drivers: base: Fix device link removal
    - [arm64,armhf] serial: tegra: Fix a mask operation that is always true
    - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
    - USB: serial: ti_usb_3410_5052: add startech.com device id
    - USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
    - USB: serial: ftdi_sio: add IDs for IDS GmbH Products
    - USB: serial: pl2303: add device id for ADLINK ND-6530 GC
    - [x86] thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID
    - [arm64,armhf] usb: dwc3: gadget: Properly track pending and queued SG
    - [arm64,x86] usb: typec: mux: Fix matching with typec_altmode_desc
    - net: usb: fix memory leak in smsc75xx_bind
    - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
    - fs/nfs: Use fatal_signal_pending instead of signal_pending
    - NFS: fix an incorrect limit in filelayout_decode_layout()
    - NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
    - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
    - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
    - [arm64] drm/meson: fix shutdown crash when component not probed
    - net/mlx5e: reset XPS on error flow if netdev isn't registered yet
    - net/mlx5e: Fix multipath lag activation
    - net/mlx5e: Fix error path of updating netdev queues
    - {net,vdpa}/mlx5: Configure interface MAC into mpfs L2 table
    - net/mlx5e: Fix nullptr in add_vlan_push_action()
    - net/mlx5: Set reformat action when needed for termination rules
    - net/mlx5e: Fix null deref accessing lag dev
    - net/mlx4: Fix EEPROM dump support
    - net/mlx5: Set term table as an unmanaged flow table
    - SUNRPC in case of backlog, hand free slots directly to waiting task
    - Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
    - tipc: wait and exit until all work queues are done
    - tipc: skb_linearize the head skb when reassembling msgs
    - [arm64] spi: spi-fsl-dspi: Fix a resource leak in an error handling path
    - netfilter: flowtable: Remove redundant hw refresh bit
    - [arm64,armhf] net: dsa: fix a crash if ->get_sset_count() fails
    - [armhf] i2c: s3c2410: fix possible NULL pointer deref on read message
      after write
    - [x86] i2c: i801: Don't generate an interrupt on bus reset
    - afs: Fix the nlink handling of dir-over-dir rename
    - nvmet-tcp: fix inline data size comparison in nvmet_tcp_queue_response
    - [x86] platform/x86: hp_accel: Avoid invoking _INI to speed up resume
    - [arm64] Revert "crypto: cavium/nitrox - add an error message to explain
      the failure of pci_request_mem_regions"
    - Revert "media: usb: gspca: add a missed check for goto_low_power"
    - [i386] Revert "ALSA: sb: fix a missing check of snd_ctl_add"
    - Revert "net: fujitsu: fix a potential NULL pointer dereference"
    - net: fujitsu: fix potential null-ptr-deref
    - Revert "net/smc: fix a NULL pointer dereference"
    - net/smc: properly handle workqueue allocation failure
    - [x86] Revert "char: hpet: fix a missing check of ioremap"
    - [x86] char: hpet: add checks after calling ioremap
    - [i386] Revert "ALSA: gus: add a check of the status of snd_ctl_add"
    - Revert "isdn: mISDNinfineon: fix potential NULL pointer dereference"
    - isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
    - Revert "ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()"
    - ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()
    - Revert "isdn: mISDN: Fix potential NULL pointer dereference of kzalloc"
    - isdn: mISDN: correctly handle ph_info allocation failure in
      hfcsusb_ph_info
    - [arm64] Revert "dmaengine: qcom_hidma: Check for driver register failure"
    - [arm64] dmaengine: qcom_hidma: comment platform_driver_register call
    - Revert "libertas: add checks for the return value of sysfs_create_group"
    - libertas: register sysfs groups properly
    - Revert "media: dvb: Add check on sp8870_readreg"
    - media: dvb: Add check on sp8870_readreg return
    - Revert "media: gspca: mt9m111: Check write_bridge for timeout"
    - media: gspca: mt9m111: Check write_bridge for timeout
    - Revert "media: gspca: Check the return value of write_bridge for timeout"
    - media: gspca: properly check for errors in po1030_probe()
    - Revert "net: liquidio: fix a NULL pointer dereference"
    - net: liquidio: Add missing null pointer checks
    - Revert "brcmfmac: add a check for the status of usb_register"
    - brcmfmac: properly check for bus register errors
    - btrfs: return whole extents in fiemap
    - [powerpc,x86] scsi: BusLogic: Fix 64-bit system enumeration error for
      Buslogic
    - scsi: pm80xx: Fix drives missing during rmmod/insmod loop
    - btrfs: release path before starting transaction when cloning inline extent
    - btrfs: do not BUG_ON in link_to_fixup_dir
    - [x86] platform/x86: hp-wireless: add AMD's hardware id to the supported
      list
    - SMB3: incorrect file id in requests compounded with open
    - drm/amd/amdgpu: fix refcount leak
    - drm/amdgpu: Fix a use-after-free
    - drm/amd/amdgpu: fix a potential deadlock in gpu reset
    - drm/amdgpu: stop touching sched.ready in the backend
    - block: fix a race between del_gendisk and BLKRRPART
    - linux/bits.h: fix compilation error with GENMASK
    - [arm64,armhf] net: dsa: fix error code getting shifted with 4 in
      dsa_slave_get_sset_count
    - net: stmmac: Fix MAC WoL not working if PHY does not support WoL
    - spi: Assume GPIO CS active high in ACPI case
    - net: really orphan skbs tied to closing sk
    - net: packetmmap: fix only tx timestamp on request
    - [arm64,armhf] net: fec: fix the potential memory leak in fec_enet_init()
    - [arm64] net: mdio: thunder: Fix a double free issue in the .remove
      function
    - [mips64el,mipsel] net: mdio: octeon: Fix some double free issues
    - cxgb4/ch_ktls: Clear resources when pf4 device is removed
    - openvswitch: meter: fix race when getting now_ms.
    - net: sched: fix packet stuck problem for lockless qdisc
    - net: sched: fix tx action rescheduling issue during deactivation
    - net: sched: fix tx action reschedule issue with stopped queue
    - net: hso: check for allocation failure in hso_create_bulk_serial_device()
    - net: bnx2: Fix error return code in bnx2_init_board()
    - bnxt_en: Include new P5 HV definition in VF check.
    - bnxt_en: Fix context memory setup for 64K page size.
    - mld: fix panic in mld_newpack()
    - net/smc: remove device from smcd_dev_list after failed device_add()
    - [amd64] gve: Check TX QPL was actually assigned
    - [amd64] gve: Update mgmt_msix_idx if num_ntfy changes
    - [amd64] gve: Add NULL pointer checks when freeing irqs.
    - [amd64] gve: Upgrade memory barrier in poll routine
    - [amd64] gve: Correct SKB queue index validation.
    - [arm64] net: hns3: fix incorrect resp_msg issue
    - [arm64] net: hns3: put off calling register_netdev() until client
      initialize complete
    - [amd64] iommu/vt-d: Use user privilege for RID2PASID translation
    - cxgb4: avoid accessing registers when clearing filters
    - bpf, offload: Reorder offload callback 'prepare' in verifier
    - bpf: Set mac_len in bpf_skb_change_head
    - ixgbe: fix large MTU request from VF
    - [arm64] ASoC: qcom: lpass-cpu: Use optional clk APIs
    - scsi: libsas: Use _safe() loop in sas_resume_port()
    - ipv6: record frag_max_size in atomic fragments in input path
    - ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be
      static
    - sch_dsmark: fix a NULL deref in qdisc_reset()
    - net: zero-initialize tc skb extension on allocation
    - [arm64,armhf] net: mvpp2: add buffer header handling in RX
    - [x86] i915: fix build warning in intel_dp_get_link_status()
    - [arm64] net: hns3: check the return of skb_checksum_help()
    - bpftool: Add sock_release help info for cgroup attach/prog load command
    - SUNRPC: More fixes for backlog congestion
    - net: hso: bail out on interrupt URB allocation failure
    - neighbour: Prevent Race condition in neighbour subsytem
    - usb: core: reduce power-on-good delay time of root hub
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43
    - btrfs: tree-checker: do not error out if extent ref hash doesn't match
    - net: usb: cdc_ncm: don't spew notifications (Closes: #989451)
    - [x86] hwmon: (dell-smm-hwmon) Fix index values
    - netfilter: conntrack: unregister ipv4 sockopts on error unwind
    - efi/fdt: fix panic when no valid fdt found
    - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared
    - efi/libstub: prevent read overflow in find_file_option()
    - [arm64,x86] efi: cper: fix snprintf() use in cper_dimm_err_location()
    - vfio/pci: Fix error return code in vfio_ecap_init()
    - ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
    - HID: logitech-hidpp: initialize level variable
    - HID: pidff: fix error return code in hid_pidff_init()
    - [arm64,x86] HID: i2c-hid: fix format string mismatch
    - devlink: Correct VIRTUAL port to not have phys_port attributes
    - net/sched: act_ct: Offload connections with commit action
    - net/sched: act_ct: Fix ct template allocation for zone 0
    - nvme-rdma: fix in-casule data send for chained sgls
    - ACPICA: Clean up context mutex during object deletion
    - perf probe: Fix NULL pointer dereference in convert_variable_location()
    - net: sock: fix in-kernel mark setting
    - net/mlx5e: Fix incompatible casting
    - net/mlx5: Check firmware sync reset requested is set before trying to
      abort it
    - net/mlx5e: Check for needed capability for cvlan matching
    - net/mlx5: DR, Create multi-destination flow table with level less than 64
    - nvmet: fix freeing unallocated p2pmem
    - netfilter: nft_ct: skip expectations for confirmed conntrack
    - netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
    - bpf: Simplify cases in bpf_base_func_proto
    - bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks
    - ieee802154: fix error return code in ieee802154_add_iface()
    - ieee802154: fix error return code in ieee802154_llsec_getparams()
    - igb: add correct exception tracing for XDP
    - ixgbevf: add correct exception tracing for XDP
    - cxgb4: fix regression with HASH tc prio value update
    - ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
    - ice: Fix allowing VF to request more/less queues via virtchnl
    - ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared
    - ice: handle the VF VSI rebuild failure
    - ice: report supported and advertised autoneg using PHY capabilities
    - ice: Allow all LLDP packets from PF to Tx
    - cxgb4: avoid link re-train during TC-MQPRIO configuration
    - i40e: optimize for XDP_REDIRECT in xsk path
    - i40e: add correct exception tracing for XDP
    - ice: simplify ice_run_xdp
    - ice: optimize for XDP_REDIRECT in xsk path
    - ice: add correct exception tracing for XDP
    - ixgbe: optimize for XDP_REDIRECT in xsk path
    - ixgbe: add correct exception tracing for XDP
    - [arm64] optee: use export_uuid() to copy client UUID
    - [armhf] bus: ti-sysc: Fix am335x resume hang for usb otg module
    - [arm64] dts: freescale: sl28: var4: fix RGMII clock and voltage
    - [armhf] bus: ti-sysc: Fix flakey idling of uarts and stop using
      swsup_sidle_act
    - tipc: add extack messages for bearer/media failure
    - tipc: fix unique bearer names sanity check
    - [armhf] serial: stm32: fix threaded interrupt handling
    - io_uring: fix link timeout refs
    - io_uring: use better types for cflags
    - drm/amdgpu/vcn3: add cancel_delayed_work_sync before power gate
    - drm/amdgpu/jpeg2.5: add cancel_delayed_work_sync before power gate
    - drm/amdgpu/jpeg3: add cancel_delayed_work_sync before power gate
    - Bluetooth: fix the erroneous flush_work() order (CVE-2021-3564)
    - Bluetooth: use correct lock to prevent UAF of hdev object (CVE-2021-3573)
    - wireguard: do not use -O3
    - wireguard: peer: allocate in kmem_cache
    - wireguard: use synchronize_net rather than synchronize_rcu
    - wireguard: allowedips: initialize list head in selftest
    - wireguard: allowedips: remove nodes in O(1)
    - wireguard: allowedips: allocate nodes in kmem_cache
    - wireguard: allowedips: free empty intermediate nodes when removing single
      node
    - [arm64,x86] HID: i2c-hid: Skip ELAN power-on command after reset
    - HID: magicmouse: fix NULL-deref on disconnect
    - HID: multitouch: require Finger field to mark Win8 reports as MT
    - gfs2: fix scheduling while atomic bug in glocks
    - ALSA: timer: Fix master timer notification
    - ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx
    - ALSA: hda: update the power_state during the direct-complete
    - ext4: fix memory leak in ext4_fill_super
    - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
    - ext4: fix fast commit alignment issues
    - ext4: fix memory leak in ext4_mb_init_backend on error path.
    - ext4: fix accessing uninit percpu counter variable with fast_commit
    - [arm*] usb: dwc2: Fix build in periphal-only mode
    - pid: take a reference when initializing `cad_pid`
    - ocfs2: fix data corruption by fallocate
    - mm/page_alloc: fix counting of free pages after take off from buddy
    - [x86] cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
      update_pasid()
    - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
      (CVE-2021-3587)
    - drm/amdgpu: Don't query CE and UE errors
    - drm/amdgpu: make sure we unpin the UVD BO
    - [x86] apic: Mark _all_ legacy interrupts when IO/APIC is missing
    - [powerpc] kprobes: Fix validation of prefixed instructions across page
      boundary
    - btrfs: mark ordered extent and inode with error if we fail to finish
    - btrfs: fix error handling in btrfs_del_csums
    - btrfs: return errors from btrfs_del_csums in cleanup_ref_head
    - btrfs: fixup error handling in fixup_inode_link_counts
    - btrfs: abort in rename_exchange if we fail to insert the second ref
    - btrfs: fix deadlock when cloning inline extents and low on available space
    - mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
    - [arm64] drm/msm/dpu: always use mdp device to scale bandwidth
    - btrfs: fix unmountable seed device after fstrim
    - [x86] KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode
    - [arm64] KVM: Fix debug register indexing
    - [x86] kvm: Teardown PV features on boot CPU as well
    - [x86] kvm: Disable kvmclock on all CPUs on shutdown
    - [x86] kvm: Disable all PV features on crash
    - lib/lz4: explicitly support in-place decompression
    - netfilter: nf_tables: missing error reporting for not selected expressions
    - xen-netback: take a reference to the RX task thread (CVE-2021-28691)
    - neighbour: allow NUD_NOARP entries to be forced GCed
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44
    - proc: Track /proc/$pid/attr/ opener mm_struct
    - [amd64] ASoC: amd: fix for pcm_read() error
    - spi: Fix spi device unregister flow
    - bpf: Forbid trampoline attach for functions with variable arguments
    - net/nfc/rawsock.c: fix a permission check bug
    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L
      tablet
    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830
      tablet
    - [arm64,armhf] usb: chipidea: udc: assign interrupt number to USB gadget
      structure
    - bonding: init notify_work earlier to avoid uninitialized use
    - netlink: disable IRQs for netlink_lock_table()
    - net: mdiobus: get rid of a BUG_ON()
    - cgroup: disable controllers at parse time
    - wq: handle VM suspension in stall detection
    - net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
    - RDS tcp loopback connection can hang
    - net:sfc: fix non-freed irq in legacy irq mode
    - scsi: bnx2fc: Return failure if io_req is already in ABTS processing
    - [x86] scsi: vmw_pvscsi: Set correct residual data length
    - [arm64] scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated
      irq
    - scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
    - net: macb: ensure the device is available before accessing GEMGXL control
      registers
    - nvme-fabrics: decode host pathing error for connect
    - dm verity: fix require_signatures module_param permissions
    - bnx2x: Fix missing error code in bnx2x_iov_init_one()
    - nvmet: fix false keep-alive timeout when a controller is torn down
    - spi: Don't have controller clean up spi device before driver unbind
    - spi: Cleanup on failure of initial setup
    - [powerpc] i2c: mpc: Make use of i2c_recover_bus()
    - [powerpc] i2c: mpc: implement erratum A-004447 workaround
    - ALSA: seq: Fix race of snd_seq_timer_open()
    - ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun()
    - ALSA: hda/realtek: headphone and mic don't work on an Acer laptop
    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite
      Dragonfly G2
    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360
      1040 G8
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
    - [arm*] spi: bcm2835: Fix out-of-bounds access with more than 4 slaves
    - Revert "ACPI: sleep: Put the FACS table after using it"
    - drm: Fix use-after-free read in drm_getunique()
    - drm: Lock pointer access in drm_master_release()
    - [x86] perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server
    - [x86] KVM: X86: MMU: Use the correct inherited permissions to get shadow
      page
    - kvm: avoid speculation-based attacks from out-of-range memslot accesses
    - [arm64,x86] staging: rtl8723bs: Fix uninitialized variables
    - async_xor: check src_offs is not NULL before updating it
    - btrfs: return value from btrfs_mark_extent_written() in case of error
    - btrfs: promote debugging asserts to full-fledged checks in validate_super
    - cgroup1: don't allow '\n' in renaming
    - ftrace: Do not blindly read the ip address in ftrace_bug()
    - USB: f_ncm: ncm_bitrate (speed) is unsigned
    - usb: f_ncm: only first packet of aggregate needs to start timer
    - usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
    - [arm64,armhf] usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is
      disabled
    - [arm64,armhf] usb: dwc3: meson-g12a: Disable the regulator in the error
      handling path of the probe
    - [arm64,armhf] usb: dwc3: gadget: Bail from dwc3_gadget_exit() if
      dwc->gadget is NULL
    - [arm64,armhf] usb: dwc3: ep0: fix NULL pointer exception
    - [arm64,armhf] usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling
    - usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
    - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
    - USB: serial: ftdi_sio: add NovaTech OrionMX product ID
    - USB: serial: omninet: add device id for Zyxel Omni 56K Plus
    - USB: serial: quatech2: fix control-request directions
    - USB: serial: cp210x: fix alternate function for CP2102N QFN20
    - usb: gadget: eem: fix wrong eem header operation
    - usb: fix various gadgets null ptr deref on 10gbps cabling.
    - usb: fix various gadget panics on 10gbps cabling
    - usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister
      tcpm port
    - usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port
    - regulator: core: resolve supply for boot-on/always-on regulators
    - [arm64] regulator: max77620: Use device_set_of_node_from_dev()
    - regulator: bd71828: Fix .n_voltages settings
    - [arm64,armhf] usb: dwc3: gadget: Disable gadget IRQ during pullup disable
    - usb: typec: mux: Fix copy-paste mistake in typec_mux_match
    - [arm64] drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650
    - [arm64] drm/msm/a6xx: update/fix CP_PROTECT initialization
    - [arm64] drm/msm/a6xx: avoid shadow NULL reference in failure path
    - RDMA/ipoib: Fix warning caused by destroying non-initial netns
    - RDMA/mlx4: Do not map the core_clock page to user space unless enabled
    - ASoC: core: Fix Null-point-dereference in fmt_single_name()
    - perf: Fix data race between pin_count increment/decrement
    - sched/fair: Keep load_avg and load_sum synced
    - sched/fair: Make sure to update tg contrib for blocked load
    - sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling
    - [x86] nmi_watchdog: Fix old-style NMI watchdog regression on old Intel
      CPUs
    - [x86] KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint
      message
    - IB/mlx5: Fix initializing CQ fragments buffer
    - NFS: Fix a potential NULL dereference in nfs_get_client()
    - NFSv4: Fix deadlock between nfs4_evict_inode() and
      nfs4_opendata_get_inode()
    - kvm: fix previous commit for 32-bit builds
    - NFS: Fix use-after-free in nfs4_init_client()
    - NFSv4: Fix second deadlock in nfs4_evict_inode()
    - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
    - scsi: core: Fix error handling of scsi_host_alloc()
    - scsi: core: Fix failure handling of scsi_add_host_with_dma()
    - scsi: core: Put .shost_dev in failure path if host state changes to
      RUNNING
    - scsi: core: Only put parent device if host state differs from
      SHOST_CREATED
    - tracing: Correct the length check which causes memory corruption
    - proc: only require mm_struct for writing
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.45
    - net: ieee802154: fix null deref in parse dev addr
    - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
    - HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95
    - HID: hid-input: add mapping for emoji picker key
    - HID: hid-sensor-hub: Return error for hid_set_field() failure
    - HID: quirks: Add quirk for Lenovo optical mouse
    - HID: multitouch: set Stylus suffix for Stylus-application devices, too
    - HID: Add BUS_VIRTUAL to hid_connect logging
    - HID: usbhid: fix info leak in hid_submit_ctrl
    - [arm64,armhf] drm/tegra: sor: Do not leak runtime PM reference
    - [arm64,armhf] gpu: host1x: Split up client initalization and registration
    - [arm64,armhf] drm/tegra: sor: Fully initialize SOR before registration
    - gfs2: Prevent direct-I/O write fallback errors from getting lost
    - gfs2: fix a deadlock on withdraw-during-mount
    - HID: gt683r: add missing MODULE_DEVICE_TABLE
    - gfs2: Fix use-after-free in gfs2_glock_shrink_scan
    - scsi: target: core: Fix warning on realtime kernels
    - ethernet: myri10ge: Fix missing error code in myri10ge_probe()
    - scsi: qedf: Do not put host in qedf_vport_create() unconditionally
    - Bluetooth: Add a new USB ID for RTL8822CE
    - scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
    - net: ipconfig: Don't override command-line hostnames or domains
    - drm/amd/display: Allow bandwidth validation for 0 streams.
    - drm/amdgpu: refine amdgpu_fru_get_product_info
    - drm/amd/display: Fix potential memory leak in DMUB hw_init
    - drm/amd/amdgpu:save psp ring wptr to avoid attack
    - rtnetlink: Fix missing error code in rtnl_bridge_notify()
    - net: Return the correct errno code
    - fib: Return the correct errno code
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46
    - afs: Fix an IS_ERR() vs NULL check
    - mm/memory-failure: make sure wait for page writeback in memory_failure
    - [x86] kvm: LAPIC: Restore guard to prevent illegal APIC register access
    - fanotify: fix copy_event_to_user() fid error clean up
    - batman-adv: Avoid WARN_ON timing related checks
    - mac80211: fix skb length check in ieee80211_scan_rx()
    - net: ipv4: fix memory leak in netlbl_cipsov4_add_std
    - vrf: fix maximum MTU
    - net: rds: fix memory leak in rds_recvmsg
    - [arm64] net: dsa: felix: re-enable TX flow control in ocelot_port_flush()
    - netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local
    - ice: add ndo_bpf callback for safe mode netdev ops
    - ice: parameterize functions responsible for Tx ring management
    - udp: fix race between close() and udp_abort()
    - rtnetlink: Fix regression in bridge VLAN configuration
    - net/sched: act_ct: handle DNAT tuple collision
    - net/mlx5e: Fix page reclaim for dead peer hairpin
    - net/mlx5: Consider RoCE cap before init RDMA resources
    - net/mlx5: DR, Allow SW steering for sw_owner_v2 devices
    - net/mlx5: DR, Don't use SW steering when RoCE is not supported
    - net/mlx5e: Block offload of outer header csum for UDP tunnels
    - netfilter: synproxy: Fix out of bounds when parsing TCP options
    - sch_cake: Fix out of bounds when parsing TCP options and header
    - alx: Fix an error handling path in 'alx_probe()'
    - cxgb4: fix endianness when flashing boot image
    - cxgb4: fix sleep in atomic when flashing PHY firmware
    - cxgb4: halt chip before flashing PHY firmware image
    - net: make get_net_ns return error if NET_NS is disabled
    - ethtool: strset: fix message length calculation
    - qlcnic: Fix an error handling path in 'qlcnic_probe()'
    - netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
    - cxgb4: fix wrong ethtool n-tuple rule lookup
    - ipv4: Fix device used for dst_alloc with local routes
    - net: qrtr: fix OOB Read in qrtr_endpoint_post
    - bpf: Fix leakage under speculation on mispredicted branches
      (CVE-2021-33624)
    - ptp: improve max_adj check against unreasonable values
    - net: cdc_ncm: switch to eth%d interface naming
    - net: usb: fix possible use-after-free in smsc75xx_bind
    - [arm64,armhf] net: fec_ptp: fix issue caused by refactor the fec_devtype
    - net: ipv4: fix memory leak in ip_mc_add1_src
    - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
    - net/mlx5: E-Switch, Read PF mac address
    - net/mlx5: E-Switch, Allow setting GUID for host PF vport
    - net/mlx5: Reset mkey index on creation
    - be2net: Fix an error handling path in 'be_probe()'
    - net: hamradio: fix memory leak in mkiss_close
    - net: cdc_eem: fix tx fixup skb leak
    - cxgb4: fix wrong shift.
    - bnxt_en: Rediscover PHY capabilities after firmware reset
    - bnxt_en: Fix TQM fastpath ring backing store computation
    - bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path
    - icmp: don't send out ICMP messages with a source address of 0.0.0.0
    - [x86] platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support
    - sched/pelt: Ensure that *_sum is always synced with *_avg
    - [armhf] spi: stm32-qspi: Always wait BUSY bit to be cleared in
      stm32_qspi_wait_cmd()
    - ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire
      mode
    - [arm64,armhf] drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device
    - [arm64] ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin
    - radeon: use memcpy_to/fromio for UVD fw upload
    - mm: relocate 'write_protect_seq' in struct mm_struct
    - [arm64,armhf] irqchip/gic-v3: Workaround inconsistent PMR setting on NMI
      entry
    - bpf: Inherit expanded/patched seen count from old aux data
      (CVE-2021-33624)
    - bpf: Do not mark insn as seen under speculative path verification
      (CVE-2021-33624)
    - can: bcm: fix infoleak in struct bcm_msg_head (CVE-2021-34693)
    - can: bcm/raw/isotp: use per module netdevice notifier
    - can: j1939: fix Use-after-Free, hold skb ref while in use
    - can: mcba_usb: fix memory leak in mcba_usb
    - usb: core: hub: Disable autosuspend for Cypress CY7C65632
    - [arm64,armhf] usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
    - tracing: Do not stop recording cmdlines when tracing is off
    - tracing: Do not stop recording comms if the trace file is being read
    - tracing: Do no increment trace_clock_global() by one
    - PCI: Mark TI C667X to avoid bus reset
    - PCI: Mark some NVIDIA GPUs to avoid bus reset
    - [arm64] PCI: aardvark: Fix kernel panic during PIO transfer
    - PCI: Add ACS quirk for Broadcom BCM57414 NIC
    - PCI: Work around Huawei Intelligent NIC VF FLR erratum
    - [x86] KVM: x86: Immediately reset the MMU context when the SMM flag is
      cleared
    - [x86] KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU
    - [x86] KVM: X86: Fix x86_emulator slab cache leak
    - [s390x] mcck: fix calculation of SIE critical section size
    - [s390x] ap: Fix hanging ioctl caused by wrong msg counter
    - [amd64] x86/mm: Avoid truncating memblocks for SGX memory
    - [x86] process: Check PF_KTHREAD and not current->mm for kernel threads
    - [x86] ioremap: Map EFI-reserved memory as encrypted for SEV
    - [x86] pkru: Write hardware init value to PKRU when xstate is init
    - [x86] fpu: Prevent state corruption in __fpu__restore_sig()
    - [x86] fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
    - [x86] fpu: Reset state for all signal restore failures
    - crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo
    - [arm64,armhf] dmaengine: pl330: fix wrong usage of spinlock flags in
      dma_cyclc
    - mac80211: Fix NULL ptr deref for injected rate info
    - cfg80211: avoid double free of PMSR request
    - drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full
      doorbell.
    - drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue.
    - net: ll_temac: Fix TX BD buffer overwrite
    - net: bridge: fix vlan tunnel dst null pointer dereference
    - net: bridge: fix vlan tunnel dst refcnt when egressing
    - mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare
    - mm/slub: clarify verification reporting
    - mm/slub: fix redzoning for small allocations
    - mm/slub: actually fix freelist pointer vs redzoning
    - mm/slub.c: include swab.h
    - net: stmmac: disable clocks in stmmac_remove_config_dt()
    - [arm64,armhf] net: fec_ptp: add clock rate zero check
    - [arm64,armhf] usb: dwc3: debugfs: Add and remove endpoint dirs dynamically
    - [arm64,armhf] usb: dwc3: core: fix kernel panic when do reboot
.
  [ Josua Mayer ]
  * [armhf] drivers/bluetooth: Enable BT_HCIUART as a module, with support
    for all features already enabled in the generic config. (Closes: #987361)
  * [armhf] enable i.MX6 MIPI-CSI video capture device. (Closes: #987365)
    - drivers/mux: Enable MUX_MMIO as a module.
    - drivers/media/platform: Enable VIDEO_MUX as a module.
    - drivers/staging/media/imx: Enable VIDEO_IMX_MEDIA and VIDEO_IMX_CSI as
      modules.
.
  [ Uwe Kleine-König ]
  * [arm64] Update device tree for Kobol's helios64 from next
.
  [ Salvatore Bonaccorso ]
  * [rt] Refresh "net/Qdisc: use a seqlock instead seqcount"
  * Ignore some ABI changes that should not affect OOT modules
  * Bump ABI to 8
  * [rt] Refresh "tracing: Merge irqflags + preempt counter"
  * can: bcm: delay release of struct bcm_op after synchronize_rcu()
    (CVE-2021-3609)
  * Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
    (Closes: #990008)
.
  [ Vagrant Cascadian ]
  * [arm64] Add pwm-rockchip to fb-modules udeb.
  * [arm64] Add fusb302, tcpm and typec to usb-modules udeb.
  * [armhf] Add gpio-mxc to kernel-image udeb. Thanks to Rick Thomas.
    (Closes: #982270)
.
linux (5.10.40-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.39
    - [x86] msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
    - [x86] drm/i915/display: fix compiler warning about array overrun
    - airo: work around stack usage warning
    - usb: sl811-hcd: improve misleading indentation
    - cxgb4: Fix the -Wmisleading-indentation warning
    - isdn: capi: fix mismatched prototypes
    - virtio_net: Do not pull payload in skb->head
    - [armel,armhf] 9066/1: ftrace: pause/unpause function graph tracer in
      cpu_suspend()
    - [arm64,x86] ACPI / hotplug / PCI: Fix reference count leak in
      enable_slot()
    - [arm64] Input: elants_i2c - do not bind to i2c-hid compatible ACPI
      instantiated devices
    - NFS: NFS_INO_REVAL_PAGECACHE should mark the change attribute invalid
    - [armel,armhf] 9075/1: kernel: Fix interrupted SMC calls
    - [arm64] platform/chrome: cros_ec_typec: Add DP mode check
    - scsi: lpfc: Fix illegal memory access on Abort IOCBs
    - ceph: fix fscache invalidation
    - ceph: don't clobber i_snap_caps on non-I_NEW inode
    - ceph: don't allow access to MDS-private inodes
    - scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not
      found
    - bridge: Fix possible races between assigning rx_handler_data and setting
      IFF_BRIDGE_PORT bit
    - nvmet: remove unsupported command noise
    - drm/amd/display: Fix two cursor duplication when using overlay
    - [arm64,x86] gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10
      Pro 5055
    - net:CXGB4: fix leak if sk_buff is not used
    - ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
    - block: reexpand iov_iter after read/write
    - net: stmmac: Do not enable RX FIFO overflow interrupts
    - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
    - sit: proper dev_{hold|put} in ndo_[un]init methods
    - ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
    - ipv6: remove extra dev_hold() for fallback tunnels
    - tweewide: Fix most Shebang lines
    - scripts: switch explicitly to Python 3
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.40
    - RDMA/core: Prevent divide-by-zero error triggered by the user
    - RDMA/rxe: Clear all QP fields if creation failed
    - scsi: ufs: core: Increase the usable queue depth
    - scsi: qedf: Add pointer checks in qedf_update_link_speed()
    - scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword()
    - RDMA/mlx5: Recover from fatal event in dual port mode
    - RDMA/core: Don't access cm_id after its destruction
    - nvmet: remove unused ctrl->cqs
    - nvmet: fix memory leak in nvmet_alloc_ctrl()
    - nvme-tcp: rerun io_work if req_list is not empty
    - nvme-fc: clear q_live at beginning of association teardown
    - [x86] platform/x86: intel_int0002_vgpio: Only call enable_irq_wake() when
      using s2idle
    - [x86] platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
    - RDMA/mlx5: Fix query DCT via DEVX
    - RDMA/uverbs: Fix a NULL vs IS_ERR() bug
    - [powerpc*] pseries: Fix hcall tracing recursion in pv queued spinlocks
    - ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
    - nvmet: seset ns->file when open fails
    - [x86] perf/x86: Avoid touching LBR_TOS MSR for Arch LBR
    - locking/lockdep: Correct calling tracepoints
    - locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal
    - [powerpc*] Fix early setup to make early_ioremap() work
    - btrfs: avoid RCU stalls while running delayed iputs
    - cifs: fix memory leak in smb2_copychunk_range
    - misc: eeprom: at24: check suspend status before disable regulator
    - ALSA: dice: fix stream format for TC Electronic Konnekt Live at high
      sampling transfer frequency
    - ALSA: intel8x0: Don't update period unless prepared
    - ALSA: firewire-lib: fix amdtp_packet tracepoints event for packet_index
      field
    - ALSA: line6: Fix racy initialization of LINE6 MIDI
    - ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26
    - ALSA: firewire-lib: fix calculation for size of IR context payload
    - ALSA: usb-audio: Validate MS endpoint descriptors
    - ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro
    - ALSA: hda: fixup headset for ASUS GU502 laptop
    - Revert "ALSA: sb8: add a check for request_region"
    - ALSA: firewire-lib: fix check for the size of isochronous packet payload
    - ALSA: hda/realtek: reset eapd coeff to default value for alc287
    - ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293
    - ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA
    - ALSA: hda/realtek: Add fixup for HP OMEN laptop
    - ALSA: hda/realtek: Add fixup for HP Spectre x360 15-df0xxx
    - [x86] uio_hv_generic: Fix a memory leak in error handling paths
    - [arm64] Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer
      dereference"
    - nvme-tcp: fix possible use-after-completion
    - drm/amdgpu: Fix GPU TLB update error when PAGE_SIZE > AMDGPU_PAGE_SIZE
    - drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang
    - drm/amdgpu: update gc golden setting for Navi12
    - drm/amdgpu: update sdma golden setting for Navi12
    - [powerpc*] 64s/syscall: Use pt_regs.trap to distinguish syscall ABI
      difference between sc and scv syscalls
    - [powerpc*] 64s/syscall: Fix ptrace syscall info with scv syscalls
    - mmc: sdhci-pci-gli: increase 1.8V regulator wait
    - [x86] xen-pciback: redo VF placement in the virtual topology
    - [x86] xen-pciback: reconfigure also from backend watch handler
    - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry
    - dm snapshot: fix crash with transient storage and zero chunk size
    - Revert "video: hgafb: fix potential NULL pointer dereference"
    - [arm64,armhf] Revert "net: stmicro: fix a missing check of clk_prepare"
    - Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
    - Revert "ecryptfs: replace BUG_ON with error handling code"
    - Revert "rtlwifi: fix a potential NULL pointer dereference"
    - Revert "qlcnic: Avoid potential NULL pointer dereference"
    - Revert "niu: fix missing checks of niu_pci_eeprom_read"
    - ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read()
    - [arm64,armhf] net: stmicro: handle clk_prepare() failure during init
    - net: rtlwifi: properly check for alloc_workqueue() failure
    - ics932s401: fix broken handling of errors when word reading fails
    - qlcnic: Add null check after calling netdev_alloc_skb
    - [x86] video: hgafb: fix potential NULL pointer dereference
    - vgacon: Record video mode changes with VT_RESIZEX
    - vt_ioctl: Revert VT_RESIZEX parameter handling removal
    - vt: Fix character height handling with VT_RESIZEX
    - tty: vt: always invoke vc->vc_sw->con_resize callback
    - [x86] drm/i915/gt: Disable HiZ Raw Stall Optimization on broken gen7
    - [amd64] x86/Xen: swap NX determination and GDT setup on BSP
    - nvme-multipath: fix double initialization of ANA state
    - [arm64] rtc: pcf85063: fallback to parent of_node
    - nvmet: use new ana_log_size instead the old one
    - [x86] video: hgafb: correctly handle card detect failure during probe
    - Bluetooth: SMP: Fail if remote and local public keys are identical
.
  [ Salvatore Bonaccorso ]
  * bpf: Wrap aux data inside bpf_sanitize_info container (CVE-2021-33200)
  * bpf: Fix mask direction swap upon off reg sign change (CVE-2021-33200)
  * bpf: No need to simulate speculative domain for immediates (CVE-2021-33200)
  * [armhf] dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode
    (Closes: #988574)
  * [rt] Refresh "ptrace: fix ptrace vs tasklist_lock race"
  * Deal with vc_data ABI changes in 5.10.40
.
linux (5.10.38-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.29
    - [armhf] bus: ti-sysc: Fix warning on unbind if reset is not deasserted
    - [x86] platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2
    - [amd64] bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp
    - net/mlx5e: Enforce minimum value check for ICOSQ size
    - mISDN: fix crash in fritzpci
    - mac80211: Check crypto_aead_encrypt for errors
    - mac80211: choose first enabled channel for monitor
    - [arm64] drm/msm/dsi_pll_7nm: Fix variable usage for pll_lockdet_rate
    - [arm64] drm/msm/adreno: a5xx_power: Don't apply A540 lm_setup to other
      GPUs
    - [arm64] drm/msm: Ratelimit invalid-fence message
    - netfilter: conntrack: Fix gre tunneling over ipv6
    - netfilter: nftables: skip hook overlap logic if flowtable is stale
    - [x86] platform/x86: thinkpad_acpi: Allow the FnLock LED to change state
    - [arm64] drm/msm/disp/dpu1: icc path needs to be set before dpu runtime
      resume
    - block: clear GD_NEED_PART_SCAN later in bdev_disk_changed
    - [x86] platform/x86: intel_pmc_core: Ignore GBE LTR on Tiger Lake platforms
    - [arm64] ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation
    - scsi: target: pscsi: Clean up after failure in pscsi_map_sg()
    - [ia64] mca: allocate early mca with GFP_ATOMIC
    - [ia64] fix format strings for err_inject
    - cifs: revalidate mapping when we open files for SMB1 POSIX
    - cifs: Silently ignore unknown oplock break handle
    - io_uring: fix timeout cancel return code
    - math: Export mul_u64_u64_div_u64
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.30
    - ALSA: aloop: Fix initialization of controls
    - ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1
    - ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model
    - [x86] ASoC: intel: atom: Stop advertising non working S24LE support
    - nfc: fix refcount leak in llcp_sock_bind() (CVE-2020-25670)
    - nfc: fix refcount leak in llcp_sock_connect() (CVE-2020-25671)
    - nfc: fix memory leak in llcp_sock_connect() (CVE-2020-25672)
    - nfc: Avoid endless loops caused by repeated llcp_sock_connect()
    - selinux: make nslot handling in avtab more robust
    - selinux: fix cond_list corruption when changing booleans
    - selinux: fix race between old and new sidtab
    - xen/evtchn: Change irq_info lock to raw_spinlock_t
    - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh
    - [x86] drm/i915: Fix invalid access to ACPI _DSM objects
    - [amd64] IB/hfi1: Fix probe time panic when AIP is enabled with a buggy
      BIOS
    - LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late
    - [ia64] fix user_stack_pointer() for ptrace()
    - ocfs2: fix deadlock between setattr and dio_end_io_write
    - fs: direct-io: fix missing sdio->boundary
    - ethtool: fix incorrect datatype in set_eee ops
    - of: property: fw_devlink: do not link ".*,nr-gpios"
    - [armhf] dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin
    - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
    - ice: Continue probe on link/PHY errors
    - ice: Increase control queue timeout
    - ice: prevent ice_open and ice_stop during reset
    - ice: fix memory allocation call
    - ice: remove DCBNL_DEVRESET bit from PF state
    - ice: Fix for dereference of NULL pointer
    - ice: Use port number instead of PF ID for WoL
    - ice: Cleanup fltr list in case of allocation issues
    - iwlwifi: pcie: properly set LTR workarounds on 22000 devices
    - ice: fix memory leak of aRFS after resuming from suspend
    - net: hso: fix null-ptr-deref during tty device unregistration
    - bpf: Enforce that struct_ops programs be GPL-only
    - bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET
    - ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx
    - bpf: Refcount task stack in bpf_get_task_stack
    - bpf, sockmap: Fix sk->prot unhash op reset
    - bpf, sockmap: Fix incorrect fwd_alloc accounting
    - net: ensure mac header is set in virtio_net_hdr_to_skb()
    - i40e: Fix sparse warning: missing error code 'err'
    - i40e: Fix sparse error: 'vsi->netdev' could be null
    - i40e: Fix sparse error: uninitialized symbol 'ring'
    - i40e: Fix sparse errors in i40e_txrx.c
    - net: sched: sch_teql: fix null-pointer dereference
    - net: sched: fix action overwrite reference counting
    - nl80211: fix beacon head validation
    - nl80211: fix potential leak of ACL params
    - cfg80211: check S1G beacon compat element length
    - mac80211: fix time-is-after bug in mlme
    - mac80211: fix TXQ AC confusion
    - net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind()
    - net: let skb_orphan_partial wake-up waiters.
    - [x86] thunderbolt: Fix a leak in tb_retimer_add()
    - [x86] thunderbolt: Fix off by one in tb_port_find_retimer()
    - usbip: add sysfs_lock to synchronize sysfs code paths
    - usbip: stub-dev synchronize sysfs code paths
    - usbip: vudc synchronize sysfs code paths
    - usbip: synchronize event handler with sysfs code paths
    - driver core: Fix locking bug in deferred_probe_timeout_work_func()
    - scsi: pm80xx: Fix chip initialization failure
    - scsi: target: iscsi: Fix zero tag inside a trace event
    - percpu: make pcpu_nr_empty_pop_pages per chunk type
    - i2c: turn recovery error on init to debug
    - [x86] KVM: x86/mmu: change TDP MMU yield function returns to match
      cond_resched
    - [x86] KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched
    - [x86] KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn
    - [x86] KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter
    - [x86] KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed
    - [x86] KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range
      zap
    - [x86] KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping
    - [x86] KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages
    - [x86] KVM: x86/mmu: preserve pending TLB flush across calls to
      kvm_tdp_mmu_zap_sp
    - net: sched: fix err handler in tcf_action_init()
    - ice: Refactor DCB related variables out of the ice_port_info struct
    - ice: Recognize 860 as iSCSI port in CEE mode
    - xfrm: interface: fix ipv4 pmtu check to honor ip header df
    - xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume
    - [armhf] OMAP4: PM: update ROM return address for OSWR and OFF
    - net: xfrm: Localize sequence counter per network namespace
    - esp: delete NETIF_F_SCTP_CRC bit from features for esp offload
    - [x86] ASoC: SOF: Intel: HDA: fix core status verification
    - xfrm: Fix NULL pointer dereference on policy lookup
    - virtchnl: Fix layout of RSS structures
    - i40e: Added Asym_Pause to supported link modes
    - i40e: Fix kernel oops when i40e driver removes VF's
    - vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP
      reply
    - geneve: do not modify the shared tunnel info when PMTU triggers an ICMP
      reply
    - sch_red: fix off-by-one checks in red_check_params()
    - drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit
    - xfrm: Provide private skb extensions for segmented and hw offloaded ESP
      packets
    - can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE
    - can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE
    - ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso
    - gianfar: Handle error code at MAC address change
    - [arm64,armhf] net: dsa: Fix type was not set for devlink port
    - cxgb4: avoid collecting SGE_QBASE regs during traffic
    - net:tipc: Fix a double free in tipc_sk_mcast_rcv
    - [armhf] net/ncsi: Avoid channel_monitor hrtimer deadlock
    - net: qrtr: Fix memory leak on qrtr_tx_wait failure
    - nfp: flower: ignore duplicate merge hints from FW
    - net: phy: broadcom: Only advertise EEE for supported modes
    - [armhf] ASoC: sunxi: sun4i-codec: fill ASoC card owner (Closes: #980539)
    - net/mlx5e: Fix mapping of ct_label zero
    - net/mlx5e: Fix ethtool indication of connector type
    - net/mlx5: Don't request more than supported EQs
    - net/rds: Fix a use after free in rds_message_map_pages
    - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model
    - i40e: Fix display statistics for veb_tc
    - [arm64] drm/msm: Set drvdata to NULL when msm_drm_init() fails
    - net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...);
    - scsi: ufs: core: Fix task management request completion timeout
    - scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs
    - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb
    - [arm64,riscv64] net: macb: restore cmp registers on resume path
    - clk: fix invalid usage of list cursor in register
    - clk: fix invalid usage of list cursor in unregister
    - workqueue: Move the position of debug_work_activate() in __queue_work()
    - [s390x] cpcmd: fix inline assembly register clobbering
    - net: openvswitch: conntrack: simplify the return expression of
      ovs_ct_limit_get_default_limit()
    - openvswitch: fix send of uninitialized stack memory in ct limit reply
    - i2c: designware: Adjust bus_freq_hz when refuse high speed mode set
    - iwlwifi: fix 11ax disabled bit in the regulatory capability flags
    - tipc: increment the tmp aead refcnt before attaching it
    - [arm64] net: hns3: clear VF down state bit before request link status
    - net/mlx5: Fix placement of log_max_flow_counter
    - net/mlx5: Fix PPLM register mapping
    - net/mlx5: Fix PBMC register mapping
    - RDMA/cxgb4: check for ipv6 address properly while destroying listener
    - RDMA/qedr: Fix kernel panic when trying to access recv_cq
    - [arm*] drm/vc4: crtc: Reduce PV fifo threshold on hvs4
    - i40e: Fix parameters in aq_get_phy_register()
    - RDMA/addr: Be strict with gid size
    - [armhf] clk: socfpga: fix iomem pointer cast on 64-bit
    - dt-bindings: net: ethernet-controller: fix typo in NVMEM
    - net: sched: bump refcount for new action in ACT replace mode
    - gpiolib: Read "gpio-line-names" from a firmware node
    - cfg80211: remove WARN_ON() in cfg80211_sme_connect
    - net: tun: set tun->dev->addr_len during TUNSETLINK processing
    - drivers: net: fix memory leak in atusb_probe
    - drivers: net: fix memory leak in peak_usb_create_dev
    - net: mac802154: Fix general protection fault (CVE-2021-33033)
    - net: ieee802154: nl-mac: fix check on panid
    - net: ieee802154: fix nl802154 del llsec key
    - net: ieee802154: fix nl802154 del llsec dev
    - net: ieee802154: fix nl802154 add llsec key
    - net: ieee802154: fix nl802154 del llsec devkey
    - net: ieee802154: forbid monitor for set llsec params
    - net: ieee802154: forbid monitor for del llsec seclevel
    - net: ieee802154: stop dump llsec params for monitors
    - Revert "net: sched: bump refcount for new action in ACT replace mode"
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.31
    - gfs2: Flag a withdraw if init_threads() fails
    - [arm64] KVM: Hide system instruction access to Trace registers
    - [arm64] KVM: Disable guest access to trace filter controls
    - [armhf] drm/imx: imx-ldb: fix out of bounds array access warning
    - gfs2: report "already frozen/thawed" errors
    - ftrace: Check if pages were allocated before calling free_pages()
    - [arm64,armhf] drm/tegra: dc: Don't set PLL clock to 0Hz
    - [arm64,armhf] gpu: host1x: Use different lock classes for each client
    - XArray: Fix splitting to non-zero orders
    - block: only update parent bi_status when bio fail
    - null_blk: fix command timeout completion handling
    - io_uring: don't mark S_ISBLK async work as unbounded
    - [riscv64] entry: fix misaligned base for excp_vect_table
    - block: don't ignore REQ_NOWAIT for direct IO
    - netfilter: x_tables: fix compat match/target pad out-of-bound write
    - net: sfp: relax bitrate-derived mode check
    - net: sfp: cope with SFPs that set both LOS normal and LOS inverted
    - xen/events: fix setting irq affinity
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.32
    - net/sctp: fix race condition in sctp_destroy_sock
    - gpio: sysfs: Obey valid_mask
    - dmaengine: Fix a double free in dma_async_device_register
    - [x86] ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade()
    - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
    - xfrm: BEET mode doesn't support fragments for inner packets
    - ASoC: max98373: Changed amp shutdown register as volatile
    - ASoC: max98373: Added 30ms turn on/off time delay
    - [x86] gpu/xen: Fix a use after free in xen_drm_drv_init
    - neighbour: Disregard DEAD dst in neigh_update
    - [arm64] drm/msm: Fix a5xx/a6xx timestamps
    - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state
    - iwlwifi: add support for Qu with AX201 device
    - net: ieee802154: stop dump llsec keys for monitors
    - net: ieee802154: forbid monitor for add llsec key
    - net: ieee802154: forbid monitor for del llsec key
    - net: ieee802154: stop dump llsec devs for monitors
    - net: ieee802154: forbid monitor for add llsec dev
    - net: ieee802154: forbid monitor for del llsec dev
    - net: ieee802154: stop dump llsec devkeys for monitors
    - net: ieee802154: forbid monitor for add llsec devkey
    - net: ieee802154: forbid monitor for del llsec devkey
    - net: ieee802154: stop dump llsec seclevels for monitors
    - net: ieee802154: forbid monitor for add llsec seclevel
    - pcnet32: Use pci_resource_len to validate PCI resource
    - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
    - Input: i8042 - fix Pegatron C15B ID entry
    - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices
    - readdir: make sure to verify directory entry for legacy interfaces too
    - [arm64] fix inline asm in load_unaligned_zeropad()
    - [arm64] alternatives: Move length validation in alternative_{insn, endif}
    - vfio/pci: Add missing range check in vfio_pci_mmap
    - scsi: libsas: Reset num_scatter if libata marks qc as NODATA
    - ixgbe: fix unbalanced device enable/disable in suspend/resume
    - netfilter: flowtable: fix NAT IPv6 offload mangling
    - netfilter: conntrack: do not print icmpv6 as unknown via /proc
    - ice: Fix potential infinite loop when using u8 loop counter
    - libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC
    - netfilter: bridge: add pre_exit hooks for ebtable unregistration
    - netfilter: arp_tables: add pre_exit hook for table unregister
    - [arm64,riscv64] net: macb: fix the restore of cmp registers
    - net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta
    - netfilter: nft_limit: avoid possible divide error in nft_limit_init
    - net/mlx5e: Fix setting of RS FEC mode
    - net: sit: Unregister catch-all devices
    - net: ip6_tunnel: Unregister catch-all devices
    - mm: ptdump: fix build failure
    - net: Make tcp_allowed_congestion_control readonly in non-init netns
    - i40e: fix the panic when running bpf in xdpdrv mode
    - ethtool: pause: make sure we init driver stats
    - [ia64] tools: remove inclusion of ia64-specific version of errno.h header
    - gro: ensure frag0 meets IP header alignment
    - [armhf] OMAP2+: Fix warning for omap_init_time_of()
    - [armhf] OMAP2+: Fix uninitialized sr_inst
    - [arm64] dts: allwinner: Fix SD card CD GPIO for SOPine systems
    - [arm64] dts: allwinner: h6: beelink-gs1: Remove ext. 32 kHz osc reference
    - bpf: Use correct permission flag for mixed signed bounds arithmetic
      (CVE-2021-29155)
    - [x86] KVM: VMX: Convert vcpu_vmx.exit_reason to a union
    - [x86] KVM: VMX: Don't use vcpu->run->internal.ndata as an array index
      (CVE-2021-3501)
    - r8169: tweak max read request size for newer chips also in jumbo mtu mode
    - r8169: don't advertise pause in jumbo mode
    - bpf: Ensure off_reg has no mixed signed bounds for all types
      (CVE-2021-29155)
    - bpf: Move off_reg into sanitize_ptr_alu (CVE-2021-29155)
    - [armel,armhf] 9071/1: uprobes: Don't hook on thumb instructions
    - [arm64] mte: Ensure TIF_MTE_ASYNC_FAULT is set atomically
    - bpf: Rework ptr_limit into alu_limit and add common error path
      (CVE-2021-29155)
    - bpf: Improve verifier error messages for users (CVE-2021-29155)
    - bpf: Move sanitize_val_alu out of op switch
    - net: phy: marvell: fix detection of PHY on Topaz switches
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.33
    - [armhf] gpio: omap: Save and restore sysconfig
    - [x86] pinctrl: lewisburg: Update number of pins in community
    - block: return -EBUSY when there are open partitions in blkdev_reread_part
    - pinctrl: core: Show pin numbers for the controllers with base = 0
    - [arm64] dts: allwinner: Revert SD card CD GPIO for Pine64-LTS
    - bpf: Permits pointers on stack for helper calls
    - bpf: Allow variable-offset stack access
    - bpf: Refactor and streamline bounds check into helper (CVE-2021-29155)
    - bpf: Tighten speculative pointer arithmetic mask
    - locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
    - [x86] perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3
    - [x86] perf/x86/kvm: Fix Broadwell Xeon stepping in isolation_ucodes[]
    - HID: alps: fix error return code in alps_input_configured()
    - HID cp2112: fix support for multiple gpiochips
    - HID: wacom: Assign boolean values to a bool variable
    - net: geneve: check skb is large enough for IPv4/IPv6 header
    - [arm64,armhf] dmaengine: tegra20: Fix runtime PM imbalance on error
    - [s390x] entry: save the caller of psw_idle
    - [arm64] kprobes: Restore local irqflag if kprobes is cancelled
    - xen-netback: Check for hotplug-status existence before watching
    - [x86] crash: Fix crash_setup_memmap_entries() out-of-bounds access
    - net: hso: fix NULL-deref on disconnect regression
    - USB: CDC-ACM: fix poison/unpoison imbalance (Closes: #986995)
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.34
    - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
    - [x86] mei: me: add Alder Lake P device id.
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.35
    - [mips*] Do not include hi and lo in clobber list for R6
    - netfilter: conntrack: Make global sysctls readonly in non-init netns
    - net: usb: ax88179_178a: initialize local variables before use
    - igb: Enable RSS for Intel I211 Ethernet Controller
    - bpf: Fix masking negation logic upon negative dst register
      (CVE-2021-31829)
    - bpf: Fix leakage of uninitialized bpf stack under speculation
      (CVE-2021-31829)
    - net: qrtr: Avoid potential use after free in MHI send
    - perf data: Fix error return code in perf_data__create_dir()
    - capabilities: require CAP_SETFCAP to map uid 0
    - perf ftrace: Fix access to pid in array when setting a pid filter
    - driver core: add a min_align_mask field to struct device_dma_parameters
    - swiotlb: add a IO_TLB_SIZE define
    - swiotlb: factor out an io_tlb_offset helper
    - swiotlb: factor out a nr_slots helper
    - swiotlb: clean up swiotlb_tbl_unmap_single
    - swiotlb: refactor swiotlb_tbl_map_single
    - swiotlb: don't modify orig_addr in swiotlb_tbl_sync_single
    - swiotlb: respect min_align_mask
    - nvme-pci: set min_align_mask
    - ovl: fix leaked dentry
    - ovl: allow upperdir inside lowerdir
    - ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
    - USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
    - USB: Add reset-resume quirk for WD19's Realtek Hub
    - [x86] platform/x86: thinkpad_acpi: Correct thermal sensor allocation
    - perf/core: Fix unconditional security_locked_down() call
    - vfio: Depend on MMU
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.36
    - bus: mhi: core: Fix check for syserr at power_up
    - bus: mhi: core: Clear configuration from channel context during reset
    - bus: mhi: core: Sanity check values from remote device before use
    - dyndbg: fix parsing file query without a line-range suffix
    - [s390x] disassembler: increase ebpf disasm buffer size
    - [s390x] zcrypt: fix zcard and zqueue hot-unplug memleak
    - [arm64,x86] tpm: acpi: Check eventlog signature before using it
    - ftrace: Handle commands when closing set_ftrace_filter file
    - ecryptfs: fix kernel panic with null dev_name
    - fs/epoll: restore waking from ep_done_scan()
    - mtd: spi-nor: core: Fix an issue of releasing resources during read/write
    - Revert "mtd: spi-nor: macronix: Add support for mx25l51245g"
    - erofs: add unsupported inode i_format check
    - [armhf] spi: stm32-qspi: fix pm_runtime usage_count counter
    - [armhf] spi: spi-ti-qspi: Free DMA resources
    - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
    - scsi: mpt3sas: Block PCI config access from userspace during reset
    - mmc: sdhci: Check for reset prior to DMA address unmap
    - mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
      controllers
    - [arm64,armhf] mmc: sdhci-tegra: Add required callbacks to set/clear CQE_EN
      bit
    - mmc: block: Update ext_csd.cache_ctrl if it was written
    - mmc: block: Issue a cache flush only when it's enabled
    - mmc: core: Do a power cycle when the CMD11 fails
    - mmc: core: Set read only for SD cards with permanent write protect bit
    - mmc: core: Fix hanging on I/O during system suspend for removable cards
    - [arm64,armhf] irqchip/gic-v3: Do not enable irqs when handling spurious
      interrups
    - cifs: Return correct error code from smb2_get_enc_key
    - cifs: fix out-of-bound memory access when calling smb3_notify() at mount
      point
    - cifs: detect dead connections only when echoes are enabled.
    - smb2: fix use-after-free in smb2_ioctl_query_info()
    - btrfs: handle remount to no compress during compression
    - btrfs: fix metadata extent leak after failure to create subvolume
    - [x86] intel_th: pci: Add Rocket Lake CPU support
    - btrfs: fix race between transaction aborts and fsyncs leading to
      use-after-free
    - posix-timers: Preserve return value in clock_adjtime32()
    - fbdev: zero-fill colormap in fbcmap.c
    - [armhf] bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices
      first
    - staging: wimax/i2400m: fix byte-order issue
    - bus: mhi: core: Destroy SBL devices when moving to mission mode
    - crypto: api - check for ERR pointers in crypto_destroy_tfm()
    - [x86] crypto: qat - fix unmap invalid dma address
    - usb: gadget: uvc: add bInterval checking for HS mode
    - usb: webcam: Invalid size of Processing Unit Descriptor
    - [x86] genirq/matrix: Prevent allocation counter corruption
    - usb: gadget: f_uac2: validate input parameters
    - usb: gadget: f_uac1: validate input parameters
    - [arm64,armhf] usb: dwc3: gadget: Ignore EP queue requests during bus reset
    - usb: xhci: Fix port minor revision
    - PCI: PM: Do not read power state in pci_enable_device_flags()
    - [arm64,armhf] soc/tegra: pmc: Fix completion of power-gate toggling
    - [arm64] dts: imx8mq-librem5-r3: Mark buck3 as always on
    - [arm64] tee: optee: do not check memref size on return from Secure World
    - [arm64,x86] soundwire: cadence: only prepare attached devices on clock
      stop
    - [arm*] perf/arm_pmu_platform: Use dev_err_probe() for IRQ errors
    - [arm*] perf/arm_pmu_platform: Fix error handling
    - random: initialize ChaCha20 constants with correct endianness
    - xhci: check port array allocation was successful before dereferencing it
    - xhci: check control context is valid before dereferencing it.
    - xhci: fix potential array out of bounds with several interrupters
    - bus: mhi: core: Clear context for stopped channels from remove()
    - [arm64] spi: qup: fix PM reference leak in spi_qup_remove()
    - [arm64,armhf] usb: musb: fix PM reference leak in musb_irq_work()
    - usb: core: hub: Fix PM reference leak in usb_port_resume()
    - [arm64,armhf] usb: dwc3: gadget: Check for disabled LPM quirk
    - tty: n_gsm: check error while registering tty devices
    - [x86] intel_th: Consistency and off-by-one fix
    - [armhf] phy: phy-twl4030-usb: Fix possible use-after-free in
      twl4030_usb_remove()
    - [arm64] crypto: sun8i-ce - Fix PM reference leak in sun8i_ce_probe()
    - [armhf] crypto: stm32/hash - Fix PM reference leak on stm32-hash.c
    - [armhf] crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c
    - [x86] platform/x86: intel_pmc_core: Don't use global pmcdev in quirks
    - spi: sync up initial chipselect state
    - btrfs: do proper error handling in create_reloc_root
    - btrfs: do proper error handling in btrfs_update_reloc_root
    - btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
    - drm: Added orientation quirk for OneGX1 Pro
    - drm/qxl: do not run release if qxl failed to init
    - drm/qxl: release shadow on shutdown
    - drm/ast: Fix invalid usage of AST_MAX_HWC_WIDTH in cursor atomic_check
    - drm/ast: fix memory leak when unload the driver
    - drm/amd/display: Check for DSC support instead of ASIC revision
    - drm/amdgpu/display: buffer INTERRUPT_LOW_IRQ_CONTEXT interrupt work
    - scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
    - scsi: lpfc: Fix pt2pt connection does not recover after LOGO
    - drm/amdgpu: Fix some unload driver issues
    - sched/pelt: Fix task util_est update filtering
    - kvfree_rcu: Use same set of GFP flags as does single-argument
    - scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
    - [x86] media: ite-cir: check for receive overflow
    - power: supply: bq27xxx: fix power_avg for newer ICs
    - media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
    - media: gspca/sq905.c: fix uninitialized variable
    - drm/amdgpu: mask the xgmi number of hops reported from psp to kfd
    - drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
    - drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool'
    - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
    - scsi: qla2xxx: Fix use after free in bsg
    - [arm64,armhf] mmc: sdhci-esdhc-imx: validate pinctrl before use it
    - mmc: sdhci-pci: Add PCI IDs for Intel LKF
    - ata: ahci: Disable SXS for Hisilicon Kunpeng920
    - nvmet: return proper error code from discovery ctrl
    - scsi: smartpqi: Use host-wide tag space
    - scsi: smartpqi: Correct request leakage during reset operations
    - scsi: smartpqi: Add new PCI IDs
    - scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
    - media: em28xx: fix memory leak
    - media: vivid: update EDID
    - [arm64] drm/msm/dp: Fix incorrect NULL check kbot warnings in DP driver
    - [armhf] clk: socfpga: arria10: Fix memory leak of socfpga_clk on error
      return
    - media: dvb-usb: fix memory leak in dvb_usb_adapter_init
    - media: gscpa/stv06xx: fix memory leak
    - sched/fair: Ignore percpu threads for imbalance pulls
    - [arm64] drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
    - [arm64] drm/msm/mdp5: Do not multiply vclk line count by 100
    - drm/amdgpu/ttm: Fix memory leak userptr pages
    - drm/radeon/ttm: Fix memory leak userptr pages
    - drm/amd/display: Try YCbCr420 color when YCbCr444 fails
    - drm/amdgpu: fix NULL pointer dereference
    - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO
      response
    - scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode
    - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
    - mfd: intel-m10-bmc: Fix the register access range
    - mfd: da9063: Support SMBus and I2C mode
    - scsi: libfc: Fix a format specifier
    - perf: Rework perf_event_exit_event()
    - sched,fair: Alternative sched_slice()
    - [s390x] archrandom: add parameter check for s390_arch_random_generate
    - sched,psi: Handle potential task count underflow bugs more gracefully
    - [i386] ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
    - ALSA: hda/conexant: Re-order CX5066 quirk table entries
    - [i386] ALSA: sb: Fix two use after free in snd_sb_qsound_build
    - ALSA: usb-audio: Explicitly set up the clock selector
    - ALSA: usb-audio: Add dB range mapping for Sennheiser Communications
      Headset PC 8
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G7
    - ALSA: hda/realtek: GA503 use same quirks as GA401
    - ALSA: hda/realtek: fix mic boost on Intel NUC 8
    - ALSA: hda/realtek - Headset Mic issue on HP platform
    - ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
    - ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
    - [x86] tools/power/turbostat: Fix turbostat for AMD Zen CPUs
      (Closes: #985681)
    - btrfs: fix race when picking most recent mod log operation for an old root
    - [arm64] vdso: Discard .note.gnu.property sections in vDSO
    - Makefile: Move -Wno-unused-but-set-variable out of GCC only block
    - fs: fix reporting supported extra file attributes for statx()
    - virtiofs: fix memory leak in virtio_fs_probe()
    - ubifs: Only check replay with inode type to judge if inode linked
    - f2fs: fix error handling in f2fs_end_enable_verity()
    - f2fs: fix to avoid out-of-bounds memory access (CVE-2021-3506)
    - openvswitch: fix stack OOB read while fragmenting IPv4 packets
    - [arm64] ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe
      failure
    - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
    - NFS: Don't discard pNFS layout segments that are marked for return
    - NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
    - jffs2: Fix kasan slab-out-of-bounds problem
    - jffs2: Hook up splice_write callback
    - [powerpc*] powernv: Enable HAIL (HV AIL) for ISA v3.1 processors
    - [powerpc*] eeh: Fix EEH handling for hugepages in ioremap space.
    - [x86] intel_th: pci: Add Alder Lake-M support
    - [arm64,x86] tpm: efi: Use local variable for calculating final log size
    - [arm64,x86] tpm: vtpm_proxy: Avoid reading host log when using a virtual
      device
    - [armhf] crypto: arm/curve25519 - Move '.fpu' after '.arch'
    - md/raid1: properly indicate failure when ending a failed write request
    - dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
      sequences
    - fuse: fix write deadlock
    - exfat: fix erroneous discard when clear cluster bit
    - sfc: farch: fix TX queue lookup in TX flush done handling
    - sfc: farch: fix TX queue lookup in TX event handling
    - security: commoncap: fix -Wstringop-overread warning
    - Fix misc new gcc warnings
    - jffs2: check the validity of dstlen in jffs2_zlib_compress()
    - smb3: when mounting with multichannel include it in requested capabilities
    - smb3: do not attempt multichannel to server which does not support it
    - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT
      op")
    - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
    - [x86] cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
    - ext4: annotate data race in start_this_handle()
    - ext4: annotate data race in jbd2_journal_dirty_metadata()
    - ext4: fix check to prevent false positive report of incorrect used inodes
    - ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
    - ext4: fix error code in ext4_commit_super
    - ext4: fix ext4_error_err save negative errno into superblock
    - ext4: fix error return code in ext4_fc_perform_commit()
    - ext4: allow the dax flag to be set and cleared on inline directories
    - ext4: Fix occasional generic/418 failure
    - media: dvbdev: Fix memory leak in dvb_media_device_free()
    - media: dvb-usb: Fix use-after-free access
    - media: dvb-usb: Fix memory leak at error in dvb_usb_device_init()
    - media: v4l2-ctrls: fix reference to freed memory
    - [arm64] media: venus: hfi_parser: Don't initialize parser on v1
    - usb: gadget: dummy_hcd: fix gpf in gadget_setup
    - usb: gadget: Fix double free of device descriptor pointers
    - usb: gadget/function/f_fs string table fix for multiple languages
    - [arm64,armhf] usb: dwc3: gadget: Remove FS bInterval_m1 limitation
    - [arm64,armhf] usb: dwc3: gadget: Fix START_TRANSFER link state check
    - [arm64,armhf] usb: dwc3: core: Do core softreset when switch mode
    - [arm*] usb: dwc2: Fix session request interrupt handler
    - tty: fix memory leak in vc_deallocate
    - [x86] tools/power turbostat: Fix offset overflow issue in index converting
    - tracing: Map all PIDs to command lines
    - tracing: Restructure trace_clock_global() to never block
    - dm space map common: fix division bug in sm_ll_find_free_block()
    - dm integrity: fix missing goto in bitmap_flush_interval error handling
    - dm rq: fix double free of blk_mq_tag_set in dev remove after table load
      fails
    - lib/vsprintf.c: remove leftover 'f' and 'F' cases from bstr_printf()
    - [arm*] thermal/drivers/cpufreq_cooling: Fix slab OOB issue
    - thermal/core/fair share: Lock the thermal zone while looping over
      instances
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.37
    - Bluetooth: verify AMP hci_chan before amp_destroy (CVE-2021-33034)
    - bluetooth: eliminate the potential race condition when removing the HCI
      controller (CVE-2021-32399)
    - net/nfc: fix use-after-free llcp_sock_bind/connect (CVE-2021-23134)
    - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers
      (CVE-2021-3491)
    - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL"
    - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode()
    - [amd64] tty: moxa: fix TIOCSSERIAL jiffies conversions
    - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions
    - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check
    - [amd64] tty: moxa: fix TIOCSSERIAL permission check
    - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for fixed
      supply
    - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for pps
      supply
    - [x86] usb: typec: tcpm: update power supply once partner accepts
    - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
    - PCI: Allow VPD access for QLogic ISP2722
    - [x86] KVM: Defer the MMU unload to the normal path on an global INVPCID
    - [arm64] PCI: xgene: Fix cfg resource mapping
    - PM / devfreq: Unlock mutex and free devfreq struct in error path
    - iio: inv_mpu6050: Fully validate gyro and accel scale writes
    - iio:accel:adis16201: Fix wrong axis assignment that prevents loading
    - iio:adc:ad7476: Fix remove handling
    - misc: lis3lv02d: Fix false-positive WARN on various HP models
    - [x86] misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
    - [x86] misc: vmw_vmci: explicitly initialize vmci_datagram payload
    - selinux: add proper NULL termination to the secclass_map permissions
    - [x86] sched: Treat Intel SNC topology as default, COD as exception
    - async_xor: increase src_offs when dropping destination page
    - md/bitmap: wait for external bitmap writes to complete during tear down
    - md-cluster: fix use-after-free issue when removing rdev
    - md: split mddev_find
    - md: factor out a mddev_find_locked helper from mddev_find
    - md: md_open returns -EBUSY when entering racing area
    - md: Fix missing unused status line of /proc/mdstat
    - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
    - cfg80211: scan: drop entry from hidden_list on overflow
    - rtw88: Fix array overrun in rtw_get_tx_power_params()
    - mt76: fix potential DMA mapping leak
    - [amd64] drm/i915/gvt: Fix virtual display setup for BXT/APL
    - [amd64] drm/i915/gvt: Fix vfio_edid issue for BXT/APL
    - drm/qxl: use ttm bo priorities
    - [arm64,armhf] drm/panfrost: Clear MMU irqs before handling the fault
    - [arm64,armhf] drm/panfrost: Don't try to map pages that are already mapped
    - drm/radeon: fix copy of uninitialized variable back to userspace
    - drm/dp_mst: Revise broadcast msg lct & lcr
    - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast
    - drm: bridge/panel: Cleanup connector on bridge detach
    - drm/amd/display: Reject non-zero src_y and src_x for video planes
    - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2
    - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
    - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
    - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
    - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
    - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
    - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
    - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
    - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
    - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
    - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
    - ALSA: hda/realtek: Re-order ALC662 quirk table entries
    - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
    - ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable
    - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32
    - [s390x] KVM: VSIE: correctly handle MVPG when in VSIE
    - [s390x] KVM: split kvm_s390_logical_to_effective
    - [s390x] KVM: fix guarded storage control register handling
    - [s390x] fix detection of vector enhancements facility 1 vs. vector packed
      decimal facility
    - [s390x] KVM: VSIE: fix MVPG handling for prefixing and MSO
    - [s390x] KVM: split kvm_s390_real_to_abs
    - [s390x] KVM: extend kvm_s390_shadow_fault to return entry pointer
    - [x86] KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with
      64-bit
    - [x86] KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads
    - [x86] KVM: nSVM: Set the shadow root level to the TDP level for nested NPT
    - [x86] KVM: SVM: Don't strip the C-bit from CR2 on #PF interception
    - [x86] KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are
      created
    - [x86] KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP
      unsupported
    - [x86] KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch
    - [x86] KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in
      !64-bit
    - [x86] KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit
    - [arm64] KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read
    - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
    - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
    - [arm64] KVM: Fully zero the vcpu state on reset
    - [arm64] KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read
    - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit"
    - Revert "i3c master: fix missing destroy_workqueue() on error in
      i3c_master_register"
    - ovl: fix missing revert_creds() on error path
    - Revert "drm/qxl: do not run release if qxl failed to init"
    - [x86] usb: gadget: pch_udc: Revert d3cb25a12138 completely
    - Revert "tools/power turbostat: adjust for temperature offset"
    - [arm64] firmware: xilinx: Fix dereferencing freed memory
    - [armhf] memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
    - [armhf] ARM: dts: exynos: correct fuel gauge interrupt trigger level on
      GT-I9100
    - [armhf] ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
    - [armhf] serial: stm32: fix code cleaning warnings and checks
    - [armhf] serial: stm32: add "_usart" prefix in functions name
    - [armhf] serial: stm32: fix probe and remove order for dma
    - [armhf] serial: stm32: Use of_device_get_match_data()
    - [armhf] serial: stm32: fix startup by enabling usart for reception
    - [armhf] serial: stm32: fix incorrect characters on console
    - [armhf] serial: stm32: fix TX and RX FIFO thresholds
    - [armhf] serial: stm32: fix a deadlock condition with wakeup event
    - [armhf] serial: stm32: fix wake-up flag handling
    - [armhf] serial: stm32: fix a deadlock in set_termios
    - [armhf] serial: stm32: fix tx dma completion, release channel
    - [armhf] serial: stm32: call stm32_transmit_chars locked
    - [armhf] serial: stm32: fix FIFO flush in startup and set_termios
    - [armhf] serial: stm32: add FIFO flush when port is closed
    - [armhf] serial: stm32: fix tx_empty condition
    - [x86] usb: typec: tps6598x: Fix return value check in tps6598x_probe()
    - regmap: set debugfs_name to NULL after it is freed
    - [arm64,armhf] spi: rockchip: avoid objtool warning
    - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions()
    - mtd: don't lock when recursively deleting partitions
    - mtd: maps: fix error return code of physmap_flash_remove()
    - [arm64] dts: qcom: db845c: fix correct powerdown pin for WSA881x
    - [armhf] spi: stm32: drop devres version of spi_register_master
    - [armhf] spi: stm32: Fix use-after-free on unbind
    - [x86] microcode: Check for offline CPUs before requesting new microcode
    - devtmpfs: fix placement of complete() call
    - [x86] usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
    - [x86] usb: gadget: pch_udc: Check if driver is present before calling
      ->setup()
    - [x86] usb: gadget: pch_udc: Check for DMA mapping error
    - [x86] usb: gadget: pch_udc: Initialize device pointer before use
    - [x86] usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard
      (v1)
    - [amd64] crypto: ccp - fix command queuing to TEE ring buffer
    - [x86] crypto: qat - don't release uninitialized resources
    - [x86] crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
    - dt-bindings: serial: stm32: Use 'type: object' instead of false for
      'additionalProperties'
    - mtd: require write permissions for locking and badblock ioctls
    - [arm64] bus: qcom: Put child node before return
    - soundwire: bus: Fix device found flag correctly
    - NFSD: Fix sparse warning in nfs4proc.c
    - NFSv4.2: fix copy stateid copying for the async copy
    - crypto: poly1305 - fix poly1305_core_setkey() declaration
    - [x86] crypto: qat - fix error path in adf_isr_resource_alloc()
    - [armhf] usb: gadget: aspeed: fix dma map failure
    - [arm64] drivers: nvmem: Fix voltage settings for QTI qfprom-efuse
    - driver core: platform: Declare early_platform_cleanup() prototype
    - [armel,armhf] memory: pl353: fix mask of ECC page_size config register
    - soundwire: stream: fix memory leak in stream config error path
    - [arm64] firmware: qcom_scm: Make __qcom_scm_is_call_available() return
      bool
    - [arm64] firmware: qcom_scm: Reduce locking section for __get_convention()
    - [arm64] firmware: qcom_scm: Workaround lack of "is available" call on
      SC7180
    - [arm64,armhf] irqchip/gic-v3: Fix OF_BAD_ADDR error handling
    - [x86] staging: rtl8192u: Fix potential infinite loop
    - PM / devfreq: Use more accurate returned new_freq as resume_freq
    - [armhf] clocksource/drivers/timer-ti-dm: Fix posted mode status check
      order
    - [armhf] clocksource/drivers/timer-ti-dm: Add missing
      set_state_oneshot_stopped
    - spi: Fix use-after-free with devm_spi_alloc_*
    - [arm64] soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
    - [arm64] soc: qcom: mdt_loader: Detect truncated read of segments
    - PM: runtime: Replace inline function pm_runtime_callbacks_present()
    - [amd64,arm64] ACPI: CPPC: Replace cppc_attr with kobj_attribute
    - [x86] crypto: qat - Fix a double free in adf_create_ring
    - [arm64] cpufreq: armada-37xx: Fix setting TBG parent for load levels
    - [arm64] clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU
      PM clock
    - [arm64] cpufreq: armada-37xx: Fix the AVS value for load L1
    - [arm64] clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250
      Mhz to 1 GHz
    - [arm64] clk: mvebu: armada-37xx-periph: Fix workaround for switching from
      L1 to L0
    - [arm64] cpufreq: armada-37xx: Fix driver cleanup when registration failed
    - [arm64] cpufreq: armada-37xx: Fix determining base CPU frequency
    - USB: cdc-acm: fix unprivileged TIOCCSERIAL
    - USB: cdc-acm: fix TIOCGSERIAL implementation
    - tty: actually undefine superseded ASYNC flags
    - tty: fix return value for unsupported ioctls
    - tty: fix return value for unsupported termiox ioctls
    - serial: core: return early on unsupported ioctls
    - node: fix device cleanups in error handling code
    - crypto: chelsio - Read rxchannel-id from firmware
    - usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
    - security: keys: trusted: fix TPM2 authorizations
    - [x86] platform/x86: pmc_atom: Match all Beckhoff Automation baytrail
      boards with critclk_systems DMI table
    - [armhf] dts: aspeed: Rainier: Fix humidity sensor bus address
    - [x86] Drivers: hv: vmbus: Use after free in __vmbus_open()
    - [x86] Drivers: hv: vmbus: Increase wait time for VMbus unload
    - [x86] PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820
      integrity check
    - [arm*] usb: dwc2: Fix host mode hibernation exit with remote wakeup flow.
    - [arm*] usb: dwc2: Fix hibernation between host and device modes.
    - ttyprintk: Add TTY hangup callback.
    - [armhf] serial: omap: don't disable rs485 if rts gpio is missing
    - [armhf] serial: omap: fix rs485 half-duplex filtering
    - xen-blkback: fix compatibility bug with single page rings
    - [armhf] soc: aspeed: fix a ternary sign expansion bug
    - [armhf] drm/tilcdc: send vblank event when disabling crtc
    - [armhf] drm/stm: Fix bus_flags handling
    - drm/amd/display: Fix off by one in hdmi_14_process_transaction()
    - sched/fair: Fix shift-out-of-bounds in load_balance()
    - afs: Fix updating of i_mode due to 3rd party change
    - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter()
    - media: vivid: fix assignment of dev->fbuf_out_flags
    - media: saa7134: use sg_dma_len when building pgtable
    - media: saa7146: use sg_dma_len when building pgtable
    - [armhf] media: aspeed: fix clock handling logic
    - drm/probe-helper: Check epoch counter in output_poll_execute()
    - [arm64] media: venus: core: Fix some resource leaks in the error path of
      'venus_probe()'
    - media: m88ds3103: fix return value check in m88ds3103_probe()
    - media: m88rs6000t: avoid potential out-of-bounds reads on arrays
    - [x86] kprobes: Fix to check non boostable prefixes correctly
    - sata_mv: add IRQ checks
    - ata: libahci_platform: fix IRQ check
    - seccomp: Fix CONFIG tests for Seccomp_filters
    - nvme-tcp: block BH in sk state_change sk callback
    - nvmet-tcp: fix incorrect locking in state_change sk callback
    - [armhf] clk: imx: Fix reparenting of UARTs not associated with stdout
    - nvme: retrigger ANA log update if group descriptor isn't found
    - media: v4l2-ctrls.c: fix race condition in hdl->requests list
    - vfio/pci: Move VGA and VF initialization to functions
    - vfio/pci: Re-order vfio_pci_probe()
    - [amd64] vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
    - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct
    - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect()
    - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check()
    - scsi: pm80xx: Fix potential infinite loop
    - scsi: ufs: ufshcd-pltfrm: Fix deferred probing
    - [amd64] scsi: hisi_sas: Fix IRQ checks
    - [powerpc*] scsi: ibmvfc: Fix invalid state machine BUG_ON()
    - nvmet-tcp: fix a segmentation fault during io parsing error
    - nvme-pci: don't simple map sgl when sgls are disabled
    - [armhf] HSI: core: fix resource leaks in hsi_add_client_from_dt()
    - [amd64] x86/events/amd/iommu: Fix sysfs type mismatch
    - [x86] perf/amd/uncore: Fix sysfs type mismatch
    - io_uring: fix overflows checks in provide buffers
    - sched/debug: Fix cgroup_path[] serialization
    - drivers/block/null_blk/main: Fix a double free in null_init.
    - xsk: Respect device's headroom and tailroom on generic xmit path
    - HID: plantronics: Workaround for double volume key presses
    - RDMA/mlx5: Fix mlx5 rates to IB rates map
    - [x86] KVM: x86/mmu: Retry page faults that hit an invalid memslot
    - Bluetooth: avoid deadlock between hci_dev->lock and socket lock
    - bpftool: Fix maybe-uninitialized warnings
    - iommu: Check dev->iommu in iommu_dev_xxx functions
    - [amd64] iommu/vt-d: Reject unsupported page request modes
    - [powerpc*] prom: Mark identical_pvr_fixup as __init
    - inet: use bigger hash table for IP ID generation
    - [arm64,armhf] pinctrl: pinctrl-single: remove unused parameter
    - [arm64,armhf] pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when
      bits_per_mux is not zero
    - [mips64el,mipsel] loongson64: fix bug when PAGE_SIZE > 16KB
    - RDMA/mlx5: Fix drop packet rule in egress table
    - IB/isert: Fix a use after free in isert_connect_request
    - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP
    - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
    - net: phy: lan87xx: fix access to wrong register of LAN87xx
    - udp: never accept GSO_FRAGLIST packets
    - [powerpc*] pseries: Only register vio drivers if vio bus exists
    - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start()
    - bug: Remove redundant condition check in report_bug
    - RDMA/core: Fix corrupted SL on passive side
    - nfc: pn533: prevent potential memory corruption
    - [arm64] net: hns3: Limiting the scope of vector_ring_chain variable
    - [amd64] iommu/vt-d: Don't set then clear private data in
      prq_event_thread()
    - iommu: Fix a boundary issue to avoid performance drop
    - [amd64] iommu/vt-d: Report right snoop capability when using FL for IOVA
    - [amd64] iommu/vt-d: Report the right page fault address
    - [amd64] iommu/vt-d: Preset Access/Dirty bits for IOVA over FL
    - [amd64] iommu/vt-d: Remove WO permissions on second-level paging entries
    - [amd64] iommu/vt-d: Invalidate PASID cache when root/context entry changed
    - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
    - HID: lenovo: Use brightness_set_blocking callback for setting LEDs
      brightness
    - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling
    - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event()
    - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE
    - [arm64] KVM: Initialize VCPU mdcr_el2 before loading it
    - [arm*] ASoC: simple-card: fix possible uninitialized single_cpu local
      variable
    - [amd64] IB/hfi1: Use kzalloc() for mmu_rb_handler allocation
    - [powerpc*] 64s: Fix pte update for kernel memory on radix
    - [powerpc*] perf: Fix PMU constraint check for EBB events
    - mac80211: bail out if cipher schemes are invalid
    - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric
    - xfs: fix return of uninitialized value in variable error
    - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page()
    - mt7601u: fix always true expression
    - [powerpc*] KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
    - ovl: invalidate readdir cache on changes to dir with origin
    - RDMA/qedr: Fix error return code in qedr_iw_connect()
    - [amd64] IB/hfi1: Fix error return code in parse_platform_config()
    - cxgb4: Fix unintentional sign extension issues
    - [arm64] net: thunderx: Fix unintentional sign extension issue
    - RDMA/srpt: Fix error return code in srpt_cm_req_recv()
    - [arm64,armhf] i2c: imx: fix reference leak when pm_runtime_get_sync fails
    - [armhf] i2c: omap: fix reference leak when pm_runtime_get_sync fails
    - [armhf] i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails
    - [powerpc*] xive: Drop check on irq_data in xive_core_debug_show()
    - [powerpc*] xive: Fix xmon command "dxi"
    - net/packet: make packet_fanout.arr size configurable up to 64K
    - net/packet: remove data races in fanout operations
    - [amd64] drm/i915/gvt: Fix error code in intel_gvt_init_device()
    - [amd64] iommu/amd: Put newline after closing bracket in warning
    - [mips64el,mipsel] pci-legacy: stop using of_pci_range_to_resource
    - [powerpc*] pseries: extract host bridge from pci_bus prior to bus removal
    - [powerpc*] smp: Reintroduce cpu_core_mask
    - [x86] KVM: dump_vmcs should not assume GUEST_IA32_EFER is valid
    - rtlwifi: 8821ae: upgrade PHY and RF parameters
    - [arm64,armhf] wlcore: fix overlapping snprintf arguments in debugfs
    - mwl8k: Fix a double Free in mwl8k_probe_hw
    - netfilter: nft_payload: fix C-VLAN offload support
    - netfilter: nftables_offload: VLAN id needs host byteorder in flow
      dissector
    - netfilter: nftables_offload: special ethertype handling for VLAN
    - [x86] vsock/vmci: log once the failed queue pair allocation
    - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check
    - RDMA/cxgb4: add missing qpid increment
    - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
    - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
    - sfc: ef10: fix TX queue lookup in TX event handling
    - vsock/virtio: free queued packets when closing socket
    - [armhf] net: davinci_emac: Fix incorrect masking of tx and rx error
      channel
    - [amd64] crypto: ccp: Detect and reject "invalid" addresses destined for
      PSP
    - nfp: devlink: initialize the devlink port attribute "lanes"
    - net: stmmac: fix TSO and TBS feature enabling during driver open
    - RDMA/rxe: Fix a bug in rxe_fill_ip_info()
    - RDMA/core: Add CM to restrack after successful attachment to a device
    - [powerpc*] 64: Fix the definition of the fixmap area
    - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
    - ath10k: Fix a use after free in ath10k_htc_send_bundle
    - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock
    - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size
    - [powerpc*] perf: Fix the threshold event selection for memory events in
      power10
    - net: phy: marvell: fix m88e1011_set_downshift
    - net: phy: marvell: fix m88e1111_set_downshift
    - bnxt_en: fix ternary sign extension bug in bnxt_show_temp()
    - net: geneve: modify IP header check in geneve6_xmit_skb and
      geneve_xmit_skb
    - bnxt_en: Fix RX consumer index logic in the error path.
    - [x86] KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM
    - [arm64] net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
    - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds
    - net: bridge: mcast: fix broken length + header check for MRDv6 Adv.
    - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
    - perf tools: Change fields type in perf_record_time_conv
    - perf jit: Let convert_timestamp() to be backwards-compatible
    - perf session: Add swap operation for event TIME_CONV
    - mm/sl?b.c: remove ctor argument from kmem_cache_flags
    - mm: memcontrol: slab: fix obtain a reference to a freeing memcg
    - mm/sparse: add the missing sparse_buffer_fini() in error branch
    - mm/memory-failure: unnecessary amount of unmapping
    - afs: Fix speculative status fetches
    - bpf: Fix alu32 const subreg bound tracking on bitwise operations
      (CVE-2021-3490)
    - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (CVE-2021-3489)
    - bpf: Prevent writable memory-mapping of read-only ringbuf pages
    - [arm64] Remove arm64_dma32_phys_limit and its uses
    - net: Only allow init netns to set default tcp cong to a restricted algo
    - smp: Fix smp_call_function_single_async prototype
    - Revert "net/sctp: fix race condition in sctp_destroy_sock"
    - sctp: delay auto_asconf init until binding the first addr (CVE-2021-23133)
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.38
    - [arm64,x86] tpm: fix error return code in tpm2_get_cc_attrs_tbl()
    - [arm64,x86] tpm, tpm_tis: Extend locality handling to TPM2 in
      tpm_tis_gen_interrupt()
    - [arm64,x86] tpm, tpm_tis: Reserve locality in tpm_tis_resume()
    - [x86] KVM: x86/mmu: Remove the defunct update_pte() paging hook
    - [x86] KVM/VMX: Invoke NMI non-IST entry instead of IST entry
    - ACPI: PM: Add ACPI ID of Alder Lake Fan
    - PM: runtime: Fix unpaired parent child_count for force_resume
    - [x86] cpufreq: intel_pstate: Use HWP if enabled by platform firmware
    - kvm: Cap halt polling at kvm->max_halt_poll_ns
    - ath11k: fix thermal temperature read
    - fs: dlm: fix debugfs dump
    - fs: dlm: add errno handling to check callback
    - fs: dlm: check on minimum msglen size
    - fs: dlm: flush swork on shutdown
    - tipc: convert dest node's address to network order
    - [x86] ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus
      T100TAF
    - net/mlx5e: Use net_prefetchw instead of prefetchw in MPWQE TX datapath
    - [arm64] net: stmmac: Set FIFO sizes for ipq806x
    - Bluetooth: Fix incorrect status handling in LE PHY UPDATE event
    - i2c: bail out early when RDWR parameters are wrong
    - ALSA: hdsp: don't disable if not enabled
    - ALSA: hdspm: don't disable if not enabled
    - ALSA: rme9652: don't disable if not enabled
    - ALSA: bebob: enable to deliver MIDI messages for multiple ports
    - Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
    - Bluetooth: initialize skb_queue_head at l2cap_chan_create()
    - net/sched: cls_flower: use ntohs for struct flow_dissector_key_ports
    - net: bridge: when suppression is enabled exclude RARP packets
    - Bluetooth: check for zapped sk before connecting
    - [powerpc] 32: Statically initialise first emergency context
    - [arm64] net: hns3: remediate a potential overflow risk of bd_num_list
    - [arm64] net: hns3: add handling for xmit skb with recursive fraglist
    - ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet
    - ice: handle increasing Tx or Rx ring sizes
    - Bluetooth: btusb: Enable quirk boolean flag for Mediatek Chip.
    - [x86] ASoC: rt5670: Add a quirk for the Dell Venue 10 Pro 5055
    - i2c: Add I2C_AQ_NO_REP_START adapter quirk
    - [mips64el,mipsel] MIPS: Loongson64: Use _CACHE_UNCACHED instead of
      _CACHE_UNCACHED_ACCELERATED
    - [amd64] IB/hfi1: Correct oversized ring allocation
    - mac80211: clear the beacon's CRC after channel switch
    - [armhf] pinctrl: samsung: use 'int' for register masks in Exynos
    - rtw88: 8822c: add LC calibration for RTL8822C
    - mt76: mt76x0: disable GTK offloading
    - fuse: invalidate attrs when page writeback completes
    - virtiofs: fix userns
    - cuse: prevent clone
    - iwlwifi: pcie: make cfg vs. trans_cfg more robust
    - [powerpc*] mm: Add cond_resched() while removing hpte mappings
    - Revert "iommu/amd: Fix performance counter initialization"
    - [amd64] iommu/amd: Remove performance counter pre-initialization test
    - ALSA: hda/realtek: Add quirk for Lenovo Ideapad S740
    - [x86] ASoC: Intel: sof_sdw: add quirk for new ADL-P Rvp
    - ALSA: hda/hdmi: fix race in handling acomp ELD notification at resume
    - sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
    - flow_dissector: Fix out-of-bounds warning in __skb_flow_bpf_to_target()
    - [powerpc*] smp: Set numa node before updating mask
    - [x86] ASoC: rt286: Generalize support for ALC3263 codec
    - ethtool: ioctl: Fix out-of-bounds warning in
      store_link_ksettings_for_user()
    - net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule
    - [powerpc*] pseries: Stop calling printk in rtas_stop_self()
    - wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
    - wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
    - [powerpc*] iommu: Annotate nested lock for lockdep
    - iavf: remove duplicate free resources calls
    - kbuild: generate Module.symvers only when vmlinux exists
    - bnxt_en: Add PCI IDs for Hyper-V VF devices.
    - [ia64] module: fix symbolizer crash on fdescr
    - watchdog: rename __touch_watchdog() to a better descriptive name
    - watchdog: explicitly update timestamp when reporting softlockup
    - watchdog/softlockup: remove logic that tried to prevent repeated reports
    - watchdog: fix barriers when printing backtraces from all CPUs
    - [x86] ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
    - thermal: thermal_of: Fix error return code of
      thermal_of_populate_bind_params()
    - f2fs: move ioctl interface definitions to separated file
    - f2fs: fix compat F2FS_IOC_{MOVE,GARBAGE_COLLECT}_RANGE
    - f2fs: fix to allow migrating fully valid segment
    - f2fs: fix panic during f2fs_resize_fs()
    - f2fs: fix a redundant call to f2fs_balance_fs if an error occurs
    - PCI: Release OF node in pci_scan_device()'s error path
    - [armel,armhf] 9064/1: hw_breakpoint: Do not directly check the event's
      overflow_handler hook
    - f2fs: fix to align to section for fallocate() on pinned file
    - f2fs: fix to update last i_size if fallocate partially succeeds
    - f2fs: fix to avoid touching checkpointed data in get_victim()
    - f2fs: fix to cover __allocate_new_section() with curseg_lock
    - f2fs: Fix a hungtask problem in atomic write
    - f2fs: fix to avoid accessing invalid fio in f2fs_allocate_data_block()
    - [arm64] rpmsg: qcom_glink_native: fix error return code of
      qcom_glink_rx_data()
    - NFS: nfs4_bitmask_adjust() must not change the server global bitmasks
    - NFS: Fix attribute bitmask in _nfs42_proc_fallocate()
    - NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
    - NFS: Deal correctly with attribute generation counter overflow
    - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
    - NFSv4.2 fix handling of sr_eof in SEEK's reply
    - SUNRPC: Move fault injection call sites
    - SUNRPC: Remove trace_xprt_transmit_queued
    - SUNRPC: Handle major timeout in xprt_adjust_timeout()
    - [arm64] thermal/drivers/tsens: Fix missing put_device error
    - NFSv4.x: Don't return NFS4ERR_NOMATCHING_LAYOUT if we're unmounting
    - nfsd: ensure new clients break delegations
    - SUNRPC: fix ternary sign expansion bug in tracing
    - xprtrdma: Avoid Receive Queue wrapping
    - xprtrdma: Fix cwnd update ordering
    - xprtrdma: rpcrdma_mr_pop() already does list_del_init()
    - swiotlb: Fix the type of index
    - ceph: fix inode leak on getattr error in __fh_to_dentry
    - scsi: qla2xxx: Prevent PRLI in target mode
    - scsi: ufs: core: Do not put UFS power into LPM if link is broken
    - scsi: ufs: core: Cancel rpm_dev_flush_recheck_work during system suspend
    - scsi: ufs: core: Narrow down fast path in system suspend path
    - rtc: ds1307: Fix wday settings for rx8130
    - [arm64] net: hns3: fix incorrect configuration for igu_egu_hw_err
    - [arm64] net: hns3: initialize the message content in hclge_get_link_mode()
    - [arm64] net: hns3: add check for HNS3_NIC_STATE_INITED in
      hns3_reset_notify_up_enet()
    - [arm64] net: hns3: fix for vxlan gpe tx checksum bug
    - [arm64] net: hns3: use netif_tx_disable to stop the transmit queue
    - [arm64] net: hns3: disable phy loopback setting in hclge_mac_start_phy
    - sctp: do asoc update earlier in sctp_sf_do_dupcook_a
    - [riscv64] Fix error code returned by riscv_hartid_to_cpuid()
    - sunrpc: Fix misplaced barrier in call_decode
    - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
    - sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
    - netfilter: xt_SECMARK: add new revision to fix structure layout
    - net: stmmac: Clear receive all(RA) bit when promiscuous mode is off
    - drm/radeon: Fix off-by-one power_state index heap overwrite
    - drm/radeon: Avoid power table parsing memory leaks
    - [arm64] entry: factor irq triage logic into macros
    - [arm64] entry: always set GIC_PRIO_PSR_I_SET during entry
    - khugepaged: fix wrong result value for
      trace_mm_collapse_huge_page_isolate()
    - mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
    - mm/migrate.c: fix potential indeterminate pte entry in
      migrate_vma_insert_page()
    - ksm: fix potential missing rmap_item for stable_node
    - mm/gup: check every subpage of a compound page during isolation
    - mm/gup: return an error on migration failure
    - mm/gup: check for isolation errors
    - ethtool: fix missing NLM_F_MULTI flag when dumping
    - net: fix nla_strcmp to handle more then one trailing null character
    - smc: disallow TCP_ULP in smc_setsockopt()
    - netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check
    - netfilter: nftables: Fix a memleak from userdata error path in new objects
    - sched: Fix out-of-bound access in uclamp
    - sched/fair: Fix unfairness caused by missing load decay
    - fs/proc/generic.c: fix incorrect pde_is_permanent check
    - kernel: kexec_file: fix error return code of
      kexec_calculate_store_digests()
    - kernel/resource: make walk_system_ram_res() find all busy
      IORESOURCE_SYSTEM_RAM resources
    - kernel/resource: make walk_mem_res() find all busy IORESOURCE_MEM
      resources
    - netfilter: nftables: avoid overflows in nft_hash_buckets()
    - i40e: fix broken XDP support
    - i40e: Fix use-after-free in i40e_client_subtask()
    - i40e: fix the restart auto-negotiation after FEC modified
    - i40e: Fix PHY type identifiers for 2.5G and 5G adapters
    - f2fs: avoid unneeded data copy in f2fs_ioc_move_range()
    - [powerpc*] 64s: Fix crashes when toggling stf barrier
    - [powerpc*] 64s: Fix crashes when toggling entry flush barrier
    - hfsplus: prevent corruption in shrinking truncate
    - squashfs: fix divide error in calculate_skip()
    - userfaultfd: release page in error path to avoid BUG_ON
    - mm/hugetlb: fix F_SEAL_FUTURE_WRITE
    - blk-iocost: fix weight updates of inner active iocgs
    - [arm64] mte: initialize RGSR_EL1.SEED in __cpu_setup
    - [arm64] Fix race condition on PG_dcache_clean in __sync_icache_dcache()
    - btrfs: fix race leading to unpersisted data and metadata on fsync
    - drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors
      are connected
    - [x86] drm/i915: Avoid div-by-zero on gen2
    - kvm: exit halt polling on need_resched() as well
    - [x86] KVM: LAPIC: Accurately guarantee busy wait for timer to expire when
      using hv_timer
    - [arm64] drm/msm/dp: initialize audio_comp when audio starts
    - [x86] KVM: x86: Cancel pvclock_gtod_work on module removal
    - [x86] KVM: x86: Prevent deadlock against tk_core.seq
    - dax: Add an enum for specifying dax wakup mode
    - dax: Add a wakeup mode parameter to put_unlocked_entry()
    - dax: Wake up all waiters after invalidating dax entry
    - [amd64] xen/unpopulated-alloc: consolidate pgmap manipulation
    - [amd64] xen/unpopulated-alloc: fix error return code in fill_list()
    - [arm64,armhf] usb: dwc3: gadget: Free gadget structure only after freeing
      endpoints
    - iio: light: gp2ap002: Fix rumtime PM imbalance on error
    - iio: proximity: pulsedlight: Fix rumtime PM imbalance on error
    - [armhf] hwmon: (occ) Fix poll rate limiting
    - ACPI: scan: Fix a memory leak in an error handling path
    - kyber: fix out of bounds access when preempted
    - nvmet: add lba to sect conversion helpers
    - nvmet: fix inline bio check for bdev-ns
    - nvmet-rdma: Fix NULL deref when SEND is completed with error
    - f2fs: compress: fix to free compress page correctly
    - f2fs: compress: fix race condition of overwrite vs truncate
    - f2fs: compress: fix to assign cc.cluster_idx correctly
    - nbd: Fix NULL pointer in flush_workqueue
    - blk-mq: plug request for shared sbitmap
    - blk-mq: Swap two calls in blk_mq_exit_queue()
    - [armhf] usb: dwc3: omap: improve extcon initialization
    - [arm64] usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel
      Merrifield
    - usb: xhci: Increase timeout for HC halt
    - [arm*] usb: dwc2: Fix gadget DMA unmap direction
    - usb: core: hub: fix race condition about TRSMRCY of resume
    - [arm64,armhf] usb: dwc3: gadget: Enable suspend events
    - [arm64,armhf] usb: dwc3: gadget: Return success always for kick transfer
      in ep queue
    - [x86] usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4
    - [x86] usb: typec: ucsi: Put fwnode in any case during ->probe()
    - xhci-pci: Allow host runtime PM as default for Intel Alder Lake xHCI
    - xhci: Do not use GFP_KERNEL in (potentially) atomic context
    - xhci: Add reset resume quirk for AMD xhci controller.
    - iio: gyro: mpu3050: Fix reported temperature value
    - iio: tsl2583: Fix division by a zero lux_val
    - cdc-wdm: untangle a circular dependency between callback and softint
    - xen/gntdev: fix gntdev_mmap() error exit path
    - [x86] KVM: Emulate RDPID only if RDTSCP is supported
    - [x86] KVM: Move RDPID emulation intercept to its own enum
    - [x86] KVM: nVMX: Always make an attempt to map eVMCS after migration
    - [x86] KVM: VMX: Do not advertise RDPID if ENABLE_RDTSCP control is
      unsupported
    - [x86] KVM: VMX: Disable preemption when probing user return MSRs
    - Revert "iommu/vt-d: Remove WO permissions on second-level paging entries"
    - Revert "iommu/vt-d: Preset Access/Dirty bits for IOVA over FL"
    - iommu/vt-d: Preset Access/Dirty bits for IOVA over FL
    - iommu/vt-d: Remove WO permissions on second-level paging entries
    - mm: fix struct page layout on 32-bit systems
    - [mips*] Reinstate platform `__div64_32' handler
    - [mips*] Avoid DIVU in `__div64_32' is result would be zero
    - [mips*] Avoid handcoded DIVU in `__div64_32' altogether
    - [armhf] clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap
      issue
    - [armhf] clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata
      i940
    - [armel,armhf] 9011/1: centralize phys-to-virt conversion of DT/ATAGS
      address
    - [armel,armhf] 9012/1: move device tree mapping out of linear region
    - [armel,armhf] 9020/1: mm: use correct section size macro to describe the
      FDT virtual address
    - [armel,armhf] 9027/1: head.S: explicitly map DT even if it lives in the
      first physical section
    - [x86] usb: typec: tcpm: Fix error while calculating PPS out values
    - kobject_uevent: remove warning in init_uevent_argv()
    - [x86] drm/i915/gt: Fix a double free in gen8_preallocate_top_level_pdp
    - [x86] drm/i915: Read C0DRB3/C1DRB3 as 16 bits again
    - [x86] drm/i915/overlay: Fix active retire callback alignment
    - [x86] drm/i915: Fix crash in auto_retire
    - debugfs: Make debugfs_allow RO after init
    - ext4: fix debug format string warning
    - nvme: do not try to reconfigure APST when the controller is not live
.
  [ Vincent Blut ]
  * [x86] sound/soc/intel: Enable SND_SOC_INTEL_CATPT as module
    (Closes: #986822)
  * [x86] sound/soc/intel/boards: Enable SND_SOC_INTEL_BDW_RT5650_MACH as
    module
  * drivers/input/rmi4: Enable RMI4_F3A (Closes: #986848)
  * [armhf] drivers/gpio: Enable GPIO_MXC as module (Closes: #987019)
  * [x86] drivers/misc/mei: Enable INTEL_MEI_TXE, INTEL_MEI_HDCP as modules
    (Closes: #987281)
.
  [ Uwe Kleine-König ]
  * [arm64] Enable more options for NXP's i.MX8 (Closes: #985862)
.
  [ Salvatore Bonaccorso ]
  * vfs: move cap_convert_nscap() call into vfs_setxattr() (CVE-2021-3493)
  * Refresh "Makefile: Do not check for libelf when building OOT module"
  * Bump ABI to 7
  * Refresh "tools/include/uapi: Fix <asm/errno.h>"
  * [rt] Update to 5.10.35-rt39
  * [rt] Refresh "powerpc/mm/highmem: Switch to generic kmap atomic"
  * [arm64] udeb: Include mdio module for RPi4 ethernet in installer
    (Closes: #985956)
.
  [ Vagrant Cascadian ]
  * [arm64] Disable USB type-C DisplayPort in pinebook pro device-tree.
  * [arm64] Enable TYPEC_FUSB302, SND_SOC_ES8316, TYPEC and TYPEC_TCPM as
    modules. (Closes: #987638)
.
  [ Michal Simek ]
  * [arm64] Enable clock driver for Xilinx ZynqMP SoC
.
  [ Valentin Vidic ]
  * [s390x] udeb: Include standard scsi-modules containing the virtio_blk
    module (Closes: #988005)
.
  [ Ben Hutchings ]
  * kbuild: Abort build if SUBDIRS used (Closes: #987575)

linux (5.10.28-6parrot1) rolling; urgency=medium
.
  * Import new Debian release.
.
linux (5.10.28-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.27
    - mm/memcg: rename mem_cgroup_split_huge_fixup to split_page_memcg and add
      nr_pages argument
    - mm/memcg: set memcg when splitting page
    - mt76: fix tx skb error handling in mt76_dma_tx_queue_skb
    - net: stmmac: fix dma physical address of descriptor when display ring
    - [arm64,armhf] net: fec: ptp: avoid register access when ipg clock is
      disabled
    - [powerpc*] 4xx: Fix build errors from mfdcr()
    - atm: eni: dont release is never initialized
    - atm: lanai: dont run lanai_dev_close if not open
    - Revert "r8152: adjust the settings about MAC clock speed down for RTL8153"
    - [x86] ALSA: hda: ignore invalid NHLT table
    - ixgbe: Fix memleak in ixgbe_configure_clsu32
    - blk-cgroup: Fix the recursive blkg rwstat
    - net: tehuti: fix error return code in bdx_probe()
    - net: intel: iavf: fix error return code of iavf_init_get_resources()
    - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count
    - gianfar: fix jumbo packets+napi+rx overrun crash (CVE-2021-29264)
    - cifs: ask for more credit on async read/write code paths
    - gfs2: fix use-after-free in trans_drain
    - [arm64,armhf] cpufreq: blacklist Arm Vexpress platforms in
      cpufreq-dt-platdev
    - gpiolib: acpi: Add missing IRQF_ONESHOT
    - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default
    - NFS: Correct size calculation for create reply length
    - [arm64] net: hisilicon: hns: fix error return code of
      hns_nic_clear_all_rx_fetch()
    - [arm64] net: enetc: set MAC RX FIFO to recommended value
    - atm: uPD98402: fix incorrect allocation
    - atm: idt77252: fix null-ptr-dereference
    - cifs: change noisy error message to FYI
    - kbuild: add image_name to no-sync-config-targets
    - umem: fix error return code in mm_pci_probe()
    - [sparc64] Fix opcode filtering in handling of no fault loads
    - u64_stats,lockdep: Fix u64_stats_init() vs lockdep
    - block: Fix REQ_OP_ZONE_RESET_ALL handling
    - drm/amdgpu: fb BO should be ttm_bo_type_device
    - drm/radeon: fix AGP dependency
    - nvme: simplify error logic in nvme_validate_ns()
    - nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request()
    - nvme-fc: set NVME_REQ_CANCELLED in nvme_fc_terminate_exchange()
    - nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted
    - nvme-core: check ctrl css before setting up zns
    - nvme-rdma: Fix a use after free in nvmet_rdma_write_data_done
    - nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a
    - nfs: we don't support removing system.nfs4_acl
    - block: Suppress uevent for hidden device when removed
    - mm/fork: clear PASID for new mm
    - [ia64] fix ia64_syscall_get_set_arguments() for break-based syscalls
    - [ia64] fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign
    - static_call: Pull some static_call declarations to the type headers
    - [x86] static_call: Allow module use without exposing static_call_key
    - [x86] static_call: Fix the module key fixup
    - [x86] static_call: Fix static_call_set_init()
    - [x86] KVM: Protect userspace MSR filter with SRCU, and set atomically-ish
    - btrfs: fix sleep while in non-sleep context during qgroup removal
    - selinux: don't log MAC_POLICY_LOAD record on failed policy load
    - selinux: fix variable scope issue in live sidtab conversion
    - [arm64] netsec: restore phy power state after controller reset
    - [x86] platform/x86: intel-vbtn: Stop reporting SW_DOCK events
    - psample: Fix user API breakage
    - z3fold: prevent reclaim/free race for headless pages
    - squashfs: fix inode lookup sanity checks
    - squashfs: fix xattr id and id lookup sanity checks
    - hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared
      mappings
    - [x86] ACPI: video: Add missing callback back for Sony VPCEH3U1E
    - ACPICA: Always create namespace nodes using acpi_ns_create_node()
    - [arm64] stacktrace: don't trace arch_stack_walk()
    - integrity: double check iint_cache was initialized
    - [armhf] drm/etnaviv: Use FOLL_FORCE for userptr
    - drm/amdgpu: Add additional Sienna Cichlid PCI ID
    - [x86] drm/i915: Fix the GT fence revocation runtime PM logic
    - dm verity: fix DM_VERITY_OPTS_MAX value
    - dm ioctl: fix out of bounds array access when no devices
    - [armhf] bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
    - [armhf] OMAP2+: Fix smartreflex init regression after dropping legacy data
    - [armhf] soc: ti: omap-prm: Fix occasional abort on reset deassert for dra7
      iva
    - veth: Store queue_mapping independently of XDP prog presence
    - bpf: Change inode_storage's lookup_elem return value from NULL to -EBADF
    - net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets
    - net/mlx5e: When changing XDP program without reset, take refs for XSK RQs
    - net/mlx5e: Don't match on Geneve options in case option masks are all zero
    - ipv6: fix suspecious RCU usage warning
    - drop_monitor: Perform cleanup upon probe registration failure
    - macvlan: macvlan_count_rx() needs to be aware of preemption
    - net: sched: validate stab values
    - [armhf] net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port
    - igc: reinit_locked() should be called with rtnl_lock
    - igc: Fix Pause Frame Advertising
    - igc: Fix Supported Pause Frame Link Setting
    - igc: Fix igc_ptp_rx_pktstamp()
    - e1000e: add rtnl_lock() to e1000_reset_task
    - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571
    - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template
    - net: phy: broadcom: Add power down exit reset state delay
    - [armhf] ftgmac100: Restart MAC HW once
    - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (CVE-2021-29647)
    - flow_dissector: fix byteorder of dissected ICMP ID
    - netfilter: ctnetlink: fix dump of the expect mask attribute
    - net: phylink: Fix phylink_err() function name error in
      phylink_major_config
    - tipc: better validate user input in tipc_nl_retrieve_key()
      (CVE-2021-29646)
    - tcp: relookup sock for RST+ACK packets handled by obsolete req sock
    - can: isotp: isotp_setsockopt(): only allow to set low level TX flags for
      CAN-FD
    - can: isotp: TX-path: ensure that CAN frame flags are initialized
    - can: peak_usb: add forgotten supported devices
    - [arm64,armhf] can: flexcan: flexcan_chip_freeze(): fix chip freeze for
      missing bitrate
    - can: c_can_pci: c_can_pci_remove(): fix use-after-free
    - [armhf] can: c_can: move runtime PM enable/disable to c_can_platform
    - mac80211: fix rate mask reset
    - mac80211: Allow HE operation to be longer than expected.
    - nfp: flower: fix unsupported pre_tunnel flows
    - nfp: flower: add ipv6 bit to pre_tunnel control message
    - nfp: flower: fix pre_tun mask id allocation
    - ftrace: Fix modify_ftrace_direct.
    - [arm64] drm/msm/dsi: fix check-before-set in the 7nm dsi_pll code
    - net/sched: cls_flower: fix only mask bit check in the validate_ct_state
    - netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags
    - netfilter: nftables: allow to update flowtable flags
    - netfilter: flowtable: Make sure GC works periodically in idle system
    - [armhf] dts: imx6ull: fix ubi filesystem mount failed
    - ipv6: weaken the v4mapped source check
    - net: check all name nodes in __dev_alloc_name
    - net: cdc-phonet: fix data-interface release on probe failure
    - igb: check timestamp validity
    - r8152: limit the RX buffer size of RTL8153A for USB 2.0
    - [arm64,armhf] net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes
    - selinux: vsock: Set SID for socket returned by accept()
    - bpf: Fix umd memory leak in copy_process() (CVE-2021-29649)
    - can: isotp: tx-path: zero initialize outgoing CAN frames
    - [arm64] drm/msm: fix shutdown hook in case GPU components failed to bind
    - [arm64] drm/msm: Fix suspend/resume on i.MX5
    - [arm64] kdump: update ppos when reading elfcorehdr
    - PM: runtime: Defer suspending suppliers
    - net/mlx5: Add back multicast stats for uplink representor
    - net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP
    - net/mlx5e: Offload tuple rewrite for non-CT flows
    - net/mlx5e: Fix error path for ethtool set-priv-flag
    - PM: EM: postpone creating the debugfs dir till fs_initcall
    - net: bridge: don't notify switchdev for local FDB addresses
    - [amd64] xen/x86: make XEN_BALLOON_MEMORY_HOTPLUG_LIMIT depend on
      MEMORY_HOTPLUG
    - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening
      server
    - bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
    - net: Consolidate common blackhole dst ops
    - net, bpf: Fix ip6ip6 crash with collect_md populated skbs
    - igb: avoid premature Rx buffer reuse
    - net: phy: introduce phydev->port
    - net: phy: broadcom: Avoid forward for bcm54xx_config_clock_delay()
    - net: phy: broadcom: Set proper 1000BaseX/SGMII interface mode for
      BCM54616S
    - net: phy: broadcom: Fix RGMII delays for BCM50160 and BCM50610M
    - Revert "netfilter: x_tables: Switch synchronization to RCU"
    - netfilter: x_tables: Use correct memory barriers. (CVE-2021-29650)
    - dm table: Fix zoned model check and zone sectors check
    - mm/mmu_notifiers: ensure range_end() is paired with range_start()
    - Revert "netfilter: x_tables: Update remaining dereference to RCU"
    - ACPI: scan: Rearrange memory allocation in acpi_device_add()
    - ACPI: scan: Use unique number for instance_no
    - io_uring: fix provide_buffers sign extension
    - block: recalculate segment count for multi-segment discards correctly
    - scsi: Revert "qla2xxx: Make sure that aborted commands are freed"
    - scsi: qedi: Fix error return code of qedi_alloc_global_queues()
    - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach()
    - smb3: fix cached file size problems in duplicate extents (reflink)
    - cifs: Adjust key sizes and key generation routines for AES256 encryption
    - locking/mutex: Fix non debug version of mutex_lock_io_nested()
    - mm/memcg: fix 5.10 backport of splitting page memcg
    - fs/cachefiles: Remove wait_bit_key layout dependency
    - can: dev: Move device back to init netns on owning netns delete
    - r8169: fix DMA being used after buffer free if WoL is enabled
    - [armhf] net: dsa: b53: VLAN filtering is global to all users
    - mac80211: fix double free in ibss_leave
    - ext4: add reclaim checks to xattr code
    - fs/ext4: fix integer overflow in s_log_groups_per_flex
    - [amd64] Revert "xen: fix p2m size in dom0 for disabled memory hotplug
      case"
    - Revert "net: bonding: fix error return code of bond_neigh_init()"
    - nvme: fix the nsid value to print in nvme_validate_or_alloc_ns
    - can: peak_usb: Revert "can: peak_usb: add forgotten supported devices"
    - xen-blkback: don't leak persistent grants from xen_blkbk_map()
      (CVE-2021-28688)
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.28
    - [arm64] mm: correct the inside linear map range during hotplug check
    - bpf: Fix fexit trampoline.
    - virtiofs: Fail dax mount if device does not support it
    - ext4: shrink race window in ext4_should_retry_alloc()
    - ext4: fix bh ref count on error paths
    - rpc: fix NULL dereference on kmalloc failure
    - iomap: Fix negative assignment to unsigned sis->pages in
      iomap_swapfile_activate
    - [x86] ASoC: rt1015: fix i2c communication error
    - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10
    - [x86] ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor
      of 10
    - [armhf] ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value
      on probe
    - [x86] ASoC: es8316: Simplify adc_pga_gain_tlv table
    - ASoC: soc-core: Prevent warning if no DMI table is present
    - NFSD: fix error handling in NFSv4.0 callbacks
    - kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing
    - vhost: Fix vhost_vq_reset()
    - io_uring: fix ->flags races by linked timeouts
    - scsi: st: Fix a use after free in st_open()
    - scsi: qla2xxx: Fix broken #endif placement
    - [x86] staging: comedi: cb_pcidas: fix request_irq() warn
    - [x86] staging: comedi: cb_pcidas64: fix request_irq() warn
    - ASoC: rt711: add snd_soc_component remove callback
    - thermal/core: Add NULL pointer check before using cooling device stats
    - locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling
    - locking/ww_mutex: Fix acquire/release imbalance in
      ww_acquire_init()/ww_acquire_fini()
    - nvmet-tcp: fix kmap leak when data digest in use
    - io_uring: imply MSG_NOSIGNAL for send[msg]()/recv[msg]() calls
    - [x86] static_call: Align static_call_is_init() patching condition
    - ext4: do not iput inode under running transaction in ext4_rename()
    - io_uring: call req_set_fail_links() on short send[msg]()/recv[msg]() with
      MSG_WAITALL
    - [arm64,armhf] net: mvpp2: fix interrupt mask/unmask skip condition
    - flow_dissector: fix TTL and TOS dissection on IPv4 fragments
    - net: introduce CAN specific pointer in the struct net_device
    - brcmfmac: clear EAP/association status bits on linkdown events
    - ath11k: add ieee80211_unregister_hw to avoid kernel crash caused by NULL
      pointer
    - rtw88: coex: 8821c: correct antenna switch function
    - iwlwifi: pcie: don't disable interrupts for reg_lock
    - ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr()
    - [amd64,arm64] net: ethernet: aquantia: Handle error cleanup of start on
      open
    - appletalk: Fix skb allocation size in loopback case
    - net: wan/lmc: unregister device when no matching device is found
    - net: 9p: advance iov on empty read
    - bpf: Remove MTU check in __bpf_skb_max_len
    - ACPI: tables: x86: Reserve memory occupied by ACPI tables
    - ACPI: processor: Fix CPU0 wakeup in acpi_idle_play_dead()
    - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
    - ALSA: hda: Re-add dropped snd_poewr_change_state() calls
    - ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks
    - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO
    - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 640 G8
    - [x86] KVM: SVM: load control fields from VMCB12 before checking them
      (CVE-2021-29657)
    - [x86] KVM: SVM: ensure that EFER.SVME is set when running nested guest or
      on nested vmexit
    - PM: runtime: Fix race getting/putting suppliers at probe
    - PM: runtime: Fix ordering in pm_runtime_get_suppliers()
    - tracing: Fix stack trace event size
    - [s390x] vdso: copy tod_steering_delta value to vdso_data page
    - [s390x] vdso: fix tod_steering_delta type
    - mm: fix race by making init_zero_pfn() early_initcall
    - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings()
    - drm/amdgpu: check alignment on CPU page for bo map
    - reiserfs: update reiserfs_xattrs_initialized() condition
    - [armhf] drm/imx: fix memory leak when fails to init
    - [arm64,armhf] drm/tegra: dc: Restore coupling of display controllers
    - [arm64,armhf] drm/tegra: sor: Grab runtime PM reference across reset
    - [arm64,armhf] pinctrl: rockchip: fix restore error in resume
    - extcon: Add stubs for extcon_register_notifier_all() functions
    - extcon: Fix error handling in extcon_dev_register
    - firmware: stratix10-svc: reset COMMAND_RECONFIG_FLAG_PARTIAL to 0
    - [arm64] usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield
    - [x86] video: hyperv_fb: Fix a double free in hvfb_probe
    - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (CVE-2021-3483)
    - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
    - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem
    - [arm64,armhf] usb: musb: Fix suspend with devices connected for a64
    - cdc-acm: fix BREAK rx code path adding necessary calls
    - USB: cdc-acm: untangle a circular dependency between callback and softint
    - USB: cdc-acm: downgrade message to debug
    - USB: cdc-acm: fix double free on probe failure
    - USB: cdc-acm: fix use-after-free after probe failure
    - [i386] usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
    - [arm*] usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board.
    - [arm*] usb: dwc2: Prevent core suspend when port connection flag is 0
    - [arm64] usb: dwc3: qcom: skip interconnect init for ACPI probe
    - [arm64,armhf] usb: dwc3: gadget: Clear DEP flags after stop transfers in
      ep disable
    - soc: qcom-geni-se: Cleanup the code to remove proxy votes
    - [x86] staging: rtl8192e: Fix incorrect source in memcpy()
    - [x86] staging: rtl8192e: Change state information from u16 to u8
    - driver core: clear deferred probe reason on probe retry
    - drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
    - [riscv64] evaluate put_user() arg before enabling user access
    - Revert "kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for
      freezing"
    - [amd64] bpf: Use NOP_ATOMIC5 instead of emit_nops(&prog, 5) for
      BPF_TRAMP_F_CALL_ORIG
.
  [ Salvatore Bonaccorso ]
  * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT
    during updates"
  * Bump ABI to 6
  * [rt] Refresh "tracing: Merge irqflags + preempt counter."
  * bpf, x86: Validate computation of branch displacements for x86-64
    (CVE-2021-29154)
  * bpf, x86: Validate computation of branch displacements for x86-32
    (CVE-2021-29154)
.
linux (5.10.26-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.25
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.26
    - ALSA: dice: fix null pointer dereference when node is disconnected
    - ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro
    - ALSA: hda: generic: Fix the micmute led init state
    - ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 840 G8
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8
    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 850 G8
    - Revert "PM: runtime: Update device status before letting suppliers
      suspend"
    - [s390x] vtime: fix increased steal time accounting
    - [s390x] pci: refactor zpci_create_device()
    - [s390x] pci: remove superfluous zdev->zbus check
    - [s390x] pci: fix leak of PCI device structure
    - zonefs: Fix O_APPEND async write handling
    - zonefs: prevent use of seq files as swap file
    - zonefs: fix to update .i_wr_refcnt correctly in zonefs_open_zone()
    - btrfs: fix race when cloning extent buffer during rewind of an old root
      (CVE-2021-28964)
    - btrfs: fix slab cache flags for free space tree bitmap
    - vhost-vdpa: fix use-after-free of v->config_ctx (CVE-2021-29266)
    - [armhf] ASoC: fsl_ssi: Fix TDM slot setup for I2S mode
    - [x86] ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 10-p0XX OVCD current
      threshold
    - [x86] ASoC: SOF: Intel: unregister DMIC device on probe error
    - [x86] ASoC: SOF: intel: fix wrong poll bits in dsp power down
    - ASoC: qcom: sdm845: Fix array out of bounds access (CVE-2021-28952)
    - ASoC: qcom: sdm845: Fix array out of range on rx slim channels
    - [arm64] ASoC: qcom: lpass-cpu: Fix lpass dai ids parse
    - [arm*] ASoC: simple-card-utils: Do not handle device clock
    - afs: Fix accessing YFS xattrs on a non-YFS server
    - afs: Stop listxattr() from listing "afs.*" attributes
    - ALSA: usb-audio: Fix unintentional sign extension issue
    - nvme: fix Write Zeroes limitations
    - nvme-tcp: fix misuse of __smp_processor_id with preemption enabled
    - nvme-tcp: fix possible hang when failing to set io queues
    - nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU
    - nvmet: don't check iosqes,iocqes for discovery controllers
    - nfsd: Don't keep looking up unhashed files in the nfsd file cache
    - nfsd: don't abort copies early
    - NFSD: Repair misuse of sv_lock in 5.10.16-rt30.
    - NFSD: fix dest to src mount in inter-server COPY
    - svcrdma: disable timeouts on rdma backchannel
    - sunrpc: fix refcount leak for rpc auth modules
    - [x86] i915/perf: Start hrtimer only if sampling the OA buffer
    - pstore: Fix warning in pstore_kill_sb()
    - io_uring: ensure that SQPOLL thread is started for exit (CVE-2021-28951)
    - net/qrtr: fix __netdev_alloc_skb call
    - cifs: fix allocation size on newly created files
    - scsi: lpfc: Fix some error codes in debugfs
    - scsi: myrs: Fix a double free in myrs_cleanup()
    - [riscv64] correct enum sbi_ext_rfence_fid
    - gpiolib: Assign fwnode to parent's if no primary one provided
    - nvme-rdma: fix possible hang when failing to set io queues
    - [armhf] tty: serial: stm32-usart: Remove set but unused 'cookie' variables
    - [armhf] serial: stm32: fix DMA initialization error handling
    - bpf: Declare __bpf_free_used_maps() unconditionally
    - module: merge repetitive strings in module_sig_check()
    - module: avoid *goto*s in module_sig_check()
    - module: harden ELF info handling
    - scsi: pm80xx: Make mpi_build_cmd locking consistent
    - scsi: pm80xx: Make running_req atomic
    - scsi: pm80xx: Fix pm8001_mpi_get_nvmd_resp() race condition
    - scsi: pm8001: Neaten debug logging macros and uses
    - scsi: libsas: Remove notifier indirection
    - scsi: libsas: Introduce a _gfp() variant of event notifiers
    - scsi: mvsas: Pass gfp_t flags to libsas event notifiers
    - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_down()
    - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_up()
    - [x86] scsi: isci: Pass gfp_t flags in isci_port_bc_change_received()
    - RDMA/mlx5: Allow creating all QPs even when non RDMA profile is used
    - [powerpc*] sstep: Fix load-store and update emulation
    - [powerpc*] sstep: Fix darn emulation
    - i40e: Fix endianness conversions
    - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081
    - drm/amd/display: turn DPMS off on connector unplug
    - iwlwifi: Add a new card for MA family
    - io_uring: fix inconsistent lock state
    - [arm64,armhf] media: cedrus: h264: Support profile controls
    - [s390x] qeth: schedule TX NAPI on QAOB completion
    - io_uring: don't attempt IO reissue from the ring exit path
    - io_uring: clear IOCB_WAITQ for non -EIOCBQUEUED return
    - net: bonding: fix error return code of bond_neigh_init()
    - gfs2: Add common helper for holding and releasing the freeze glock
    - gfs2: move freeze glock outside the make_fs_rw and _ro functions
    - gfs2: bypass signal_our_withdraw if no journal
    - [powerpc*] Force inlining of cpu_has_feature() to avoid build failure
    - usb-storage: Add quirk to defeat Kindle's automatic unload
    - usbip: Fix incorrect double assignment to udc->ud.tcp_rx
    - usb: gadget: configfs: Fix KASAN use-after-free
    - [x86] usb: typec: Remove vdo[3] part of tps6598x_rx_identity_reg struct
    - [x86] usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy-
    - [arm64,armhf] usb: dwc3: gadget: Allow runtime suspend if UDC unbinded
    - [arm64,armhf] usb: dwc3: gadget: Prevent EP queuing while stopping
      transfers
    - [x86] thunderbolt: Initialize HopID IDAs in tb_switch_alloc()
    - [x86] thunderbolt: Increase runtime PM reference count on DP tunnel
      discovery
    - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler
    - iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask
    - iio: hid-sensor-prox: Fix scale not correct issue
    - iio: hid-sensor-temperature: Fix issues of timestamp channel
    - [powerpc*] PCI: rpadlpar: Fix potential drc_name corruption in store
      functions (CVE-2021-28972)
    - [x86] perf/x86/intel: Fix a crash caused by zero PEBS status
      (CVE-2021-28971)
    - [x86] perf/x86/intel: Fix unchecked MSR access error caused by VLBR_EVENT
    - [x86] ioapic: Ignore IRQ2 again
    - kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data()
    - [x86] Move TS_COMPAT back to asm/thread_info.h
    - [x86] Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
    - efivars: respect EFI_UNSUPPORTED return from firmware
    - ext4: fix error handling in ext4_end_enable_verity()
    - ext4: find old entry again if failed to rename whiteout
    - ext4: stop inode update before return
    - ext4: do not try to set xattr into ea_inode if value is empty
    - ext4: fix potential error in ext4_do_update_inode
    - ext4: fix rename whiteout with fast commit
    - static_call: Fix static_call_update() sanity check
    - efi: use 32-bit alignment for efi_guid_t literals
    - firmware/efi: Fix a use after bug in efi_mem_reserve_persistent
    - genirq: Disable interrupts for force threaded handlers
    - [x86] apic/of: Fix CPU devicetree-node lookups
    - cifs: Fix preauth hash corruption
.
  [ Salvatore Bonaccorso ]
  * linux-image: Add Breaks: relation with old fwupdate versions
    (Closes: #985801)
  * [rt] Update to 5.10.25-rt35
  * Refresh "Include package version along with kernel release in stack
    traces"
  * Refresh "firmware: Remove redundant log messages from drivers"
  * Refresh "MODSIGN: checking the blacklisted hash before loading a kernel
    module"
  * libsas: Avoid ABI change for removal of notifier indirection
.
  [ Uwe Kleine-König ]
  * [arm64] Enable various configurations for i.MX8 (Closes: #985862)

linux (5.10.24-5parrot1) rolling; urgency=medium
.
  * Import new Debian release.
  * Import Parrot patches.
.
linux (5.10.24-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.20
    - vmlinux.lds.h: add DWARF v5 sections
    - debugfs: be more robust at handling improper input in debugfs_lookup()
    - debugfs: do not attempt to create a new file before the filesystem is
      initalized
    - scsi: libsas: docs: Remove notify_ha_event()
    - scsi: qla2xxx: Fix mailbox Ch erroneous error
    - kdb: Make memory allocations more robust
    - w1: w1_therm: Fix conversion result for negative temperatures
    - [arm64] PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064
    - PCI: Decline to resize resources if boot config must be preserved
    - [x86] virt: vbox: Do not use wait_event_interruptible when called from
      kernel context
    - bfq: Avoid false bfq queue merging
    - ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode
    - [mips*] vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section
    - random: fix the RNDRESEEDCRNG ioctl
    - ALSA: pcm: Call sync_stop at disconnection
    - ALSA: pcm: Assure sync with the pending stop operation at suspend
    - ALSA: pcm: Don't call sync_stop if it hasn't been stopped
    - [arm64] Bluetooth: btqcomsmd: Fix a resource leak in error handling
      paths in the probe function
    - Bluetooth: hci_uart: Fix a race for write_work scheduling
    - Bluetooth: Fix initializing response id after clearing struct
    - [armhf] dts: exynos: correct PMIC interrupt trigger level on Spring
    - [armhf] dts: exynos: correct PMIC interrupt trigger level on Arndale
      Octa
    - Bluetooth: hci_qca: Fix memleak in qca_controller_memdump
    - [arm*] staging: vchiq: Fix bulk userdata handling
    - [arm*] staging: vchiq: Fix bulk transfers on 64-bit builds
    - [arm64,armhf] net: stmmac: dwmac-meson8b: fix enabling the
      timing-adjustment clock
    - bpf: Add bpf_patch_call_args prototype to include/linux/bpf.h
    - bpf: Avoid warning when re-casting __bpf_call_base into
      __bpf_call_base_args
    - [arm64] dts: allwinner: A64: properly connect USB PHY to port 0
    - [arm64] dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz
    - ACPICA: Fix exception code class checks
    - usb: gadget: u_audio: Free requests only after callback
    - Bluetooth: drop HCI device reference before return
    - Bluetooth: Put HCI device if inquiry procedure interrupts
    - [arm*] usb: dwc2: Do not update data length if it is 0 on inbound
      transfers
    - [arm*] usb: dwc2: Abort transaction after errors with unknown reason
    - [arm*] usb: dwc2: Make "trimming xfer length" a debug message
    - staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory
      rules
    - [x86] MSR: Filter MSR writes through X86_IOC_WRMSR_REGS ioctl too
    - [armhf] dts: armada388-helios4: assign pinctrl to LEDs
    - [armhf] dts: armada388-helios4: assign pinctrl to each fan
    - opp: Correct debug message in _opp_add_static_v2()
    - Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv
    - iwlwifi: mvm: set enabled in the PPAG command properly
    - [arm64] optee: simplify i2c access
    - ath10k: Fix suspicious RCU usage warning in
      ath10k_wmi_tlv_parse_peer_stats_info()
    - ath10k: Fix lockdep assertion warning in ath10k_sta_statistics
    - iwlwifi: mvm: fix the type we use in the PPAG table validity checks
    - iwlwifi: mvm: store PPAG enabled/disabled flag properly
    - iwlwifi: mvm: send stored PPAG command instead of local
    - iwlwifi: mvm: assign SAR table revision to the command later
    - iwlwifi: mvm: don't check if CSA event is running before removing
    - bpf_lru_list: Read double-checked variable once without lock
    - iwlwifi: pnvm: set the PNVM again if it was already loaded
    - iwlwifi: pnvm: increment the pointer before checking the TLV
    - bnxt_en: reverse order of TX disable and carrier off
    - bnxt_en: Fix devlink info's stored fw.psid version format.
    - xen/netback: fix spurious event detection for common event case
    - net: phy: consider that suspend2ram may cut off PHY power
    - net/mlx5e: Don't change interrupt moderation params when DIM is enabled
    - net/mlx5e: Change interrupt moderation channel params also when channels
      are closed
    - net/mlx5: Fix health error state handling
    - net/mlx5e: Replace synchronize_rcu with synchronize_net
    - net/mlx5e: kTLS, Use refcounts to free kTLS RX priv context
    - net/mlx5: Disable devlink reload for multi port slave device
    - net/mlx5: Disallow RoCE on multi port slave device
    - net/mlx5: Disallow RoCE on lag device
    - net/mlx5: Disable devlink reload for lag devices
    - net/mlx5e: CT: manage the lifetime of the ct entry object
    - net/mlx5e: Check tunnel offload is required before setting SWP
    - mac80211: fix potential overflow when multiplying to u32 integers
    - libbpf: Ignore non function pointer member in struct_ops
    - bpf: Fix an unitialized value in bpf_iter
    - bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation
    - bpf: Fix bpf_fib_lookup helper MTU check for SKB ctx
    - tcp: fix SO_RCVLOWAT related hangs under mem pressure
    - cxgb4/chtls/cxgbit: Keeping the max ofld immediate data size same in
      cxgb4 and ulds
    - b43: N-PHY: Fix the update of coef for the PHY revision >= 3case
    - bpf: Clear subreg_def for global function return values
    - [amd64,arm64] net: amd-xgbe: Reset the PHY rx data path when mailbox
      command timeout
    - [amd64,arm64] net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout
      warning
    - [amd64,arm64] net: amd-xgbe: Reset link when the link never comes back
    - [amd64,arm64] net: amd-xgbe: Fix network fluctuations when using 1G
      BELFUSE SFP
    - [arm64,armhf] net: mvneta: Remove per-cpu queue mapping for Armada 3700
    - tty: convert tty_ldisc_ops 'read()' function to take a kernel pointer
    - tty: implement read_iter
    - [x86] drm/gma500: Fix error return code in psb_driver_load()
    - [x86] gma500: clean up error handling in init
    - drm/fb-helper: Add missed unlocks in setcmap_legacy()
    - [arm*] drm/vc4: hdmi: Take into account the clock doubling flag in
      atomic_check
    - [arm64] crypto: arm64/aes-ce - really hide slower algos when faster ones
      are enabled
    - [mips*] c-r4k: Fix section mismatch for loongson2_sc_init
    - drm/virtio: make sure context is created in gem open
    - media: em28xx: Fix use-after-free in em28xx_alloc_urbs
    - media: media/pci: Fix memleak in empress_init
    - [x86] media: tm6000: Fix memleak in tm6000_start_stream
    - sched/fair: Avoid stale CPU util_est value for schedutil in task dequeue
    - [arm64,armhf] drm/sun4i: tcon: fix inverted DCLK polarity
    - [mips*] properly stop .eh_frame generation
    - [arm64,armhf] drm/tegra: Fix reference leak when pm_runtime_get_sync()
      fails
    - bsg: free the request before return error code
    - media: lmedm04: Fix misuse of comma
    - media: qm1d1c0042: fix error return code in qm1d1c0042_init()
    - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values
    - sched/eas: Don't update misfit status if the task is pinned
    - f2fs: compress: fix potential deadlock
    - [arm64] ASoC: qcom: lpass-cpu: Remove bit clock state check
    - perf/arm-cmn: Fix PMU instance naming
    - perf/arm-cmn: Move IRQs when migrating context
    - mm: proc: Invalidate TLB after clearing soft-dirty page state
    - f2fs: fix to avoid inconsistent quota data
    - f2fs: fix a wrong condition in __submit_bio
    - [arm64] ASoC: qcom: Fix typo error in HDMI regmap config callbacks
    - [x86] KVM: nSVM: Don't strip host's C-bit from guest's CR3 when reading
      PDPTRs
    - [x86] Drivers: hv: vmbus: Avoid use-after-free in
      vmbus_onoffer_rescind()
    - [x86] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A5E
    - [x86] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A3E
    - locking/lockdep: Avoid unmatched unlock
    - [arm64] ASoC: qcom: lpass: Fix i2s ctl register bit map
    - btrfs: clarify error returns values in __load_free_space_cache
    - btrfs: fix double accounting of ordered extent for subpage case in
      btrfs_invalidapge
    - [x86] KVM: Restore all 64 bits of DR6 and DR7 during RSM on x86-64
    - [s390x] zcrypt: return EIO when msg retry limit reached
    - [arm*] drm/vc4: hdmi: Move hdmi reset to bind
    - [arm*] drm/vc4: hdmi: Fix register offset with longer CEC messages
    - [arm*] drm/vc4: hdmi: Fix up CEC registers
    - [arm*] drm/vc4: hdmi: Restore cec physical address on reconnect
    - [arm*] drm/vc4: hdmi: Compute the CEC clock divider from the clock rate
    - [arm*] drm/vc4: hdmi: Update the CEC clock divider on HSM rate change
    - drm/dp_mst: Don't cache EDIDs for physical ports
    - crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()
    - io_uring: fix possible deadlock in io_uring_poll
    - nvme-multipath: set nr_zones for zoned namespaces
    - nvmet: remove extra variable in identify ns
    - nvmet: set status to 0 in case for invalid nsid
    - [armel,armhf] ASoC: simple-card-utils: Fix device module clock
    - fs/jfs: fix potential integer overflow on shift of a int
    - jffs2: fix use after free in jffs2_sum_write_data()
    - smp: Process pending softirqs in flush_smp_call_function_from_idle()
    - capabilities: Don't allow writing ambiguous v3 file capabilities
    - [armhf] HSI: Fix PM usage counter unbalance in ssi_hw_init
    - [arm64,armhf] clk: meson: clk-pll: fix initializing the old rate
      (fallback) for a PLL
    - [arm64,armhf] clk: meson: clk-pll: make "ret" a signed integer
    - [arm64,armhf] clk: meson: clk-pll: propagate the error from
      meson_clk_pll_set_rate()
    - quota: Fix memory leak when handling corrupted quota file
    - [arm64] clk: sunxi-ng: h6: Fix CEC clock
    - HID: core: detect and skip invalid inputs to snto32()
    - fdt: Properly handle "no-map" field in the memory region
    - of/fdt: Make sure no-map does not remove already reserved regions
    - [armhf] spi: imx: Don't print error on -EPROBEDEFER
    - RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation
    - IB/mlx5: Add mutex destroy call to cap_mask_mutex mutex
    - [arm64] clk: sunxi-ng: h6: Fix clock divider range on some clocks
    - [arm64,armhf] platform/chrome: cros_ec_proto: Use EC_HOST_EVENT_MASK not
      BIT
    - [arm64,armhf] platform/chrome: cros_ec_proto: Add LID and BATTERY to
      default mask
    - [arm64,armhf] regulator: axp20x: Fix reference cout leak
    - watch_queue: Drop references to /dev/watch_queue
    - certs: Fix blacklist flag type confusion
    - [armhf] regulator: s5m8767: Fix reference count leak
    - [armhf] regulator: s5m8767: Drop regulators OF node reference
    - [arm64,armhf] power: supply: axp20x_usb_power: Init work before enabling
      IRQs
    - regulator: core: Avoid debugfs: Directory ... already present! error
    - isofs: release buffer head before return
    - objtool: Fix error handling for STD/CLD warnings
    - objtool: Fix retpoline detection in asm code
    - objtool: Fix ".cold" section suffix check for newer versions of GCC
    - scsi: lpfc: Fix ancient double free
    - iommu: Switch gather->end to the inclusive end
    - IB/umad: Return EIO in case of when device disassociated
    - IB/umad: Return EPOLLERR in case of when device disassociated
    - [ppc64el] KVM: Make the VMX instruction emulation routines static
    - [powerpc*] time: Enable sched clock for irqtime
    - [armel,armhf] 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+
      cores
    - [arm*] amba: Fix resource leak for drivers without .remove
    - iommu: Move iotlb_sync_map out from __iommu_map
    - iommu: Properly pass gfp_t in _iommu_map() to avoid atomic sleeping
    - IB/mlx5: Return appropriate error code instead of ENOMEM
    - IB/cm: Avoid a loop when device has 255 ports
    - tracepoint: Do not fail unregistering a probe due to memory failure
    - perf tools: Fix DSO filtering when not finding a map for a sampled
      address
    - perf vendor events arm64: Fix Ampere eMag event typo
    - RDMA/rxe: Fix coding error in rxe_recv.c
    - RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt
    - RDMA/rxe: Correct skb on loopback path
    - [powerpc*] pseries/dlpar: handle ibm, configure-connector delay status
    - [arm64] RDMA/hns: Fixed wrong judgments in the goto branch
    - [arm64] RDMA/hns: Fix type of sq_signal_bits
    - [arm64] RDMA/hns: Disable RQ inline by default
    - clk: divider: fix initialization with parent_hw
    - [amd64] spi: pxa2xx: Fix the controller numbering for Wildcat Point
    - [powerpc*] uaccess: Avoid might_fault() when user access is enabled
    - [powerpc*] kuap: Restore AMR after replaying soft interrupts
    - perf symbols: Use (long) for iterator for bfd symbols
    - spi: Skip zero-length transfers in spi_transfer_one_message()
    - printk: avoid prb_first_valid_seq() where possible
    - perf symbols: Fix return value when loading PE DSO
    - nfsd: register pernet ops last, unregister first
    - svcrdma: Hold private mutex while invoking rdma_accept()
    - ceph: fix flush_snap logic after putting caps
    - [arm64] RDMA/hns: Fixes missing error code of CMDQ
    - RDMA/ucma: Fix use-after-free bug in ucma_create_uevent
    - Input: sur40 - fix an error code in sur40_probe()
    - perf record: Fix continue profiling after draining the buffer
    - perf intel-pt: Fix missing CYC processing in PSB
    - perf intel-pt: Fix premature IPC
    - perf intel-pt: Fix IPC with CYC threshold
    - perf test: Fix unaligned access in sample parsing test
    - Input: elo - fix an error code in elo_connect()
    - [arm64,armhf] phy: rockchip-emmc: emmc_phy_init() always return 0
    - [arm64,armhf] pwm: rockchip: Enable APB clock during register access
      while probing
    - [arm64,armhf] pwm: rockchip: rockchip_pwm_probe(): Remove superfluous
      clk_unprepare()
    - [arm64,armhf] pwm: rockchip: Eliminate potential race condition when
      probing
    - [x86] VMCI: Use set_page_dirty_lock() when unregistering guest memory
    - PCI: Align checking of syscall user config accessors
    - [x86] mei: hbm: call mei_set_devstate() on hbm stop response
    - [arm64] drm/msm: Fix MSM_INFO_GET_IOVA with carveout
    - [arm64] drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY)
    - [arm64] drm/msm/mdp5: Fix wait-for-commit for cmd panels
    - [arm64] drm/msm: Fix race of GPU init vs timestamp power management.
    - [arm64] drm/msm: Fix races managing the OOB state for timestamp vs
      timestamps.
    - [arm64] drm/msm/dp: trigger unplug event in msm_dp_display_disable
    - [amd64,arm64] vfio/iommu_type1: Populate full dirty when detach
      non-pinned group
    - [amd64,arm64] vfio/iommu_type1: Fix some sanity checks in detach group
    - ext4: fix potential htree index checksum corruption
    - nvmem: core: Fix a resource leak on error in nvmem_add_cells_from_of()
    - nvmem: core: skip child nodes not matching binding
    - soundwire: bus: use sdw_update_no_pm when initializing a device
    - soundwire: bus: use sdw_write_no_pm when setting the bus scale registers
    - soundwire: export sdw_write/read_no_pm functions
    - soundwire: bus: fix confusion on device used by pm_runtime
    - ext: EXT4_KUNIT_TESTS should depend on EXT4_FS instead of selecting it
    - PCI: pci-bridge-emul: Fix array overruns, improve safety
    - i40e: Fix flow for IPv6 next header (extension header)
    - i40e: Add zero-initialization of AQ command structures
    - i40e: Fix overwriting flow control settings during driver loading
    - i40e: Fix addition of RX filters after enabling FW LLDP agent
    - i40e: Fix VFs not created
    - Take mmap lock in cacheflush syscall
    - i40e: Fix add TC filter for IPv6
    - [amd64,arm64] vfio/type1: Use follow_pte()
    - ice: report correct max number of TCs
    - ice: Account for port VLAN in VF max packet size calculation
    - ice: Fix state bits on LLDP mode switch
    - ice: update the number of available RSS queues
    - [arm64,armhf] net: stmmac: fix CBS idleslope and sendslope calculation
    - net/mlx4_core: Add missed mlx4_free_cmd_mailbox()
    - [arm64] PCI: rockchip: Make 'ep-gpios' DT property optional
    - vxlan: move debug check after netdev unregister
    - wireguard: device: do not generate ICMP for non-IP packets
    - wireguard: kconfig: use arm chacha even with no neon
    - ocfs2: fix a use after free on error
    - mm: memcontrol: fix NR_ANON_THPS accounting in charge moving
    - mm: memcontrol: fix slub memory accounting
    - mm/memory.c: fix potential pte_unmap_unlock pte error
    - mm/hugetlb: fix potential double free in hugetlb_register_node() error
      path
    - mm/hugetlb: suppress wrong warning info when alloc gigantic page
    - mm/compaction: fix misbehaviors of fast_find_migrateblock()
    - NFSv4: Fixes for nfs4_bitmask_adjust()
    - [x86] KVM: SVM: Intercept INVPCID when it's disabled to inject #UD
    - [x86] KVM: x86/mmu: Expand collapsible SPTE zap for TDP MMU to
      ZONE_DEVICE and HugeTLB pages
    - [arm64] Add missing ISB after invalidating TLB in __primary_switch
    - [armhf] i2c: exynos5: Preserve high speed master code
    - mm,thp,shmem: make khugepaged obey tmpfs mount flags
    - mm: fix memory_failure() handling of dax-namespace metadata
    - mm/rmap: fix potential pte_unmap on an not mapped pte
    - proc: use kvzalloc for our kernel buffer
    - scsi: sd: sd_zbc: Don't pass GFP_NOIO to kvcalloc
    - block: reopen the device in blkdev_reread_part
    - scsi: sd: Fix Opal support
    - blk-settings: align max_sectors on "logical_block_size" boundary
    - ACPI: property: Fix fwnode string properties matching
    - ACPI: configfs: add missing check after
      configfs_register_default_group()
    - cpufreq: ACPI: Set cpuinfo.max_freq directly if max boost is known
    - HID: logitech-dj: add support for keyboard events in eQUAD step 4 Gaming
    - HID: wacom: Ignore attempts to overwrite the touch_max value from HID
    - Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox
      Series X|S
    - Input: joydev - prevent potential read overflow in ioctl
    - Input: i8042 - add ASUS Zenbook Flip to noselftest list
    - media: mceusb: Fix potential out-of-bounds shift
    - USB: serial: option: update interface mapping for ZTE P685M
    - [arm64,armhf] usb: musb: Fix runtime PM race in musb_queue_resume_work
    - [arm64,armhf] usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1
    - [arm64,armhf] usb: dwc3: gadget: Fix dep->interval for fullspeed
      interrupt
    - USB: serial: ftdi_sio: fix FTX sub-integer prescaler
    - USB: serial: pl2303: fix line-speed handling on newer chips
    - USB: serial: mos7840: fix error code in mos7840_write()
    - USB: serial: mos7720: fix error code in mos7720_write()
    - ALSA: hda: Add another CometLake-H PCI ID
    - ALSA: hda/hdmi: Drop bogus check at closing a stream
    - ALSA: hda/realtek: modify EAPD in the ALC886
    - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup
    - [mips*] Ingenic: Disable HPTLB for D0 XBurst CPUs too
    - [mips*] Revert "MIPS: Octeon: Remove special handling of
      CONFIG_MIPS_ELF_APPENDED_DTB=y"
    - Revert "bcache: Kill btree_io_wq"
    - bcache: Give btree_io_wq correct semantics again
    - bcache: Move journal work to new flush wq
    - drm/amdgpu: Set reference clock to 100Mhz on Renoir (v2)
    - drm/nouveau/kms: handle mDP connectors
    - drm/modes: Switch to 64bit maths to avoid integer overflow
    - drm/sched: Cancel and flush all outstanding jobs before finish.
    - selinux: fix inconsistency between inode_getxattr and inode_listsecurity
    - tpm_tis: Fix check_locality for correct locality acquisition
    - tpm_tis: Clean up locality release
    - KEYS: trusted: Fix incorrect handling of tpm_get_random()
    - KEYS: trusted: Fix migratable=1 failing
    - KEYS: trusted: Reserve TPM for seal and unseal operations
    - btrfs: do not cleanup upper nodes in btrfs_backref_cleanup_node
    - btrfs: do not warn if we can't find the reloc root when looking up
      backref
    - btrfs: add asserts for deleting backref cache nodes
    - btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root
    - btrfs: fix reloc root leak with 0 ref reloc roots on recovery
    - btrfs: splice remaining dirty_bg's onto the transaction dirty bg list
    - btrfs: handle space_info::total_bytes_pinned inside the delayed ref
      itself
    - btrfs: account for new extents being deleted in total_bytes_pinned
    - btrfs: fix extent buffer leak on failure to copy root
    - [arm64] crypto: arm64/sha - add missing module aliases
    - [x86] crypto: aesni - prevent misaligned buffers on the stack
    - crypto: michael_mic - fix broken misalignment handling
    - seccomp: Add missing return in non-void function
    - [arm64] ptrace: Fix seccomp of traced syscall -1 (NO_SYSCALL)
    - misc: rtsx: init of rts522a add OCP power off when no card is present
    - [x86] drivers/misc/vmw_vmci: restrict too big queue size in
      qp_host_alloc_queue
    - pstore: Fix typo in compression option name
    - staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table
    - floppy: reintroduce O_NDELAY fix
    - media: marvell-ccic: power up the device on mclk enable
    - media: smipcie: fix interrupt handling and IR timeout
    - [x86] virt: Eat faults on VMXOFF in reboot flows
    - [x86] reboot: Force all cpus to exit VMX root if VMX is supported
    - [x86] fault: Fix AMD erratum #91 errata fixup for user code
    - [x86] entry: Fix instrumentation annotation
    - [powerpc*] prom: Fix "ibm,arch-vec-5-platform-support" scan
    - rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers
    - rcu/nocb: Perform deferred wake up before last idle's need_resched()
      check
    - kprobes: Fix to delay the kprobes jump optimization
    - [arm64] Extend workaround for erratum 1024718 to all versions of
      Cortex-A55
    - [arm64] uprobe: Return EOPNOTSUPP for AARCH32 instruction probing
    - [arm64] module: set plt* section addresses to 0x0
    - [arm64] spectre: Prevent lockdep splat on v4 mitigation enable path
    - [arm64] watchdog: qcom: Remove incorrect usage of QCOM_WDT_ENABLE_IRQ
    - [x86] watchdog: mei_wdt: request stop on unregister
    - fs/affs: release old buffer head on error path
    - seq_file: document how per-entry resources are managed.
    - [x86] fix seq_file iteration for pat/memtype.c
    - mm: memcontrol: fix swap undercounting in cgroup2
    - mm: memcontrol: fix get_active_memcg return value
    - hugetlb: fix update_and_free_page contig page struct assumption
    - hugetlb: fix copy_huge_page_from_user contig page struct assumption
    - mm/vmscan: restore zone_reclaim_mode ABI
    - mm, compaction: make fast_isolate_freepages() stay within zone
    - [x86] KVM: nSVM: fix running nested guests when npt=0
    - nvmem: qcom-spmi-sdam: Fix uninitialized pdev pointer
    - module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols
    - [armhf] mmc: sdhci-esdhc-imx: fix kernel panic when remove module
    - mmc: sdhci-pci-o2micro: Bug fix for SDR104 HW tuning failure
    - [arm64] spmi: spmi-pmic-arb: Fix hw_irq overflow
    - [x86] mei: fix transfer over dma with extended header
    - [x86] mei: me: emmitsburg workstation DID
    - [x86] mei: me: add adler lake point S DID
    - [x86] mei: me: add adler lake point LP DID
    - [armhf] gpio: pcf857x: Fix missing first interrupt
    - printk: fix deadlock when kernel panic
    - exfat: fix shift-out-of-bounds in exfat_fill_super()
    - zonefs: Fix file size of zones in full condition
    - [x86] cpufreq: intel_pstate: Change intel_pstate_get_hwp_max() argument
    - [x86] cpufreq: intel_pstate: Get per-CPU max freq via
      MSR_HWP_CAPABILITIES if available
    - proc: don't allow async path resolution of /proc/thread-self components
    - [s390x] vtime: fix inline assembly clobber list
    - [s390x] virtio/s390: implement virtio-ccw revision 2 correctly
    - f2fs: fix out-of-repair __setattr_copy()
    - f2fs: enforce the immutable flag on open files
    - f2fs: flush data when enabling checkpoint back
    - gfs2: fix glock confusion in function signal_our_withdraw
    - gfs2: Don't skip dlm unlock if glock has an lvb
    - gfs2: Lock imbalance on error path in gfs2_recover_one
    - gfs2: Recursive gfs2_quota_hold in gfs2_iomap_end
    - dm: fix deadlock when swapping to encrypted device
    - dm table: fix iterate_devices based device capability checks
    - dm table: fix DAX iterate_devices based device capability checks
    - dm table: fix zoned iterate_devices based device capability checks
    - dm writecache: fix performance degradation in ssd mode
    - dm writecache: return the exact table values that were set
    - dm writecache: fix writing beyond end of underlying device when
      shrinking
    - dm era: Recover committed writeset after crash
    - dm era: Update in-core bitset after committing the metadata
    - dm era: Verify the data block size hasn't changed
    - dm era: Fix bitset memory leaks
    - dm era: Use correct value size in equality function of writeset tree
    - dm era: Reinitialize bitset cache before digesting a new writeset
    - dm era: only resize metadata in preresume
    - kgdb: fix to kill breakpoints on initmem after boot
    - ipv6: silence compilation warning for non-IPV6 builds
    - net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending
    - wireguard: queueing: get rid of per-peer ring buffers
    - net: sched: fix police ext initialization
    - net_sched: fix RTNL deadlock again caused by request_module()
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.21
    - net: usb: qmi_wwan: support ZTE P685M modem
    - Input: elantech - fix protocol errors for some trackpoints in SMBus mode
    - Input: elan_i2c - add new trackpoint report type 0x5F
    - drm/virtio: use kvmalloc for large allocations
    - [x86] build: Treat R_386_PLT32 relocation as R_386_PC32
    - JFS: more checks for invalid superblock
    - sched/core: Allow try_invoke_on_locked_down_task() with irqs disabled
    - udlfb: Fix memory leak in dlfb_usb_probe
    - media: mceusb: sanity check for prescaler value
    - erofs: fix shift-out-of-bounds of blkszbits
    - media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate
    - xfs: Fix assert failure in xfs_setattr_size()
    - [s390x] net/af_iucv: remove WARN_ONCE on malformed RX packets
    - tomoyo: ignore data race while checking quota
    - net: fix up truesize of cloned skb in skb_prepare_for_shift()
    - [riscv64] Get rid of MAX_EARLY_MAPPING_SIZE
    - nbd: handle device refs for DESTROY_ON_DISCONNECT properly
    - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing
    - tcp: fix tcp_rmem documentation
    - net: bridge: use switchdev for port flags set through sysfs too
    - net/sched: cls_flower: Reject invalid ct_state flags rules
    - net: psample: Fix netlink skb length with tunnel info
    - net: fix dev_ifsioc_locked() race condition
    - dt-bindings: ethernet-controller: fix fixed-link specification
    - dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/
    - [arm64] ASoC: qcom: Remove useless debug print
    - rsi: Fix TX EAPOL packet handling against iwlwifi AP
    - rsi: Move card interrupt handling to RX thread
    - [x86] EDAC/amd64: Do not load on family 0x15, model 0x13
    - [x86] reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk
    - vt/consolemap: do font sum unsigned
    - [arm64,armhf] wlcore: Fix command execute failure 19 for wl12xx
    - Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl
    - Bluetooth: btusb: fix memory leak on suspend and resume
    - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()
    - ath10k: fix wmi mgmt tx queue full due to race condition
    - net: sfp: add mode quirk for GPON module Ubiquiti U-Fiber Instant
    - Bluetooth: Add new HCI_QUIRK_NO_SUSPEND_NOTIFIER quirk
    - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
    - [arm*] staging: bcm2835-audio: Replace unsafe strcpy() with strscpy()
    - brcmfmac: Add DMI nvram filename quirk for Predia Basic tablet
    - brcmfmac: Add DMI nvram filename quirk for Voyo winpad A15 tablet
    - [arm64] drm/hisilicon: Fix use-after-free
    - crypto: tcrypt - avoid signed overflow in byte count
    - fs: make unlazy_walk() error handling consistent
    - drm/amdgpu: Add check to prevent IH overflow
    - PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse
    - [x86] ASoC: Intel: bytcr_rt5640: Add new BYT_RT5640_NO_SPEAKERS
      quirk-flag
    - media: uvcvideo: Allow entities with no pads
    - f2fs: handle unallocated section and zone on pinned/atgc
    - f2fs: fix to set/clear I_LINKABLE under i_lock
    - nvme-core: add cancel tagset helpers
    - nvme-rdma: add clean action for failed reconnection
    - nvme-tcp: add clean action for failed reconnection
    - ASoC: Intel: Add DMI quirk table to soc_intel_is_byt_cr()
    - btrfs: fix error handling in commit_fs_roots
    - [x86] perf/x86/kvm: Add Cascade Lake Xeon steppings to
      isolation_ucodes[]
    - [x86] ASoC: Intel: sof-sdw: indent and add quirks consistently
    - [x86] ASoC: Intel: sof_sdw: detect DMIC number based on mach params
    - sched/features: Fix hrtick reprogramming
    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Estar Beauty HD MID
      7316R tablet
    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15
      tablet
    - [x86] ASoC: Intel: bytcr_rt5651: Add quirk for the Jumper EZpad 7 tablet
    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Acer One S1002 tablet
    - scsi: iscsi: Restrict sessions and handles to admin capabilities
      (CVE-2021-27363, CVE-2021-27364)
    - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE
      (CVE-2021-27365)
    - scsi: iscsi: Verify lengths on passthrough PDUs (CVE-2021-27365)
    - Xen/gnttab: handle p2m update errors on a per-slot basis
      (CVE-2021-28038)
    - xen-netback: respect gnttab_map_refs()'s return value (CVE-2021-28038)
    - xen: fix p2m size in dom0 for disabled memory hotplug case
      (CVE-2021-28039)
    - zsmalloc: account the number of compacted pages correctly
    - swap: fix swapfile read/write offset
    - [powerpc*] sstep: Check instruction validity against ISA version before
      emulation
    - [powerpc*] sstep: Fix incorrect return from analyze_instr()
    - tty: fix up iterate_tty_read() EOVERFLOW handling
    - tty: fix up hung_up_tty_read() conversion
    - tty: clean up legacy leftovers from n_tty line discipline
    - tty: teach n_tty line discipline about the new "cookie continuations"
    - tty: teach the n_tty ICANON case about the new "cookie continuations"
      too
    - media: v4l: ioctl: Fix memory leak in video_usercopy
    - ALSA: hda/realtek: Add quirk for Clevo NH55RZQ
    - ALSA: hda/realtek: Add quirk for Intel NUC 10
    - ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board
    - net: sfp: VSOL V2801F / CarlitoxxPro CPGOS03-0490 v2.0 workaround
    - net: sfp: add workaround for Realtek RTL8672 and RTL9601C chips
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.22
    - ALSA: hda/realtek: Enable headset mic of Acer SWIFT with ALC256
    - ALSA: usb-audio: Drop bogus dB range in too low level
    - tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality()
    - tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality()
    - btrfs: avoid double put of block group when emptying cluster
    - btrfs: fix raid6 qstripe kmap
    - btrfs: fix race between writes to swap files and scrub
    - btrfs: fix race between swap file activation and snapshot creation
    - btrfs: fix stale data exposure after cloning a hole with NO_HOLES
      enabled
    - btrfs: fix race between extent freeing/allocation when using bitmaps
    - btrfs: validate qgroup inherit for SNAP_CREATE_V2 ioctl
    - btrfs: free correct amount of space in
      btrfs_delayed_inode_reserve_metadata
    - btrfs: unlock extents in btrfs_zero_range in case of quota reservation
      errors
    - btrfs: fix warning when creating a directory with smack enabled
    - PM: runtime: Update device status before letting suppliers suspend
    - ring-buffer: Force before_stamp and write_stamp to be different on
      discard
    - io_uring: ignore double poll add on the same waitqueue head
    - dm bufio: subtract the number of initial sectors in
      dm_bufio_get_device_size
    - drm/amdgpu:disable VCN for Navi12 SKU
    - drm/amdgpu: fix parameter error of RREG32_PCIE() in amdgpu_regs_pcie
    - [arm64] mm: Move reserve_crashkernel() into mem_init()
    - [arm64] mm: Move zone_dma_bits initialization into zone_sizes_init()
    - of/address: Introduce of_dma_get_max_cpu_address()
    - [arm64] mm: Set ZONE_DMA size based on devicetree's dma-ranges
    - [arm64] mm: Set ZONE_DMA size based on early IORT scan
    - ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits
    - RDMA/cm: Fix IRQ restore in ib_send_cm_sidr_rep
    - IB/mlx5: Add missing error code
    - ALSA: hda: intel-nhlt: verify config type
    - ftrace: Have recordmcount use w8 to read relp->r_info in
      arm64_is_fake_mcount
    - rsxx: Return -EFAULT if copy_to_user() fails
    - [amd64] iommu/vt-d: Fix status code for Allocate/Free PASID command
    - tomoyo: recognize kernel threads correctly
    - r8169: fix resuming from suspend on RTL8105e if machine runs on battery
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.23
    - ACPICA: Fix race in generic_serial_bus (I2C) and GPIO op_region
      parameter handling
    - nvme-pci: mark Kingston SKC2000 as not supporting the deepest power
      state
    - btrfs: export and rename qgroup_reserve_meta
    - btrfs: don't flush from btrfs_delayed_inode_reserve_metadata
    - [amd64] iommu/amd: Fix sleeping in atomic in increase_address_space()
    - Bluetooth: btqca: Add valid le states quirk
    - mwifiex: pcie: skip cancel_work_sync() on reset failure path
    - [x86] ASoC: Intel: sof_sdw: add quirk for new TigerLake-SDCA device
    - [armhf] bus: ti-sysc: Implement GPMC debug quirk to drop platform data
    - [x86] platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines
    - [x86] platform/x86: acer-wmi: Cleanup accelerometer device handling
    - [x86] platform/x86: acer-wmi: Add new force_caps module parameter
    - [x86] platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability
      flag
    - [x86] platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch
      devices
    - [x86] platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire
      Switch 10E SW3-016
    - HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube
      Adapter
    - media: cx23885: add more quirks for reset DMA on some AMD IOMMU
    - [x86] ACPI: video: Add DMI quirk for GIGABYTE GB-BXBT-2807
    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for ARCHOS Cesium 140
    - PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller
    - [x86] KVM: x86: Supplement __cr4_reserved_bits() with X86_FEATURE_PCID
      check
    - [x86] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A32
    - scsi: ufs: Add a quirk to permit overriding UniPro defaults
    - misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom
    - scsi: ufs: Introduce a quirk to allow only page-aligned sg entries
    - [arm64] drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register
    - HID: i2c-hid: Add I2C_HID_QUIRK_NO_IRQ_AFTER_RESET for ITE8568 EC on
      Voyo Winpad A15
    - ALSA: usb-audio: Add DJM750 to Pioneer mixer quirk
    - ALSA: usb-audio: add mixer quirks for Pioneer DJM-900NXS2
    - [x86] ASoC: Intel: sof_sdw: reorganize quirks by generation
    - [x86] ASoC: Intel: sof_sdw: add quirk for HP Spectre x360 convertible
    - [x86] KVM: SVM: Clear the CR4 register on reset
    - nvme-pci: mark Seagate Nytro XM1440 as QUIRK_NO_NS_DESC_LIST.
    - nvme-pci: add quirks for Lexar 256GB SSD
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.24
    - uapi: nfnetlink_cthelper.h: fix userspace compilation error
    - [powerpc*] perf: Fix handling of privilege level checks in perf interrupt
      context
    - [powerpc*] pseries: Don't enforce MSI affinity with kdump
    - ethernet: alx: fix order of calls on resume (Closes: #983595)
    - [mips*] crypto: mips/poly1305 - enable for all MIPS processors
    - ath9k: fix transmitting to stations in dynamic SMPS mode
    - net: Fix gro aggregation for udp encaps with zero csum
    - net: check if protocol extracted by virtio_net_hdr_set_proto is correct
    - net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0
    - net: l2tp: reduce log level of messages in receive path, add counter
      instead
    - can: skb: can_skb_set_owner(): fix ref counting if socket was closed
      before setting skb ownership
    - [armhf] can: flexcan: assert FRZ bit in flexcan_chip_freeze()
    - [armhf] can: flexcan: enable RX FIFO after FRZ/HALT valid
    - [armhf] can: flexcan: invoke flexcan_chip_freeze() to enter freeze mode
    - tcp: Fix sign comparison bug in getsockopt(TCP_ZEROCOPY_RECEIVE)
    - tcp: add sanity tests to TCP_QUEUE_SEQ
    - netfilter: nf_nat: undo erroneous tcp edemux lookup
    - netfilter: x_tables: gpf inside xt_find_revision()
    - net: always use icmp{,v6}_ndo_send from ndo_start_xmit
    - net: phy: fix save wrong speed and duplex problem if autoneg is on
    - mt76: dma: do not report truncated frames to mac80211
    - [powerpc*] 603: Fix protection of user pages mapped with PROT_NONE
    - mount: fix mounting of detached mounts onto targets that reside on shared
      mounts
    - cifs: return proper error code in statfs(2)
    - Revert "mm, slub: consider rest of partial list if acquire_slab() fails"
    - docs: networking: drop special stable handling
    - [arm64] net: enetc: don't overwrite the RSS indirection table when
      initializing
    - [arm64] net: enetc: take the MDIO lock only once per NAPI poll cycle
    - [arm64] net: enetc: fix incorrect TPID when receiving 802.1ad tagged
      packets
    - [arm64] net: enetc: don't disable VLAN filtering in IFF_PROMISC mode
    - [arm64] net: enetc: force the RGMII speed and duplex instead of operating
      in inband mode
    - [arm64] net: enetc: remove bogus write to SIRXIDR from enetc_setup_rxbdr
    - [arm64] net: enetc: keep RX ring consumer index in sync with hardware
    - net/mlx4_en: update moderation when config reset
    - net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10
    - nexthop: Do not flush blackhole nexthops when loopback goes down
    - net: sched: avoid duplicates in classes dump
    - [arm64] net: mscc: ocelot: properly reject destination IP keys in VCAP IS1
    - net: usb: qmi_wwan: allow qmimux add/del with master up
    - cipso,calipso: resolve a number of problems with the DOI refcounts
    - net: stmmac: Fix VLAN filter delete timeout issue in Intel mGBE SGMII
    - [x86] stmmac: intel: Fixes clock registration error seen for multiple
      interfaces
    - [arm64] net: enetc: allow hardware timestamping on TX queues with tc-etf
      enabled
    - net: qrtr: fix error return code of qrtr_sendmsg()
    - [s390x] qeth: fix memory leak after failed TX Buffer allocation
    - r8169: fix r8168fp_adjust_ocp_cmd function
    - ixgbe: fail to create xfrm offload of IPsec tunnel mode SA
    - net: stmmac: stop each tx channel independently
    - net: stmmac: fix watchdog timeout during suspend/resume stress test
    - net: stmmac: fix wrongly set buffer2 valid when sph unsupport
    - ethtool: fix the check logic of at least one channel for RX/TX
    - net: phy: make mdio_bus_phy_suspend/resume as __maybe_unused
    - perf traceevent: Ensure read cmdlines are null terminated.
    - perf report: Fix -F for branch & mem modes
    - [arm64] net: hns3: fix query vlan mask value error for flow director
    - [arm64] net: hns3: fix bug when calculating the TCAM table info
    - bnxt_en: reliably allocate IRQ table on reset to avoid crash
    - gpiolib: acpi: Add ACPI_GPIO_QUIRK_ABSOLUTE_NUMBER quirk
    - gpiolib: acpi: Allow to find GpioInt() resource by name and index
    - [arm64,armhf] gpio: pca953x: Set IRQ type when handle Intel Galileo Gen 2
    - gpio: fix gpio-device list corruption
    - drm/compat: Clear bounce structures
    - drm/amd/display: Add a backlight module option
    - drm/amd/display: Fix nested FPU context in dcn21_validate_bandwidth()
    - drm/shmem-helper: Check for purged buffers in fault handler
    - drm/shmem-helper: Don't remove the offset in vm_area_struct pgoff
    - drm: Use USB controller's DMA mask when importing dmabufs
    - [arm64] drm: meson_drv add shutdown function
    - drm/shmem-helpers: vunmap: Don't put pages for dma-buf
    - [x86] drm/i915: Wedge the GPU if command parser setup fails
    - qxl: Fix uninitialised struct field head.surface_id
    - media: usbtv: Fix deadlock on suspend
    - media: rc: compile rc-cec.c into rc-core
    - cifs: fix credit accounting for extra channel
    - [arm64] net: hns3: fix error mask definition of flow director
    - [s390x] qeth: don't replace a fully completed async TX buffer
    - [s390x] qeth: remove QETH_QDIO_BUF_HANDLED_DELAYED state
    - [s390x] qeth: improve completion of pending TX buffers
    - [s390x] qeth: fix notification for pending buffers during teardown
    - [arm64,armhf] net: dsa: implement a central TX reallocation procedure
    - [arm64,armhf] net: dsa: trailer: don't allocate additional memory for
      padding/tagging
    - [arm64] net: dsa: tag_ocelot: let DSA core deal with TX reallocation
    - [arm64,armhf] net: dsa: tag_edsa: let DSA core deal with TX reallocation
    - [armhf] net: dsa: tag_brcm: let DSA core deal with TX reallocation
    - [arm64,armhf] net: dsa: tag_dsa: let DSA core deal with TX reallocation
    - [arm64] enetc: Fix unused var build warning for CONFIG_OF
    - [arm64] net: enetc: initialize RFS/RSS memories for unused ports too
    - ath11k: peer delete synchronization with firmware
    - ath11k: start vdev if a bss peer is already created
    - ath11k: fix AP mode for QCA6390
    - scsi: ufs: WB is only available on LUN #0 to #7
    - udf: fix silent AED tagLocation corruption
    - [amd64] iommu/vt-d: Clear PRQ overflow only when PRQ is empty
    - [arm*] mmc: sdhci-iproc: Add ACPI bindings for the RPi
    - Platform: OLPC: Fix probe error handling
    - [powerpc*] pci: Add ppc_md.discover_phbs()
    - [armhf] spi: stm32: make spurious and overrun interrupts visible
    - [powerpc] improve handling of unrecoverable system reset
    - [powerpc] perf: Record counter overflow always if SAMPLE_IP is unset
    - HID: logitech-dj: add support for the new lightspeed connection iteration
    - [powerpc*] 64: Fix stack trace not displaying final frame
    - [amd64] iommu/amd: Fix performance counter initialization
    - [arm64] clk: qcom: gdsc: Implement NO_RET_PERIPH flag
    - [x86] Input: applespi - don't wait for responses to commands indefinitely.
    - [arm64] PCI: xgene-msi: Fix race in installing chained irq handler
    - ext4: don't try to processed freed blocks until mballoc is initialized
    - kbuild: clamp SUBLEVEL to 255
    - PCI: Fix pci_register_io_range() memory leak
    - i40e: Fix memory leak in i40e_probe
    - [s390x] smp: __smp_rescan_cpus() - move cpumask away from stack
    - drivers/base/memory: don't store phys_device in memory blocks
    - sysctl.c: fix underflow value setting risk in vm_table
    - scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling
    - scsi: target: core: Add cmd length set before cmd complete
    - scsi: target: core: Prevent underflow for service actions
    - mmc: sdhci: Update firmware interface API
    - [arm*] assembler: introduce adr_l, ldr_l and str_l macros
    - [arm*] efistub: replace adrl pseudo-op with adr_l macro invocation
    - ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk
    - ALSA: hda/hdmi: Cancel pending works before suspend
    - ALSA: hda/conexant: Add quirk for mute LED control on HP ZBook G5
    - ALSA: hda/ca0132: Add Sound BlasterX AE-5 Plus support
    - ALSA: hda: Drop the BATCH workaround for AMD controllers
    - ALSA: hda: Flush pending unsolicited events before suspend
    - ALSA: hda: Avoid spurious unsol event handling during S3/S4
    - ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar
    - ALSA: usb-audio: Apply the control quirk to Plantronics headsets
    - ALSA: usb-audio: Disable USB autosuspend properly in
      setup_disable_autosuspend()
    - ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
    - ALSA: usb-audio: fix use after free in usb_audio_disconnect
    - Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file
      capabilities")
    - block: Discard page cache of zone reset target range
    - block: Try to handle busy underlying device on discard
    - [arm64] mte: Map hotplugged memory as Normal Tagged
    - [arm64] perf: Fix 64-bit event counter read truncation
    - [s390x] dasd: fix hanging DASD driver unbind
    - [s390]x dasd: fix hanging IO request during DASD driver unbind
    - software node: Fix node registration
    - xen/events: reset affinity of 2-level event when tearing it down
    - [arm64,armhf] mmc: mmci: Add MMC_CAP_NEED_RSP_BUSY for the stm32 variants
    - mmc: core: Fix partition switch time for eMMC
    - mmc: cqhci: Fix random crash when remove mmc module/card
    - cifs: do not send close in compound create+close requests
    - Goodix Fingerprint device is not a modem
    - usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio
      slot
    - usb: gadget: f_uac1: stop playback on function disable
    - [arm64] usb: dwc3: qcom: Add missing DWC3 OF node refcount decrement
    - [arm64] usb: dwc3: qcom: add URS Host support for sdm845 ACPI boot
    - [arm64] usb: dwc3: qcom: add ACPI device id for sc8180x
    - [arm64] usb: dwc3: qcom: Honor wakeup enabled/disabled state
    - USB: usblp: fix a hang in poll() if disconnected
    - usb: xhci: do not perform Soft Retry for some xHCI hosts
    - xhci: Improve detection of device initiated wake signal.
    - usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing
    - xhci: Fix repeated xhci wake after suspend due to uncleared internal wake
      state
    - USB: serial: io_edgeport: fix memory leak in edge_startup
    - USB: serial: ch341: add new Product ID
    - USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter
    - USB: serial: cp210x: add some more GE USB IDs
    - usbip: fix stub_dev to check for stream socket
    - usbip: fix vhci_hcd to check for stream socket
    - usbip: fix vudc to check for stream socket
    - usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
    - usbip: fix vhci_hcd attach_store() races leading to gpf
    - usbip: fix vudc usbip_sockfd_store races leading to gpf
    - [x86] misc/pvpanic: Export module FDT device table
    - misc: fastrpc: restrict user apps from sending kernel RPC messages
      (CVE-2021-28375)
    - [x86] staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan()
    - staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan()
      (CVE-2021-28660)
    - staging: rtl8712: unterminated string leads to read overflow
    - staging: rtl8188eu: fix potential memory corruption in
      rtw_check_beacon_data()
    - staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd
    - [x86] staging: rtl8192e: Fix possible buffer overflow in
      _rtl92e_wx_set_scan
    - [x86] staging: comedi: addi_apci_1032: Fix endian problem for COS sample
    - [x86] staging: comedi: addi_apci_1500: Fix endian problem for command
      sample
    - [x86] staging: comedi: adv_pci1710: Fix endian problem for AI command data
    - [i386] staging: comedi: das6402: Fix endian problem for AI command data
    - [i386] staging: comedi: das800: Fix endian problem for AI command data
    - [i386] staging: comedi: dmm32at: Fix endian problem for AI command data
    - [x86] staging: comedi: me4000: Fix endian problem for AI command data
    - [i386] staging: comedi: pcl711: Fix endian problem for AI command data
    - [i386] staging: comedi: pcl818: Fix endian problem for AI command data
    - [arm64] mm: Fix pfn_valid() for ZONE_DEVICE based memory
    - SUNRPC: Set memalloc_nofs_save() for sync tasks
    - NFS: Don't revalidate the directory permissions on a lookup failure
    - NFS: Don't gratuitously clear the inode cache when lookup failed
    - NFSv4.2: fix return value of _nfs4_get_security_label()
    - block: rsxx: fix error return code of rsxx_pci_probe()
    - nvme-fc: fix racing controller reset and create association
    - configfs: fix a use-after-free in __configfs_open_file
    - [arm64] mm: use a 48-bit ID map when possible on 52-bit VA builds
    - perf/core: Flush PMU internal buffers for per-CPU events
    - [x86] perf/x86/intel: Set PERF_ATTACH_SCHED_CB for large PEBS and LBR
    - hrtimer: Update softirq_expires_next correctly after
      __hrtimer_get_next_event()
    - seqlock,lockdep: Fix seqcount_latch_init()
    - stop_machine: mark helpers __always_inline
    - include/linux/sched/mm.h: use rcu_dereference in in_vfork()
    - zram: fix return value on writeback_store
    - sched/membarrier: fix missing local execution of ipi_sync_rq_state()
    - efi: stub: omit SetVirtualAddressMap() if marked unsupported in RT_PROP
      table
    - [powerpc*] 64s: Fix instruction encoding for lis in ppc_function_entry()
    - [powerpc*] Fix inverted SET_FULL_REGS bitop
    - [powerpc*] Fix missing declaration of [en/dis]able_kernel_vsx()
    - binfmt_misc: fix possible deadlock in bm_register_write
    - [amd64] x86/unwind/orc: Disable KASAN checking in the ORC unwinder, part 2
    - [x86] entry: Move nmi entry/exit into common code
    - [x86] entry: Fix entry/exit mismatch on failed fast 32-bit syscalls
    - [x86] KVM: Ensure deadline timer has truly expired before posting its IRQ
    - [x86] KVM: kvmclock: Fix vCPUs > 64 can't be online/hotpluged
    - [arm64] KVM: Fix range alignment when walking page tables
    - [arm64] KVM: Avoid corrupting vCPU context register in guest exit
    - [arm64] KVM: nvhe: Save the SPE context early
    - [arm64] KVM: Reject VM creation when the default IPA size is unsupported
    - [arm64] KVM: Fix exclusive limit for IPA size
    - mm/userfaultfd: fix memory corruption due to writeprotect
    - mm/madvise: replace ptrace attach requirement for process_madvise
    - [arm64] KVM: Ensure I-cache isolation between vcpus of a same VM
    - mm/page_alloc.c: refactor initialization of struct page for holes in
      memory layout
    - xen/events: don't unmask an event channel when an eoi is pending
    - xen/events: avoid handling the same event on two cpus at the same time
    - [arm64] KVM: Fix nVHE hyp panic host context restore
    - RDMA/umem: Use ib_dma_max_seg_size instead of dma_get_max_seg_size
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 5
  * [rt] Refresh "printk: remove logbuf_lock"
  * [rt] Refresh "printk: remove safe buffers"
  * [rt] Refresh "printk: remove deferred printing"
  * [rt] Refresh "mm/memcontrol: Replace local_irq_disable with local locks"
  * [rt] Update to 5.10.21-rt34
  * Refresh "Include package version along with kernel release in stack
    traces"
  * bpf: Prohibit alu ops for pointer types not defining ptr_limit
    (CVE-2020-27170)
  * bpf: Fix off-by-one for area size in creating mask to left
    (CVE-2020-27171)
  * bpf: Simplify alu_limit masking for pointer arithmetic
  * bpf: Add sanity check for upper ptr_limit
  * bpf, selftests: Fix up some test_verifier cases for unprivileged
  * [x86] crypto: aesni - Use TEST %reg,%reg instead of CMP $0,%reg
  * [x86] crypto: x86/aes-ni-xts - use direct calls to and 4-way stride
  * RDMA/srp: Fix support for unpopulated and unbalanced NUMA nodes
  * fuse: fix live lock in fuse_iget()
  * Revert "nfsd4: remove check_conflicting_opens warning"
  * Revert "nfsd4: a client's own opens needn't prevent delegations"
  * ALSA: usb-audio: Don't avoid stopping the stream at disconnection
  * [armhf] net: dsa: b53: Support setting learning on port
.
  [ Wookey ]
  * [arm64] drivers/perf: Enable ARM_CMN as module (Closes: #981186)
.
  [ Vincent Blut ]
  * [arm64] drivers/perf: Enable ARM_SMMU_V3_PMU as module
.
linux (5.10.19-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.14
    - [armhf] net: fec: put child node on error path
    - [x86] stmmac: intel: Configure EHL PSE0 GbE and PSE1 GbE to 32 bits DMA
      addressing
    - [armhf] net: dsa: bcm_sf2: put device node before return
    - net: switchdev: don't set port_obj_info->handled true when -EOPNOTSUPP
    - [arm64,armhf] iommu/io-pgtable-arm: Support coherency for Mali LPAE
    - [arm64,armhf] drm/panfrost: Support cache-coherent integrations
    - [arm64] Fix kernel address detection of __is_lm_address()
    - [arm64] Do not pass tagged addresses to __is_lm_address()
    - Revert "x86/setup: don't remove E820_TYPE_RAM for pfn 0"
    - [amd64] iommu/vt-d: Do not use flush-queue when caching-mode is on
    - [x86] platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix
      touchscreen on Estar Beauty HD tablet
    - [x86] platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron
      7352
    - [x86] __always_inline __{rd,wr}msr()
    - scsi: scsi_transport_srp: Don't block target in failfast state
    - scsi: libfc: Avoid invoking response handler twice if ep is already
      completed
    - [x86] scsi: fnic: Fix memleak in vnic_dev_init_devcmd2
    - [x86] ASoC: SOF: Intel: hda: Resume codec to do jack detection
    - ALSA: hda: Add AlderLake-P PCI ID and HDMI codec vid
    - mac80211: fix fast-rx encryption check
    - mac80211: fix encryption key selection for 802.3 xmit
    - [powerpc*] scsi: ibmvfc: Set default timeout to avoid crash during
      migration
    - ALSA: hda: Add Cometlake-R PCI ID
    - [arm64,armhf] i2c: tegra: Create i2c_writesl_vi() to use with VI I2C for
      filling TX FIFO
    - udf: fix the problem that the disc content is not displayed
    - nvme: check the PRINFO bit before deciding the host buffer length
    - nvme-rdma: avoid request double completion for concurrent
      nvme_rdma_timeout
    - nvme-tcp: avoid request double completion for concurrent
      nvme_tcp_timeout
    - nvme-pci: allow use of cmb on v1.4 controllers
    - nvmet: set right status on error in id-ns handler
    - [x86] platform/x86: thinkpad_acpi: Add P53/73 firmware to
      fan_quirk_table for dual fan control
    - objtool: Don't fail the kernel build on fatal errors
    - [x86] cpu: Add another Alder Lake CPU to the Intel family
    - kthread: Extract KTHREAD_IS_PER_CPU
    - workqueue: Restrict affinity change to rescuer
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.15
    - USB: serial: cp210x: add pid/vid for WSDA-200-USB
    - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
    - USB: serial: option: Adding support for Cinterion MV31
    - [arm64,armhf] usb: host: xhci: mvebu: make USB 3.0 PHY optional for
      Armada 3720
    - USB: gadget: legacy: fix an error code in eth_bind()
    - [armhf] usb: gadget: aspeed: add missing of_node_put
    - USB: usblp: don't call usb_set_interface if there's a single alt
    - [arm*] usb: dwc2: Fix endpoint direction check in ep_from_windex
    - [arm64,armhf] usb: dwc3: fix clock issue during resume in OTG mode
    - [arm64] dts: qcom: c630: keep both touchpad devices enabled
    - Input: i8042 - unbreak Pegatron C15B
    - [arm64] dts: rockchip: Use only supported PCIe link speed on Pinebook
      Pro
    - bpf, cgroup: Fix optlen WARN_ON_ONCE toctou (CVE-2021-20194)
    - bpf, cgroup: Fix problematic bounds check (CVE-2021-20194)
    - bpf, inode_storage: Put file handler if no storage was found
    - bpf, preload: Fix build when $(O) points to a relative path
    - [arm64] dts: meson: switch TFLASH_VDD_EN pin to open drain on Odroid-C4
    - r8169: work around RTL8125 UDP hw bug
    - rxrpc: Fix deadlock around release of dst cached on udp tunnel
    - SUNRPC: Fix NFS READs that start at non-page-aligned offsets
    - igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr
    - igc: check return value of ret_val in igc_config_fc_after_link_up
    - i40e: Revert "i40e: don't report link up for a VF who hasn't enabled
      queues"
    - net/mlx5: Fix function calculation for page trees
    - net/mlx5: Fix leak upon failure of rule creation
    - net/mlx5e: Update max_opened_tc also when channels are closed
    - net/mlx5e: Release skb in case of failure in tc update skb
    - net: lapb: Copy the skb before sending a packet
    - [arm64,armhf] net: mvpp2: TCAM entry enable should be written after SRAM
      data
    - [armhf] dts: sun7i: a20: bananapro: Fix ethernet phy-mode
    - nvmet-tcp: fix out-of-bounds access when receiving multiple h2cdata PDUs
    - memblock: do not start bottom-up allocations with kernel_end
    - [x86] thunderbolt: Fix possible NULL pointer dereference in
      tb_acpi_add_link()
    - ovl: fix dentry leak in ovl_get_redirect
    - ovl: avoid deadlock on directory ioctl
    - ovl: implement volatile-specific fsync error behaviour
    - mac80211: fix station rate table updates on assoc
    - gpiolib: free device name on error path to fix kmemleak
    - fgraph: Initialize tracing_graph_pause at task creation
    - tracing/kprobe: Fix to support kretprobe events on unloaded modules
    - kretprobe: Avoid re-registration of the same kretprobe earlier
    - tracing: Use pause-on-trace with the latency tracers
    - tracepoint: Fix race between tracing and removing tracepoint
    - [arm64,x86] libnvdimm/namespace: Fix visibility of namespace resource
      attribute
    - [arm64,x86] libnvdimm/dimm: Avoid race between probe and
      available_slots_show()
    - genirq: Prevent [devm_]irq_alloc_desc from returning irq 0
    - genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set
    - scripts: use pkg-config to locate libcrypto
    - xhci: fix bounce buffer usage for non-sg list case
    - cifs: report error instead of invalid when revalidating a dentry fails
    - iommu: Check dev->iommu in dev_iommu_priv_get() before dereferencing it
    - smb3: Fix out-of-bounds bug in SMB2_negotiate()
    - smb3: fix crediting for compounding when only one request in flight
    - mmc: core: Limit retries when analyse of SDIO tuples fails
    - [x86] Fix unsynchronized access to sev members through
      svm_register_enc_region
    - drm/dp/mst: Export drm_dp_get_vc_payload_bw()
    - [x86] drm/i915: Fix the MST PBN divider calculation
    - [x86] drm/i915/gem: Drop lru bumping on display unpinning
    - [x86] drm/i915/gt: Close race between enable_breadcrumbs and
      cancel_breadcrumbs
    - [x86] drm/i915/display: Prevent double YUV range correction on HDR
      planes
    - [x86] drm/i915: Extract intel_ddi_power_up_lanes()
    - [x86] drm/i915: Power up combo PHY lanes for for HDMI as well
    - drm/amd/display: Revert "Fix EDID parsing after resume from suspend"
    - io_uring: don't modify identity's files uncess identity is cowed
    - nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs
    - [x86] KVM: SVM: Treat SVM as unsupported when running as an SEV guest
    - [x86] KVM: x86/mmu: Fix TDP MMU zap collapsible SPTEs
    - [x86] KVM: x86: Allow guests to see MSR_IA32_TSX_CTRL even if tsx=off
    - [x86] KVM: x86: fix CPUID entries returned by KVM_GET_CPUID2 ioctl
    - [x86] KVM: x86: Update emulator context mode if SYSENTER xfers to 64-bit
      mode
    - [x86] KVM: x86: Set so called 'reserved CR3 bits in LM mask' at vCPU
      reset
    - mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page
    - mm: hugetlb: fix a race between freeing and dissolving the page
    - mm: hugetlb: fix a race between isolating and freeing page
    - mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active
    - mm, compaction: move high_pfn to the for loop scope
    - mm/vmalloc: separate put pages and flush VM flags
    - mm: thp: fix MADV_REMOVE deadlock on shmem THP
    - mm/filemap: add missing mem_cgroup_uncharge() to
      __add_to_page_cache_locked()
    - [x86] build: Disable CET instrumentation in the kernel
    - [x86] debug: Fix DR6 handling
    - [x86] debug: Prevent data breakpoints on __per_cpu_offset
    - [x86] debug: Prevent data breakpoints on cpu_dr7
    - [x86] apic: Add extra serialization for non-serializing MSRs
    - Input: goodix - add support for Goodix GT9286 chip
    - Input: xpad - sync supported devices with fork on GitHub
    - md: Set prev_flush_start and flush_bio in an atomic way
    - igc: Report speed and duplex as unknown when device is runtime suspended
    - neighbour: Prevent a dead entry from updating gc_list
    - net: ip_tunnel: fix mtu calculation
    - udp: ipv4: manipulate network header of NATed UDP GRO fraglist
    - [arm64,armhf] net: dsa: mv88e6xxx: override existent unicast portvec in
      port_fdb_add
    - net: sched: replaced invalid qdisc tree flush helper in qdisc_replace
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.16
    - io_uring: simplify io_task_match()
    - io_uring: add a {task,files} pair matching helper
    - io_uring: don't iterate io_uring_cancel_files()
    - io_uring: pass files into kill timeouts/poll
    - io_uring: always batch cancel in *cancel_files()
    - io_uring: fix files cancellation
    - io_uring: account io_uring internal files as REQ_F_INFLIGHT
    - io_uring: if we see flush on exit, cancel related tasks
    - io_uring: fix __io_uring_files_cancel() with TASK_UNINTERRUPTIBLE
    - io_uring: replace inflight_wait with tctx->wait
    - io_uring: fix cancellation taking mutex while TASK_UNINTERRUPTIBLE
    - io_uring: fix flush cqring overflow list while TASK_INTERRUPTIBLE
    - io_uring: fix list corruption for splice file_get
    - io_uring: fix sqo ownership false positive warning
    - io_uring: reinforce cancel on flush during exit
    - io_uring: drop mm/files between task_work_submit
    - gpiolib: cdev: clear debounce period if line set to output
    - [powerpc*] 64/signal: Fix regression in __kernel_sigtramp_rt64()
      semantics
    - af_key: relax availability checks for skb size calculation
    - regulator: core: avoid regulator_resolve_supply() race condition
    - drm/nouveau/nvif: fix method count when pushing an array
    - mac80211: 160MHz with extended NSS BW in CSA
    - [x86] ASoC: Intel: Skylake: Zero snd_ctl_elem_value
    - pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process()
    - pNFS/NFSv4: Improve rejection of out-of-order layouts
    - ALSA: hda: intel-dsp-config: add PCI id for TGL-H
    - [x86] ASoC: Intel: sof_sdw: set proper flags for Dell TGL-H SKU 0A5E
    - iwlwifi: mvm: skip power command when unbinding vif during CSA
    - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap
    - iwlwifi: pcie: fix context info memory leak
    - iwlwifi: mvm: invalidate IDs of internal stations at mvm start
    - iwlwifi: pcie: add rules to match Qu with Hr2
    - iwlwifi: mvm: guard against device removal in reprobe
    - iwlwifi: queue: bail out on invalid freeing
    - SUNRPC: Move simple_get_bytes and simple_get_netobj into private header
    - SUNRPC: Handle 0 length opaque XDR object data properly
    - blk-cgroup: Use cond_resched() when destroy blkgs
    - regulator: Fix lockdep warning resolving supplies
    - bpf: Fix verifier jmp32 pruning decision logic
    - bpf: Fix 32 bit src register truncation on div/mod
    - bpf: Fix verifier jsgt branch analysis on max bound
    - [x86] drm/i915: Fix ICL MG PHY vswing handling
    - [x86] drm/i915: Skip vswing programming for TBT
    - nilfs2: make splice write available again
    - Revert "mm: memcontrol: avoid workload stalls when lowering memory.high"
    - squashfs: avoid out of bounds writes in decompressors
    - squashfs: add more sanity checks in id lookup
    - squashfs: add more sanity checks in inode lookup
    - squashfs: add more sanity checks in xattr id lookup
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.17
    - objtool: Fix seg fault with Clang non-section symbols
    - Revert "dts: phy: add GPIO number and active state used for phy reset"
    - tracing: Do not count ftrace events in top level enable output
    - tracing: Check length before giving out the filter buffer
    - [x86] drm/i915: Fix overlay frontbuffer tracking
    - arm/xen: Don't probe xenbus as part of an early initcall
    - cgroup: fix psi monitor for root cgroup
    - [x86] drm/i915/tgl+: Make sure TypeC FIA is powered up when initializing
      it
    - drm/dp_mst: Don't report ports connected if nothing is attached to them
    - dmaengine: move channel device_node deletion to driver
    - [armhf] soc: ti: omap-prm: Fix boot time errors for rst_map_012 bits 0
      and 1
    - [arm64] dts: qcom: sdm845: Reserve LPASS clocks in gcc
    - [x86] platform/x86: hp-wmi: Disable tablet-mode reporting by default
    - [arm64] dts: rockchip: Disable display for NanoPi R2S
    - ovl: perform vfs_getxattr() with mounter creds
    - cap: fix conversions on getxattr
    - ovl: skip getxattr of security labels
    - scsi: lpfc: Fix EEH encountering oops with NVMe traffic
    - [x86] split_lock: Enable the split lock feature on another Alder Lake
      CPU
    - nvme-pci: ignore the subsysem NQN on Phison E16
    - [riscv64] virt_addr_valid must check the address belongs to linear
      mapping
    - bfq-iosched: Revert "bfq: Fix computation of shallow depth"
    - kallsyms: fix nonconverging kallsyms table with lld
    - [armel,armhf] ensure the signal page contains defined contents
    - [armel,armhf] kexec: fix oops after TLB are invalidated
    - Revert "lib: Restrict cpumask_local_spread to houskeeping CPUs"
    - [amd64] x86/efi: Remove EFI PGD build time checks
    - [x86] KVM: x86: cleanup CR3 reserved bits checks
    - cgroup-v1: add disabled controller check in cgroup1_parse_param()
    - mt76: dma: fix a possible memory leak in mt76_add_fragment()
    - [arm*] drm/vc4: hvs: Fix buffer overflow with the dlist handling
    - bpf: Unbreak BPF_PROG_TYPE_KPROBE when kprobe is called via do_int3
    - bpf: Check for integer overflow when using roundup_pow_of_two()
    - netfilter: xt_recent: Fix attempt to update deleted entry
    - netfilter: nftables: fix possible UAF over chains from packet path in
      netns
    - netfilter: flowtable: fix tcp and udp header checksum update
    - xen/netback: avoid race in xenvif_rx_ring_slots_available()
    - [x86] hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in
      netvsc_receive()
    - [arm64] net: enetc: initialize the RFS and RSS memories
    - net: stmmac: set TxQ mode back to DCB after disabling CBS
    - netfilter: conntrack: skip identical origin tuple in same zone only
    - scsi: scsi_debug: Fix a memory leak
    - [x86] build: Disable CET instrumentation in the kernel for 32-bit too
    - [arm64] net: dsa: felix: implement port flushing on
      .phylink_mac_link_down
    - [arm64] net: hns3: add a check for queue_id in hclge_reset_vf_queue()
    - [arm64] net: hns3: add a check for tqp_index in
      hclge_get_ring_chain_from_mbx()
    - [arm64] net: hns3: add a check for index in hclge_get_rss_key()
    - firmware_loader: align .builtin_fw to 8
    - [arm64,armhf] drm/sun4i: tcon: set sync polarity for tcon1 channel
    - [arm64,armhf] drm/sun4i: dw-hdmi: always set clock rate
    - [arm64,armhf] drm/sun4i: Fix H6 HDMI PHY configuration
    - [arm64,armhf] drm/sun4i: dw-hdmi: Fix max. frequency for H6
    - [arm64,armhf] clk: sunxi-ng: mp: fix parent rate change flag check
    - [armhf] i2c: stm32f7: fix configuration of the digital filter
    - scripts: set proper OpenSSL include dir also for sign-file
    - [x86] pci: Create PCI/MSI irqdomain after x86_init.pci.arch_init()
    - arm64: mte: Allow PTRACE_PEEKMTETAGS access to the zero page
    - rxrpc: Fix clearance of Tx/Rx ring when releasing a call
    - udp: fix skb_copy_and_csum_datagram with odd segment sizes
    - [arm64,armhf] net: dsa: call teardown method on probe failure
    - [x86] cpufreq: ACPI: Extend frequency tables to cover boost frequencies
    - [x86] cpufreq: ACPI: Update arch scale-invariance max perf ratio if CPPC
      is not there
    - net: gro: do not keep too many GRO packets in napi->rx_list
    - net: fix iteration for sctp transport seq_files
    - net/vmw_vsock: fix NULL pointer dereference
    - net/vmw_vsock: improve locking in vsock_connect_timeout()
    - net: watchdog: hold device global xmit lock during tx disable
    - switchdev: mrp: Remove SWITCHDEV_ATTR_ID_MRP_PORT_STAT
    - vsock/virtio: update credit only if socket is not closed
    - vsock: fix locking in vsock_shutdown()
    - net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
    - ovl: expand warning in ovl_d_real()
    - kcov, usb: only collect coverage from __usb_hcd_giveback_urb in softirq
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.18
    - IB/isert: add module param to set sg_tablesize for IO cmd
    - net: qrtr: Fix port ID for control messages
    - net/sched: fix miss init the mru in qdisc_skb_cb
    - net: openvswitch: fix TTL decrement exception action execution
    - net: bridge: Fix a warning when del bridge sysfs
    - net: fix proc_fs init handling in af_packet and tls
    - [amd64] Xen/x86: don't bail early from clear_foreign_p2m_mapping()
      (CVE-2021-26932)
    - [amd64] Xen/x86: also check kernel mapping in set_foreign_p2m_mapping()
      (CVE-2021-26932)
    - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages()
      (CVE-2021-26932)
    - Xen/gntdev: correct error checking in gntdev_map_grant_pages()
      (CVE-2021-26932)
    - [armhf] xen/arm: don't ignore return errors from set_phys_to_machine
      (CVE-2021-26932)
    - xen-blkback: don't "handle" error by BUG() (CVE-2021-26931)
    - xen-netback: don't "handle" error by BUG() (CVE-2021-26931)
    - xen-scsiback: don't "handle" error by BUG() (CVE-2021-26931)
    - xen-blkback: fix error handling in xen_blkbk_map() (CVE-2021-26930)
    - tty: protect tty_write from odd low-level tty disciplines
    - Bluetooth: btusb: Always fallback to alt 1 for WBS
    - btrfs: fix crash after non-aligned direct IO write with O_DSYNC
    - media: pwc: Use correct device for DMA
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.19
    - bpf: Fix truncation handling for mod32 dst reg wrt zero
    - HID: make arrays usage and value to be the same
    - RDMA: Lift ibdev_to_node from rds to common code
    - nvme-rdma: Use ibdev_to_node instead of dereferencing ->dma_device
    - USB: quirks: sort quirk entries
    - usb: quirks: add quirk to start video capture on ELMO L-12F document
      camera reliable
    - ceph: downgrade warning from mdsmap decode to debug
    - Bluetooth: btusb: Some Qualcomm Bluetooth adapters stop working
      (Closes: #981005)
    - [x86] hwmon: (dell-smm) Add XPS 15 L502X to fan control blacklist
    - [x86] KVM: Zap the oldest MMU pages, not the newest
    - mm: unexport follow_pte_pmd
    - mm: simplify follow_pte{,pmd}
    - KVM: do not assume PTE is writable after follow_pfn
    - mm: provide a saner PTE walking API for modules
    - KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()
    - NET: usb: qmi_wwan: Adding support for Cinterion MV31
    - cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath.
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.10.14-rt28
  * Ignore __udp_gso_segment to avoid ABI changes
  * Ignore xhci_init_driver to avoid ABI changes
  * [rt] Update to 5.10.16-rt30
  * [rt] Refresh "tracing: Merge irqflags + preempt counter." for context
    changes
  * [rt] Update to 5.10.17-rt32
  * [rt] Refresh "um: synchronize kmsg_dumper" for context changes
  * [rt] Refresh "printk: move console printing to kthreads" for context
    changes
  * Bump ABI to 4
  * soundwire: intel: fix possible crash when no device is detected
    (Closes: #981003)
  * drm/nouveau: bail out of nouveau_channel_new if channel init fails
    (CVE-2020-25639)
  * [x86] drm/i915/gt: One more flush for Baytrail clear residuals
  * [x86] drm/i915/gt: Flush before changing register state
  * [x86] drm/i915/gt: Correct surface base address for renderclear
  * certs: Rotate to use the "Debian Secure Boot Signer 2021 - linux"
    certificate
.
  [ Vincent Blut ]
  * [x86] Enable PWM_CRC (Closes: #982808)
  * net/can: Enable CAN_J1939 as module
  * misc/eeprom: Enable EEPROM_EE1004 as module (Closes: #983495)
  * [arm64] Enable DRM_DW_HDMI_CEC as module (Closes: #983759)
.
  [ Luca Boccassi ]
  * bpf: enable CONFIG_BPF_LSM on all architectures. Not active by default,
    by explicitly setting CONFIG_LSM to include all other LSMs but not bpf.

linux (5.10.13-3parrot1) rolling; urgency=medium
.
  * Import new Debian release.
.
linux (5.10.13-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13
    - iwlwifi: provide gso_type to GSO packets
    - nbd: freeze the queue while we're adding connections (CVE-2021-3348)
    - tty: avoid using vfs_iocb_iter_write() for redirected console writes
    - ACPI: sysfs: Prefer "compatible" modalias
    - ACPI: thermal: Do not call acpi_thermal_check() directly
    - kernel: kexec: remove the lock operation of system_transition_mutex
    - ALSA: hda/realtek: Enable headset of ASUS B1400CEPE with ALC256
    - ALSA: hda/via: Apply the workaround generically for Clevo machines
    - [arm64,armhf] media: cedrus: Fix H264 decoding
    - media: rc: fix timeout handling after switch to microsecond durations
    - [x86] media: rc: ite-cir: fix min_timeout calculation
    - media: rc: ensure that uevent can be read directly after rc device
      register
    - [armhf] dts: tbs2910: rename MMC node aliases
    - wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
    - [amd64] ASoC: AMD Renoir - refine DMI entries for some Lenovo products
    - drm/nouveau/kms/gk104-gp1xx: Fix > 64x64 cursors
    - [x86] drm/i915: Always flush the active worker before returning from the
      wait
    - [x86] drm/i915/gt: Always try to reserve GGTT address 0x0
    - drivers/nouveau/kms/nv50-: Reject format modifiers for cursor planes
    - bcache: only check feature sets when sb->version >=
      BCACHE_SB_VERSION_CDEV_WITH_FEATURES
    - net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem
      family
    - [s390x] uv: Fix sysfs max number of VCPUs reporting
    - PM: hibernate: flush swap writer after marking
    - [x86] efi/apple-properties: Reinstate support for boolean properties
    - btrfs: fix lockdep warning due to seqcount_mutex on 32bit arch
    - btrfs: fix possible free space tree corruption with online conversion
    - [x86] KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in
      intel_arch_events[]
    - [x86] KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in
      intel_pmu_refresh()
    - [arm64] KVM: Filter out v8.1+ events on v8.0 HW
    - [x86] KVM: nSVM: cancel KVM_REQ_GET_NESTED_STATE_PAGES on nested vmexit
    - [x86] KVM: x86: allow KVM_REQ_GET_NESTED_STATE_PAGES outside guest mode
      for VMX
    - [x86] KVM: nVMX: Sync unsync'd vmcs02 state to vmcs12 on migration
    - [x86] KVM: get smi pending status correctly
    - KVM: Forbid the use of tagged userspace addresses for memslots
    - io_uring: fix wqe->lock/completion_lock deadlock
    - leds: trigger: fix potential deadlock with libata
    - mt7601u: fix kernel crash unplugging the device
    - mt7601u: fix rx buffer refcounting
    - iwlwifi: Fix IWL_SUBDEVICE_NO_160 macro to use the correct bit.
    - [x86] drm/i915/gt: Clear CACHE_MODE prior to clearing residuals
    - [x86] drm/i915/pmu: Don't grab wakeref when enabling events
    - [arm*] drm/vc4: Correct lbm size and calculation
    - [arm*] drm/vc4: Correct POS1_SCL for hvs5
    - drm/nouveau/dispnv50: Restore pushing of all data.
    - [x86] drm/i915: Check for all subplatform bits
    - uapi: fix big endian definition of ipv6_rpl_sr_hdr
    - KVM: Documentation: Fix spec for KVM_CAP_ENABLE_CAP_VM
    - [arm64] tee: optee: replace might_sleep with cond_resched
    - xen-blkfront: allow discard-* nodes to be optional
    - blk-mq: test QUEUE_FLAG_HCTX_ACTIVE for sbitmap_shared in hctx_may_queue
    - [armhf] imx: build suspend-imx6.S with arm instruction set
    - netfilter: nft_dynset: add timeout extension to template
    - Revert "RDMA/mlx5: Fix devlink deadlock on net namespace deletion"
    - Revert "block: simplify set_init_blocksize" to regain lost performance
    - xfrm: Fix oops in xfrm_replay_advance_bmp
    - xfrm: fix disable_xfrm sysctl when used on xfrm interfaces
    - xfrm: Fix wraparound in xfrm_policy_addr_delta()
    - RDMA/cxgb4: Fix the reported max_recv_sge value
    - [arm64] ASoC: qcom: Fix incorrect volatile registers
    - [arm64] ASoC: qcom: Fix broken support to MI2S TERTIARY and QUATERNARY
    - [x86] ASoC: Intel: Skylake: skl-topology: Fix OOPs ib skl_tplg_complete
    - [powerpc*] 64s: prevent recursive replay_soft_interrupts causing
      superfluous interrupt
    - pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process()
    - pNFS/NFSv4: Update the layout barrier when we schedule a layoutreturn
    - ASoC: SOF: Intel: soundwire: fix select/depend unmet dependencies
    - ASoC: qcom: lpass: Fix out-of-bounds DAI ID lookup
    - iwlwifi: pcie: avoid potential PNVM leaks
    - iwlwifi: pnvm: don't skip everything when not reloading
    - iwlwifi: pnvm: don't try to load after failures
    - iwlwifi: pcie: set LTR on more devices
    - iwlwifi: pcie: use jiffies for memory read spin time limit
    - iwlwifi: pcie: reschedule in long-running memory reads
    - mac80211: pause TX while changing interface type
    - ice: fix FDir IPv6 flexbyte
    - ice: Implement flow for IPv6 next header (extension header)
    - ice: update dev_addr in ice_set_mac_address even if HW filter exists
    - ice: Don't allow more channels than LAN MSI-X available
    - ice: Fix MSI-X vector fallback logic
    - i40e: acquire VSI pointer only after VF is initialized
    - igc: fix link speed advertising
    - net/mlx5: Fix memory leak on flow table creation error flow
    - net/mlx5e: E-switch, Fix rate calculation for overflow
    - net/mlx5e: free page before return
    - net/mlx5e: Reduce tc unsupported key print level
    - net/mlx5: Maintain separate page trees for ECPF and PF functions
    - net/mlx5e: Disable hw-tc-offload when MLX5_CLS_ACT config is disabled
    - net/mlx5e: Fix CT rule + encap slow path offload and deletion
    - net/mlx5e: Correctly handle changing the number of queues when the
      interface is down
    - net/mlx5e: Revert parameters on errors when changing trust state without
      reset
    - net/mlx5e: Revert parameters on errors when changing MTU and LRO state
      without reset
    - can: dev: prevent potential information leak in can_fill_info()
    - [arm64] ACPI/IORT: Do not blindly trust DMA masks from firmware
    - of/device: Update dma_range_map only when dev has valid dma-ranges
    - [amd64] iommu/amd: Use IVHD EFR for early initialization of IOMMU
      features
    - [amd64] iommu/vt-d: Correctly check addr alignment in
      qi_flush_dev_iotlb_pasid()
    - nvme-multipath: Early exit if no path is available
    - rxrpc: Fix memory leak in rxrpc_lookup_local
    - NFC: fix resource leak when target index is invalid
    - NFC: fix possible resource leak
    - [x86] ASoC: topology: Properly unregister DAI on removal
    - [x86] ASoC: topology: Fix memory corruption in
      soc_tplg_denum_create_values()
    - scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit
    - team: protect features update by RCU to avoid deadlock
    - tcp: make TCP_USER_TIMEOUT accurate for zero window probes
    - tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN
    - vsock: fix the race conditions in multi-transport support
      (CVE-2021-26708)
.
  [ Salvatore Bonaccorso ]
  * arch/s390: uv_info: Ignore ABI changes
.
  [ Vincent Blut ]
  * [arm64] Enable CRYPTO_NHPOLY1305_NEON. (closes: #980214)
  * [armhf] Enable KERNEL_MODE_NEON.
.
linux (5.10.12-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.10
    - [x86] hyperv: Initialize clockevents after LAPIC is initialized
    - bpf: Fix signed_{sub,add32}_overflows type handling
    - nfsd4: readdirplus shouldn't return parent of export (CVE-2021-3178)
    - bpf: Don't leak memory in bpf getsockopt when optlen == 0
    - bpf: Support PTR_TO_MEM{,_OR_NULL} register spilling
    - bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback
    - net: fix use-after-free when UDP GRO with shared fraglist
    - udp: Prevent reuseport_select_sock from reading uninitialized socks
    - netxen_nic: fix MSI/MSI-x interrupts
    - net: ipv6: Validate GSO SKB before finish IPv6 processing
    - tipc: fix NULL deref in tipc_link_xmit()
    - [arm64,armhf] net: mvpp2: Remove Pause and Asym_Pause support
    - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request
    - esp: avoid unneeded kmap_atomic call
    - net: dcb: Validate netlink message in DCB handler
    - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands
    - rxrpc: Call state should be read with READ_ONCE() under some
      circumstances
    - i40e: fix potential NULL pointer dereferencing
    - [arm64,armhf] net: stmmac: Fixed mtu channged by cache aligned
    - net: sit: unregister_netdevice on newlink's error path
    - [arm64,armhf] net: stmmac: fix taprio schedule configuration
    - [arm64,armhf] net: stmmac: fix taprio configuration when base_time is in
      the past
    - net: avoid 32 x truesize under-estimation for tiny skbs
    - net: phy: smsc: fix clk error handling
    - [arm64,armhf] net: dsa: clear devlink port type before unregistering
      slave netdevs
    - rxrpc: Fix handling of an unsupported token type in rxrpc_read()
    - [arm64,armhf] net: stmmac: use __napi_schedule() for PREEMPT_RT
    - [armhf] drm/panel: otm8009a: allow using non-continuous dsi clock
    - mac80211: do not drop tx nulldata packets on encrypted links
    - mac80211: check if atf has been disabled in __ieee80211_schedule_txq
    - [arm64,armhf] net: dsa: unbind all switches from tree when DSA master
      unbinds
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.11
    - scsi: target: tcmu: Fix use-after-free of se_cmd->priv
    - [armhf] mtd: rawnand: gpmi: fix dst bit offset when extracting raw
      payload
    - mtd: rawnand: nandsim: Fix the logic when selecting Hamming soft ECC
      engine
    - [arm64,armhf] i2c: tegra: Wait for config load atomically while in ISR
    - [x86] platform/x86: i2c-multi-instantiate: Don't create platform device
      for INT3515 ACPI nodes
    - [x86] platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634
    - ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T
    - ALSA: hda/via: Add minimum mute flag
    - crypto: xor - Fix divide error in do_xor_speed()
    - dm crypt: fix copy and paste bug in crypt_alloc_req_aead
    - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error
    - btrfs: don't get an EINTR during drop_snapshot for reloc
    - btrfs: do not double free backref nodes on error
    - btrfs: fix lockdep splat in btrfs_recover_relocation
    - btrfs: don't clear ret in btrfs_start_dirty_block_groups
    - btrfs: send: fix invalid clone operations when cloning from the same
      file and root
    - fs: fix lazytime expiration handling in __writeback_single_inode()
    - mmc: core: don't initialize block size from ext_csd if not present
    - [arm64] mmc: sdhci-xenon: fix 1.8v regulator stabilization
    - dm: avoid filesystem lookup in dm_get_dev_t()
    - dm integrity: fix a crash if "recalculate" used without "internal_hash"
    - dm integrity: conditionally disable "recalculate" feature
    - drm/atomic: put state on error path
    - drm/syncobj: Fix use-after-free
    - drm/amdgpu: remove gpu info firmware of green sardine
    - [x86] drm/i915/gt: Prevent use of engine->wa_ctx after error
    - [x86] drm/i915: Check for rq->hwsp validity after acquiring RCU lock
    - ASoC: rt711: mutex between calibration and power state changes
    - SUNRPC: Handle TCP socket sends with kernel_sendpage() again
    - HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad
      device
    - dm integrity: select CRYPTO_SKCIPHER
    - [x86] hyperv: Fix kexec panic/hang issues
    - scsi: ufs: Relax the condition of UFSHCI_QUIRK_SKIP_MANUAL_WB_FLUSH_CTRL
    - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
    - scsi: qedi: Correct max length of CHAP secret
    - scsi: scsi_debug: Fix memleak in scsi_debug_init()
    - scsi: sd: Suppress spurious errors when WRITE SAME is being disabled
    - [riscv64] Fix kernel time_init()
    - [riscv64] Fix sifive serial driver
    - [riscv64] Enable interrupts during syscalls with M-Mode
    - HID: logitech-dj: add the G602 receiver
    - HID: Ignore battery for Elan touchscreen on ASUS UX550
    - [arm64,armhf] ALSA: hda/tegra: fix tegra-hda on tegra30 soc
    - [riscv64] cacheinfo: Fix using smp_processor_id() in preemptible
    - [arm64] make atomic helpers __always_inline
    - xen: Fix event channel callback via INTX/GSI
    - [x86] xen: Add xen_no_vector_callback option to test PCI INTX delivery
    - [x86] xen: Fix xen_hvm_smp_init() when vector callback not available
    - [riscv64] dts: phy: fix missing mdio device and probe failure of
      vsc8541-01 device
    - [riscv64] dts: phy: add GPIO number and active state used for phy reset
    - drm/amdgpu/psp: fix psp gfx ctrl cmds
    - HID: logitech-hidpp: Add product ID for MX Ergo in Bluetooth mode
    - drm/nouveau/bios: fix issue shadowing expansion ROMs
    - drm/nouveau/privring: ack interrupts the same way as RM
    - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields
    - drm/nouveau/mmu: fix vram heap sizing
    - drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0
    - io_uring: flush timeouts that should already have expired
    - [riscv64] Set current memblock limit
    - [riscv64] Fix maximum allowed phsyical memory for RV32
    - nfsd: Fixes for nfsd4_encode_read_plus_data()
    - nfsd: Don't set eof on a truncated READ_PLUS
    - gpiolib: cdev: fix frame size warning in gpio_ioctl()
    - [armhf] pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting
    - RDMA/ucma: Do not miss ctx destruction steps in some cases
    - btrfs: print the actual offset in btrfs_root_name
    - scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression
    - scsi: ufs: Fix tm request when non-fatal error happens
    - bpf: Prevent double bpf_prog_put call from bpf_tracing_prog_attach
    - [powerpc*] Use the common INIT_DATA_SECTION macro in vmlinux.lds.S
    - [powerpc*] Fix alignment bug within the init sections
    - [arm64] entry: remove redundant IRQ flag tracing
    - bpf: Reject too big ctx_size_in for raw_tp test run
    - RDMA/umem: Avoid undefined behavior of rounddown_pow_of_two()
    - RDMA/cma: Fix error flow in default_roce_mode_store
    - printk: ringbuffer: fix line counting
    - printk: fix kmsg_dump_get_buffer length calulations
    - iov_iter: fix the uaccess area in copy_compat_iovec_from_user
    - [mips*] i2c: octeon: check correct size of maximum RECV_LEN packet
    - [armel,armhf] drm/vc4: Unify PCM card's driver_name
    - [x86] platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11
      from allow-list
    - [x86] platform/x86: hp-wmi: Don't log a warning on
      HPWMI_RET_UNKNOWN_COMMAND errors
    - ALSA: hda: Balance runtime/system PM if direct-complete is disabled
    - xsk: Clear pool even for inactive queues
    - can: dev: can_restart: fix use after free bug
    - can: vxcan: vxcan_xmit: fix use after free bug
    - can: peak_usb: fix use after free bugs
    - iio: common: st_sensors: fix possible infinite loop in
      st_sensors_irq_thread
    - iio: ad5504: Fix setting power-down state
    - drivers: iio: temperature: Add delay after the addressed reset command
      in mlx90632.c
    - [powerpc*] 64s: fix scv entry fallback flush vs interrupt
    - cifs: do not fail __smb_send_rqst if non-fatal signals are pending
    - [mips*] irqchip/mips-cpu: Set IPI domain parent chip
    - [x86] fpu: Add kernel_fpu_begin_mask() to selectively initialize state
    - [x86] topology: Make __max_die_per_package available unconditionally
    - [x86] mmx: Use KFPU_387 for MMX string operations
    - [x86] setup: don't remove E820_TYPE_RAM for pfn 0
    - proc_sysctl: fix oops caused by incorrect command parameters
    - mm: memcg/slab: optimize objcg stock draining
    - mm: memcg: fix memcg file_dirty numa stat
    - mm: fix numa stats for thp migration
    - io_uring: iopoll requests should also wake task ->in_idle state
    - io_uring: fix SQPOLL IORING_OP_CLOSE cancelation state
    - io_uring: fix short read retries for non-reg files
    - [x86] intel_th: pci: Add Alder Lake-P support
    - [arm64] serial: mvebu-uart: fix tx lost characters at power off
    - ehci: fix EHCI host controller initialization sequence
    - [armhf] usb: gadget: aspeed: fix stop dma register setting.
    - USB: gadget: dummy-hcd: Fix errors in port-reset handling
    - usb: udc: core: Use lock when write to soft_connect
    - xhci: make sure TRB is fully written before giving it to the controller
    - [arm64,armhf] xhci: tegra: Delay for disabling LFPS detector
    - drivers core: Free dma_range_map when driver probe failed
    - driver core: Fix device link device name collision
    - driver core: Extend device_is_dependent()
    - [x86] drm/i915: s/intel_dp_sink_dpms/intel_dp_set_power/
    - [x86] drm/i915: Only enable DFP 4:4:4->4:2:0 conversion when outputting
      YCbCr 4:4:4
    - [x86] entry: Fix noinstr fail
    - [x86] cpu/amd: Set __max_die_per_package on AMD
    - cls_flower: call nla_ok() before nla_next()
    - netfilter: rpfilter: mask ecn bits before fib lookup
    - [x86] drm/i915/hdcp: Update CP property in update_pipe
    - locking/lockdep: Cure noinstr fail
    - [x86] ASoC: SOF: Intel: fix page fault at probe if i915 init fails
    - [arm64,armhf] net: dsa: mv88e6xxx: also read STU state in
      mv88e6250_g1_vtu_getnext
    - nvme-pci: refactor nvme_unmap_data
    - nvme-pci: fix error unwind in nvme_map_data
    - cachefiles: Drop superfluous readpages aops NULL check
    - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too
    - tcp: fix TCP socket rehash stats mis-accounting
    - net_sched: gen_estimator: support large ewma log
    - udp: mask TOS bits in udp_v4_early_demux()
    - ipv6: create multicast route with RTPROT_KERNEL
    - net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
    - net_sched: reject silly cell_log in qdisc_get_rtab()
    - ipv6: set multicast flag on the multicast route
    - net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled
    - [armhf] net: dsa: b53: fix an off by one in checking "vlan->vid"
    - tcp: do not mess with cloned skbs in tcp_add_backlog()
    - tcp: fix TCP_USER_TIMEOUT with zero window
    - net: core: devlink: use right genl user_ptr when handling port param
      get/set
    - [arm64] pinctrl: qcom: Allow SoCs to specify a GPIO function that's not
      0
    - [arm64] pinctrl: qcom: No need to read-modify-write the interrupt status
    - [arm64] pinctrl: qcom: Properly clear "intr_ack_high" interrupts when
      unmasking
    - [arm64] pinctrl: qcom: Don't clear pending interrupts when enabling
    - tty: implement write_iter
    - tty: fix up hung_up_tty_write() conversion
    - tcp: Fix potential use-after-free due to double kfree()
    - [x86] ASoC: SOF: Intel: hda: Avoid checking jack on system suspend
    - [x86] drm/i915/hdcp: Get conn while content_type changed
    - bpf: Local storage helpers should check nullness of owner ptr passed
    - kernfs: implement ->read_iter
    - kernfs: implement ->write_iter
    - kernfs: wire up ->splice_read and ->splice_write
    - fs/pipe: allow sendfile() to pipe again
    - mm: fix initialization of struct page for holes in memory layout
    - Revert "mm: fix initialization of struct page for holes in memory
      layout"
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.12
    - [arm*] gpio: mvebu: fix pwm .get_state period calculation
    - Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
    - HID: wacom: Correct NULL dereference on AES pen proximity
    - HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input devices
    - media: Revert "media: videobuf2: Fix length check for single plane
      dmabuf queueing"
    - media: v4l2-subdev.h: BIT() is not available in userspace
    - RDMA/vmw_pvrdma: Fix network_hdr_type reported in WC
    - iwlwifi: dbg: Don't touch the tlv data
    - kernel/io_uring: cancel io_uring before task works
    - io_uring: inline io_uring_attempt_task_drop()
    - io_uring: add warn_once for io_uring_flush()
    - io_uring: stop SQPOLL submit on creator's death
    - io_uring: fix null-deref in io_disable_sqo_submit
    - io_uring: do sqo disable on install_fd error
    - io_uring: fix false positive sqo warning on flush
    - io_uring: fix uring_flush in exit_files() warning
    - io_uring: fix skipping disabling sqo on exec
    - io_uring: dont kill fasync under completion_lock
    - io_uring: fix sleeping under spin in __io_clean_op
    - objtool: Don't fail on missing symbol table
    - mm/page_alloc: add a missing mm_page_alloc_zone_locked() tracepoint
    - mm: fix a race on nr_swap_pages
    - tools: Factor HOSTCC, HOSTLD, HOSTAR definitions
    - printk: fix buffer overflow potential for print_text()
    - printk: fix string termination for record_print_text()
.
  [ Salvatore Bonaccorso ]
  * Add set of PI futex fixes (CVE-2021-3347)
    - futex: Ensure the correct return value from futex_lock_pi()
    - futex: Replace pointless printk in fixup_owner()
    - futex: Provide and use pi_state_update_owner()
    - rtmutex: Remove unused argument from rt_mutex_proxy_unlock()
    - futex: Use pi_state_update_owner() in put_pi_state()
    - futex: Simplify fixup_pi_state_owner()
    - futex: Handle faults correctly for PI futexes
  * Bump ABI to 3
  * xen: Fix XenStore initialisation for XS_LOCAL
  * [rt] Refresh "printk: refactor kmsg_dump_get_buffer()"
  * [rt] Refresh "locking/rtmutex: Handle the various new futex race
    conditions"
  * [rt] Refresh "locking/rtmutex: add sleeping lock implementation"
  * [rt] Refresh "crypto: limit more FPU-enabled sections"
  * Unset CRYPTO_USER_API_ENABLE_OBSOLETE
.
  [ Ricardo Ribalda ]
  * Enable USB_NET_AQC111 as module (Closes: #968760)
.
  [ Vincent Blut ]
  * [arm64] Enable DRM_VC4 again. (Closes: #968181, #968188)
  * [arm64] Enable DRM_VC4_HDMI_CEC. (Closes: #977438)
.
linux (5.10.9-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.6
    - [arm64] rtc: pcf2127: move watchdog initialisation to a separate
      function
    - [arm64] rtc: pcf2127: only use watchdog when explicitly available
    - dt-bindings: rtc: add reset-source property
    - kdev_t: always inline major/minor helper functions
    - ALSA: hda/realtek - Modify Dell platform name
    - ALSA: hda/hdmi: Fix incorrect mutex unlock in silent_stream_disable()
    - [x86] drm/i915/tgl: Fix Combo PHY DPLL fractional divider for 38.4MHz
      ref clock
    - RDMA/core: remove use of dma_virt_ops
    - RDMA/siw,rxe: Make emulated devices virtual in the device tree
    - fuse: fix bad inode
    - perf: Break deadlock involving exec_update_mutex
    - rwsem: Implement down_read_killable_nested
    - rwsem: Implement down_read_interruptible
    - exec: Transform exec_update_mutex into a rw_semaphore
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.7
    - i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs
    - iavf: fix double-release of rtnl_lock
    - net/sched: sch_taprio: ensure to reset/destroy all child qdiscs
    - [arm64,armhf] net: mvpp2: Add TCAM entry to drop flow control pause
      frames
    - [arm64,armhf] net: mvpp2: prs: fix PPPoE with ipv6 packet parse
    - atm: idt77252: call pci_disable_device() on error path
    - [arm64,armhf] net: mvpp2: Fix GoP port 3 Networking Complex Control
      configurations
    - [arm64,armhf] net: stmmac: dwmac-meson8b: ignore the second clock input
    - [arm64,armhf] net: ethernet: mvneta: Fix error handling in mvneta_probe
    - qede: fix offload for IPIP tunnel packets
    - virtio_net: Fix recursive call to cpus_read_lock()
    - [armhf] net/ncsi: Use real net-device for response handler
    - net-sysfs: take the rtnl lock when storing xps_cpus
    - net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc
    - net-sysfs: take the rtnl lock when storing xps_rxqs
    - net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc
    - [armhf] net: ethernet: ti: cpts: fix ethtool output when no ptp_clock
      registered
    - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS
    - e1000e: Only run S0ix flows if shutdown succeeded
    - e1000e: bump up timeout to wait when ME un-configures ULP mode
    - Revert "e1000e: disable s0ix entry and exit flows for ME systems"
    - e1000e: Export S0ix flags to ethtool
    - bnxt_en: Check TQM rings for maximum supported value.
    - [arm64,armhf] net: mvpp2: fix pkt coalescing int-threshold configuration
    - bnxt_en: Fix AER recovery.
    - ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst()
    - net: sched: prevent invalid Scell_log shift count
    - [arm64] net: hns: fix return value check in __lb_other_process()
    - erspan: fix version 1 check in gre_parse_header()
    - net: hdlc_ppp: Fix issues when mod_timer is called while timer is
      running
    - vhost_net: fix ubuf refcount incorrectly when sendmsg fails
    - r8169: work around power-saving bug on some chip versions
    - CDC-NCM: remove "connected" log message
    - net: usb: qmi_wwan: add Quectel EM160R-GL
    - block: add debugfs stanza for QUEUE_FLAG_NOWAIT
    - workqueue: Kick a worker based on the actual activation of delayed works
    - scsi: ufs: Fix wrong print message in dev_err()
    - scsi: ufs-pci: Fix restore from S4 for Intel controllers
    - scsi: ufs-pci: Ensure UFS device is in PowerDown mode for
      suspend-to-disk ->poweroff()
    - scsi: ufs-pci: Fix recovery from hibernate exit errors for Intel
      controllers
    - scsi: ufs-pci: Enable UFSHCD_CAP_RPM_AUTOSUSPEND for Intel controllers
    - scsi: block: Introduce BLK_MQ_REQ_PM
    - scsi: ide: Do not set the RQF_PREEMPT flag for sense requests
    - scsi: scsi_transport_spi: Set RQF_PM for domain validation commands
    - scsi: core: Only process PM requests if rpm_status != RPM_ACTIVE
    - lib/genalloc: fix the overflow when size is too big
    - scsi: ufs: Clear UAC for FFU and RPMB LUNs
    - Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close
    - scsi: block: Remove RQF_PREEMPT and BLK_MQ_REQ_PREEMPT
    - scsi: block: Do not accept any requests while suspended
    - crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
    - [powerpc*] Handle .text.{hot,unlikely}.* in linker script
    - [x86] Staging: comedi: Return -EFAULT if copy_to_user() fails
    - usb: gadget: enable super speed plus
    - USB: cdc-acm: blacklist another IR Droid device
    - USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
    - [arm64,armhf] usb: dwc3: meson-g12a: disable clk on error handling path
      in probe
    - [arm64,armhf] usb: dwc3: gadget: Restart DWC3 gadget when enabling
      pullup
    - [arm64,armhf] usb: dwc3: gadget: Clear wait flag on dequeue
    - [arm64] usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
      completion
    - [arm64] usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based
      one
    - [arm64] usb: dwc3: ulpi: Fix USB2.0 HS/FS/LS PHY suspend regression
    - [arm64,armhf] usb: chipidea: ci_hdrc_imx: add missing put_device() call
      in usbmisc_get_init_data()
    - USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk
      set
    - usb: usbip: vhci_hcd: protect shift size
    - usb: uas: Add PNY USB Portable SSD to unusual_uas
    - USB: serial: iuu_phoenix: fix DMA from stack
    - USB: serial: option: add LongSung M5710 module support
    - USB: serial: option: add Quectel EM160R-GL
    - USB: yurex: fix control-URB timeout handling
    - USB: usblp: fix DMA to stack
    - ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
    - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
    - usb: gadget: f_uac2: reset wMaxPacketSize
    - usb: gadget: function: printer: Fix a memory leak for interface
      descriptor
    - usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
    - usb: gadget: Fix spinlock lockup on usb_function_deactivate
    - usb: gadget: configfs: Preserve function ordering after bind failure
    - usb: gadget: configfs: Fix use-after-free issue with udc_name
    - USB: serial: keyspan_pda: remove unused variable
    - mm: make wait_on_page_writeback() wait for multiple pending writebacks
    - [x86] mm: Fix leak of pmd ptlock
    - [x86] KVM: mmu: Use -1 to flag an undefined spte in get_mmio_spte()
    - [x86] KVM: mmu: Get root level from walkers when retrieving MMIO SPTE
    - kvm: check tlbs_dirty directly
    - [x86] KVM: mmu: Ensure TDP MMU roots are freed after yield
    - [x86] resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC
      MSR
    - [x86] resctrl: Don't move a task to the same resource group
    - blk-iocost: fix NULL iocg deref from racing against initialization
    - ALSA: hda/via: Fix runtime PM for Clevo W35xSS
    - ALSA: hda/conexant: add a new hda codec CX11970
    - ALSA: hda/realtek - Fix speaker volume control on Lenovo C940
    - ALSA: hda/realtek: Add mute LED quirk for more HP laptops
    - ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7
    - ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256.
    - [amd64] iommu/vt-d: Move intel_iommu info from struct intel_svm to
      struct intel_svm_dev
    - btrfs: qgroup: don't try to wait flushing if we're already holding a
      transaction
    - btrfs: send: fix wrong file path when there is an inode with a pending
      rmdir
    - Revert "device property: Keep secondary firmware node secondary by type"
    - dmabuf: fix use-after-free of dmabuf's file->f_inode
    - [x86] drm/i915: clear the shadow batch
    - [x86] drm/i915: clear the gpu reloc batch
    - bcache: check unsupported feature sets for bcache register
    - bcache: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE for large
      bucket
    - net/mlx5e: Fix SWP offsets when vlan inserted by driver
    - netfilter: x_tables: Update remaining dereference to RCU
    - netfilter: ipset: fix shift-out-of-bounds in htable_bits()
    - netfilter: xt_RATEEST: reject non-null terminated string from userspace
    - netfilter: nft_dynset: report EOPNOTSUPP on missing set feature
    - [x86] mtrr: Correct the range check before performing MTRR type lookups
    - xsk: Fix memory leak for failed bind
    - rtlwifi: rise completion at the last step of firmware callback
    - scsi: target: Fix XCOPY NAA identifier lookup (CVE-2020-28374)
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.8
    - [powerpc] 32s: Fix RTAS machine check with VMAP stack
    - io_uring: synchronise IOPOLL on task_submit fail
    - io_uring: limit {io|sq}poll submit locking scope
    - io_uring: patch up IOPOLL overflow_flush sync
    - [arm64] RDMA/hns: Avoid filling sl in high 3 bits of vlan_id
    - [arm64,armhf] iommu/arm-smmu-qcom: Initialize SCTLR of the bypass
      context
    - [arm64,armhf] drm/panfrost: Don't corrupt the queue mutex on open/close
    - io_uring: Fix return value from alloc_fixed_file_ref_node
    - scsi: ufs: Fix -Wsometimes-uninitialized warning
    - btrfs: skip unnecessary searches for xattrs when logging an inode
    - btrfs: fix deadlock when cloning inline extent and low on free metadata
      space
    - btrfs: shrink delalloc pages instead of full inodes
    - [arm64] net: hns3: fix incorrect handling of sctp6 rss tuple
    - [arm64] net: hns3: fix the number of queues actually used by ARQ
    - [arm64] net: hns3: fix a phy loopback fail issue
    - [arm64,armhf] net: stmmac: dwmac-sun8i: Fix probe error handling
    - [arm64,armhf] net: stmmac: dwmac-sun8i: Balance internal PHY resource
      references
    - [arm64,armhf] net: stmmac: dwmac-sun8i: Balance internal PHY power
    - [arm64,armhf] net: stmmac: dwmac-sun8i: Balance syscon
      (de)initialization
    - net: vlan: avoid leaks on register_vlan_dev() failures
    - net: ipv6: fib: flush exceptions when purging route
    - net: fix pmtu check in nopmtudisc mode
    - net: ip: always refragment ip defragmented packets
    - nexthop: Fix off-by-one error in error path
    - nexthop: Unlink nexthop group entry in error path
    - nexthop: Bounce NHA_GATEWAY in FDB nexthop groups
    - [s390x] qeth: fix deadlock during recovery
    - [s390x] qeth: fix locking for discipline setup / removal
    - [s390x] qeth: fix L2 header access in qeth_l3_osa_features_check()
    - net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address
    - net/mlx5e: ethtool, Fix restriction of autoneg with 56G
    - net/mlx5e: In skb build skip setting mark in switchdev mode
    - net/mlx5: Check if lag is supported before creating one
    - scsi: lpfc: Fix variable 'vport' set but not used in
      lpfc_sli4_abts_err_handler()
    - HID: wacom: Fix memory leakage caused by kfifo_alloc
    - fanotify: Fix sys_fanotify_mark() on native x86-32
    - [armhf] OMAP2+: omap_device: fix idling of devices during probe
    - [x86] cpufreq: powernow-k8: pass policy rather than use
      cpufreq_cpu_get()
    - [armhf] spi: stm32: FIFO threshold level - fix align packet size
    - i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
      terminated
    - bcache: set bcache device into read-only mode for
      BCH_FEATURE_INCOMPAT_OBSO_LARGE_BUCKET
    - [amd64] iommu/vt-d: Fix misuse of ALIGN in qi_flush_piotlb()
    - [amd64] iommu/intel: Fix memleak in intel_irq_remapping_alloc
    - nvme-tcp: Fix possible race of io_work and direct send
    - net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups
    - net/mlx5e: Fix two double free cases
    - regmap: debugfs: Fix a memory leak when calling regmap_attach_dev
    - [arm64,armhf] net: mvpp2: disable force link UP during port init
      procedure
    - [x86] drm/i915/dp: Track pm_qos per connector
    - [arm64,armhf] net: mvneta: fix error message when MTU too large for XDP
    - [arm64] KVM: Don't access PMCR_EL0 when no PMU is available
    - xsk: Fix race in SKB mode transmit with shared cq
    - xsk: Rollback reservation at NETDEV_TX_BUSY
    - can: isotp: isotp_getname(): fix kernel information leak
    - block: fix use-after-free in disk_part_iter_next
    - net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of
      trimmed packet
    - regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init()
    - [arm64,armhf] drm/panfrost: Remove unused variables in
      panfrost_job_close()
    - tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.9
    - btrfs: reloc: fix wrong file extent type check to avoid false ENOENT
    - btrfs: prevent NULL pointer dereference in extent_io_tree_panic
    - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP
      machines
    - ALSA: doc: Fix reference to mixart.rst
    - [amd64] ASoC: AMD Renoir - add DMI entry for Lenovo ThinkPad X395
    - ASoC: dapm: remove widget from dirty list on free
    - [x86] hyperv: check cpu mask after interrupt has been disabled
    - drm/amdgpu: add green_sardine device id (v2)
    - drm/amdgpu: fix DRM_INFO flood if display core is not supported (bug
      210921)
    - drm/amdgpu: add new device id for Renior
    - [x86] drm/i915: Allow the sysadmin to override security mitigations
    - [x86] drm/i915/gt: Limit VFE threads based on GT
    - [x86] drm/i915/backlight: fix CPU mode backlight takeover on LPT
    - [armhf] drm/bridge: sii902x: Refactor init code into separate function
    - dt-bindings: display: sii902x: Add supply bindings
    - [armhf] drm/bridge: sii902x: Enable I/O and core VCC supplies if present
    - tracing/kprobes: Do the notrace functions check without kprobes on
      ftrace
    - tools/bootconfig: Add tracing_on support to helper scripts
    - ext4: use IS_ERR instead of IS_ERR_OR_NULL and set inode null when
      IS_ERR
    - ext4: fix wrong list_splice in ext4_fc_cleanup
    - ext4: fix bug for rename with RENAME_WHITEOUT
    - cifs: check pointer before freeing
    - cifs: fix interrupted close commands
    - [riscv64] Drop a duplicated PAGE_KERNEL_EXEC
    - [riscv64] return -ENOSYS for syscall -1
    - [riscv64] Fixup CONFIG_GENERIC_TIME_VSYSCALL
    - [mips*] fix Section mismatch in reference
    - [mips*] lib: uncached: fix non-standard usage of variable 'sp'
    - [mips*] boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB
    - [mips*] Fix malformed NT_FILE and NT_SIGINFO in 32bit coredumps
    - [mips*] relocatable: fix possible boot hangup with KASLR enabled
    - RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd()
    - ACPI: scan: Harden acpi_device_add() against device ID overflows
    - xen/privcmd: allow fetching resource sizes
    - mm/vmalloc.c: fix potential memory leak
    - mm/hugetlb: fix potential missing huge page size info
    - mm/process_vm_access.c: include compat.h
    - dm raid: fix discard limits for raid1
    - dm snapshot: flush merged data before committing metadata
    - dm integrity: fix flush with external metadata device
    - dm integrity: fix the maximum number of arguments
    - dm crypt: use GFP_ATOMIC when allocating crypto requests from softirq
    - dm crypt: do not wait for backlogged crypto request completion in
      softirq
    - dm crypt: do not call bio_endio() from the dm-crypt tasklet
    - dm crypt: defer decryption to a tasklet if interrupts disabled
    - r8152: Add Lenovo Powered USB-C Travel Hub
    - btrfs: tree-checker: check if chunk item end overflows
    - ext4: don't leak old mountpoint samples
    - io_uring: don't take files/mm for a dead task
    - io_uring: drop mm and files after task_work_run
    - ath11k: fix crash caused by NULL rx_channel
    - netfilter: ipset: fixes possible oops in mtype_resize
    - ath11k: qmi: try to allocate a big block of DMA memory first
    - btrfs: fix async discard stall
    - btrfs: merge critical sections of discard lock in workfn
    - btrfs: fix transaction leak and crash after RO remount caused by qgroup
      rescan
    - ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram
    - [arm64,armhf] hwmon: (pwm-fan) Ensure that calculation doesn't discard
      big period values
    - spi: fix the divide by 0 error when calculating xfer waiting time
    - io_uring: drop file refs after task cancel
    - bfq: Fix computation of shallow depth
    - misdn: dsp: select CONFIG_BITREVERSE
    - net: ethernet: fs_enet: Add missing MODULE_LICENSE
    - nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN
    - nvme: avoid possible double fetch in handling CQE
    - nvmet-rdma: Fix list_del corruption on queue establishment failure
    - drm/amdgpu: fix a GPU hang issue when remove device
    - drm/amdgpu: fix potential memory leak during navi12 deinitialization
    - [amd64] iommu/vt-d: Fix lockdep splat in sva bind()/unbind()
    - ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI
    - [arm64] drm/msm: Call msm_init_vram before binding the gpu
    - poll: fix performance regression due to out-of-line __put_user()
    - rcu-tasks: Move RCU-tasks initialization to before early_initcall()
    - bpf: Simplify task_file_seq_get_next()
    - bpf: Save correct stopping point in file seq iteration
    - nvme-fc: avoid calling _nvme_fc_abort_outstanding_ios from interrupt
      context
    - [amd64] iommu/vt-d: Update domain geometry in iommu_ops.at(de)tach_dev
    - net/mlx5: Fix passing zero to 'PTR_ERR'
    - net/mlx5: E-Switch, fix changing vf VLANID
    - blk-mq-debugfs: Add decode for BLK_MQ_F_TAG_HCTX_SHARED
    - mm: fix clear_refs_write locking
    - mm: don't play games with pinned pages in clear_page_refs
    - mm: don't put pinned pages into the swap cache
    - perf intel-pt: Fix 'CPU too large' error
    - dump_common_audit_data(): fix racy accesses to ->d_name
    - [x86] ASoC: Intel: fix error code cnl_set_dsp_D0()
    - nvmet-rdma: Fix NULL deref when setting pi_enable and traddr INADDR_ANY
    - nvme: don't intialize hwmon for discovery controllers
    - nvme-tcp: fix possible data corruption with bio merges
    - nvme-tcp: Fix warning with CONFIG_DEBUG_PREEMPT
    - NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock
    - pNFS: We want return-on-close to complete when evicting the inode
    - pNFS: Mark layout for return if return-on-close was not sent
    - pNFS: Stricter ordering of layoutget and layoutreturn
    - NFS: Adjust fs_context error logging
    - NFS/pNFS: Don't call pnfs_free_bucket_lseg() before removing the request
    - NFS/pNFS: Don't leak DS commits in pnfs_generic_retry_commit()
    - NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter
    - NFS: nfs_delegation_find_inode_server must first reference the
      superblock
    - NFS: nfs_igrab_and_active must first reference the superblock
    - scsi: ufs: Fix possible power drain during system suspend
    - ext4: fix superblock checksum failure when setting password salt
    - RDMA/restrack: Don't treat as an error allocation ID wrapping
    - [amd64] RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp
    - bnxt_en: Improve stats context resource accounting with RDMA driver
      loaded.
    - RDMA/mlx5: Fix wrong free of blue flame register on error
    - IB/mlx5: Fix error unwinding when set_has_smi_cap fails
    - umount(2): move the flag validity checks first
    - [x86] drm/i915/dsi: Use unconditional msleep for the panel_on_delay when
      there is no reset-deassert MIPI-sequence
    - [x86] drm/i915/icl: Fix initing the DSI DSC power refcount during HW
      readout
    - [x86] drm/i915/gt: Restore clear-residual mitigations for Ivybridge,
      Baytrail
    - mm, slub: consider rest of partial list if acquire_slab() fails
    - [riscv64] Trace irq on only interrupt is enabled
    - [amd64] iommu/vt-d: Fix unaligned addresses for
      intel_flush_svm_range_dev()
    - net: sunrpc: interpret the return value of kstrtou32 correctly
    - dm: eliminate potential source of excessive kernel log noise
    - ALSA: fireface: Fix integer overflow in transmit_midi_msg()
    - ALSA: firewire-tascam: Fix integer overflow in midi_port_work()
    - netfilter: conntrack: fix reading nf_conntrack_buckets
    - netfilter: nf_nat: Fix memleak in nf_nat_init
.
  [ Aurelien Jarno ]
  * Ignore ABI change for dfltcc_* symbols.
  * [riscv64] PCI: Enable PCI_HOST_GENERIC.
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 2
  * [rt] Update to 5.10.8-rt24
.
  [ Bastian Blank ]
  * [arm64] Enable support for Marvell EBU SoC.
  * Enable remaining NET_ACT_*.
  * Enable ACPI_HMAT, EFI_SOFT_RESERVE.
  * Enable remaining THERMAL_GOV_*, ENERGY_MODEL.
  * Set SCTP_DEFAULT_COOKIE_HMAC_SHA1.
  * [x86] Enable SERIAL_8250_LPSS. (closes: #973985)
  * Enable CRYPTO_DEV_VIRTIO.
  * Enable DRM_AMD_DC_*.
  * [arm] Enable CRYPTO_NHPOLY1305_NEON. (closes: #980214)
  * [arm64] Enable MFD_AXP20X_I2C. (closes: #980114)
  * [amd64] Enable SENSORS_AMD_ENERGY. (closes: #970699)
  * [cloud] Enable SUSPEND. (closes: #964845)
  * [armhf] Enable GPIO_PCA953X_IRQ. (closes: #972221)
  * [arm] Enable DRM_VC4, DRM_VC4_HDMI_CEC. (closes: #956951)
  * [x86] Enable STMMAC_ETH, DWMAC_INTEL. (closes: #980180)
.
linux (5.10.5-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.5
    - net/sched: sch_taprio: reset child qdiscs before freeing them
    - ethtool: fix error paths in ethnl_set_channels()
    - ethtool: fix string set id check
    - md/raid10: initialize r10_bio->read_slot before use.
    - io_uring: close a small race gap for files cancel
    - jffs2: Allow setting rp_size to zero during remounting
    - jffs2: Fix NULL pointer dereference in rp_size fs option parsing
    - opp: fix memory leak in _allocate_opp_table
    - opp: Call the missing clk_put() on error
    - scsi: block: Fix a race in the runtime power management code
    - mm/hugetlb: fix deadlock in hugetlb_cow error path
    - mm: memmap defer init doesn't work as expected
    - [s390x] lib/zlib: fix inflating zlib streams on s390
    - io_uring: don't assume mm is constant across submits
    - io_uring: use bottom half safe lock for fixed file data
    - io_uring: add a helper for setting a ref node
    - io_uring: fix io_sqe_files_unregister() hangs
    - uapi: move constants from <linux/kernel.h> to <linux/const.h>
    - tools headers UAPI: Sync linux/const.h with the kernel headers
    - cgroup: Fix memory leak when parsing multiple source parameters
    - [s390x] zlib: move EXPORT_SYMBOL() and MODULE_LICENSE() out of
      dfltcc_syms.c
    - Bluetooth: hci_h5: close serdev device and free hu in h5_close
    - fbcon: Disable accelerated scrolling
    - reiserfs: add check for an invalid ih_entry_count
    - [x86] misc: vmw_vmci: fix kernel info-leak by initializing dbells in
      vmci_ctx_get_chkpt_doorbells()
    - media: gp8psk: initialize stats at power control logic
    - f2fs: fix shift-out-of-bounds in sanity_check_raw_super()
    - ALSA: seq: Use bool for snd_seq_queue internal flags
    - ALSA: rawmidi: Access runtime->avail always in spinlock
    - bfs: don't use WARNING: string when it's just info.
    - ext4: check for invalid block size early when mounting a file system
    - fcntl: Fix potential deadlock in send_sig{io, urg}()
    - io_uring: check kthread stopped flag when sq thread is unparked
    - [arm64,armhf] rtc: sun6i: Fix memleak in sun6i_rtc_clk_init
    - module: set MODULE_STATE_GOING state when a module fails to load
    - quota: Don't overflow quota file offsets
    - [arm64,armhf] rtc: pl031: fix resource leak in pl031_probe
    - i3c master: fix missing destroy_workqueue() on error in
      i3c_master_register
    - NFSv4: Fix a pNFS layout related use-after-free race when freeing the
      inode
    - f2fs: avoid race condition for shrinker count
    - f2fs: fix race of pending_pages in decompression
    - module: delay kobject uevent until after module init call
    - [powerpc*] 64: irq replay remove decrementer overflow check
    - fs/namespace.c: WARN if mnt_count has become negative
    - ceph: fix inode refcount leak when ceph_fill_inode on non-I_NEW inode
      fails
    - tick/sched: Remove bogus boot "safety" check
    - [s390x] always clear kernel stack backchain before calling functions
    - io_uring: remove racy overflow list fast checks
    - ALSA: pcm: Clear the full allocated memory at hw_params
    - dm verity: skip verity work if I/O error when system is shutting down
    - ext4: avoid s_mb_prefetch to be zero in individual scenarios
    - device-dax: Fix range release
.
  [ Luca Boccassi ]
  * [amd64,arm64] Generate BTF debug info: (partially closes: #973870)
    - Enable DEBUG_INFO_BTF.
    - Build-Depend on dwarves >= 1.16~.
.
  [ Aurelien Jarno ]
  * usbip: depend on usb.ids instead of usbutils.
  * [mips*] Fix build with binutils configured with
    --enable-mips-fix-loongson3-llsc=yes.
.
  [ Salvatore Bonaccorso ]
  * Bluetooth: Fix attempting to set RPA timeout when unsupported
    (Closes: #972968)
  * net: cdc_ncm: correct overhead in delayed_ndp_size (Closes: #970736)
  * mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start
    (CVE-2020-36158)
  * [rt] Update to 5.10.4-rt22
  * X.509: Fix crash caused by NULL pointer (Closes: #979496)
  * Revert "drm/amd/display: Fix memory leaks in S3 resume"
.
linux (5.10.4-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.3
    - net: ipconfig: Avoid spurious blank lines in boot log
    - [x86] split-lock: Avoid returning with interrupts enabled
    - exfat: Avoid allocating upcase table using kcalloc()
    - [arm64] soc/tegra: fuse: Fix index bug in get_process_id
    - USB: serial: option: add interface-number sanity check to flag handling
    - USB: gadget: f_acm: add support for SuperSpeed Plus
    - USB: gadget: f_midi: setup SuperSpeed Plus descriptors
    - usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
    - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
    - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING
      flag to imx6ul
    - [armhf] dts: exynos: fix roles of USB 3.0 ports on Odroid XU
    - [armhf] dts: exynos: fix USB 3.0 pins supply being turned off on Odroid
      XU
    - f2fs: fix to seek incorrect data offset in inline data file
    - f2fs: init dirty_secmap incorrectly
    - scsi: megaraid_sas: Check user-provided offsets
    - [arm64,x86] HID: i2c-hid: add Vero K147 to descriptor override
    - serial_core: Check for port state when tty is in error state
    - fscrypt: remove kernel-internal constants from UAPI header
    - fscrypt: add fscrypt_is_nokey_name()
    - ubifs: prevent creating duplicate encrypted filenames
    - ext4: prevent creating duplicate encrypted filenames
    - f2fs: prevent creating duplicate encrypted filenames
    - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
    - quota: Sanity-check quota file headers on load
    - fs: quota: fix array-index-out-of-bounds bug by passing correct argument
      to vfs_cleanup_quota_inode()
    - media: msi2500: assign SPI bus number dynamically
    - crypto: af_alg - avoid undefined behavior accessing salg_name
    - nl80211: validate key indexes for cfg80211_registered_device
    - md: fix a warning caused by a race between concurrent md_ioctl()s
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.4
    - [x86] hwmon: (k10temp) Remove support for displaying voltage and current
      on Zen CPUs
    - [x86] drm/gma500: fix double free of gma_connector
    - [arm64] rtc: pcf2127: fix pcf2127_nvmem_read/write() returns
    - selinux: fix error initialization in inode_doinit_with_dentry()
    - [armhf] dts: aspeed: s2600wf: Fix VGA memory region location
    - RDMA/core: Fix error return in _ib_modify_qp()
    - RDMA/rxe: Compute PSN windows correctly
    - [x86] /mm/ident_map: Check for errors from ident_pud_init()
    - [armel,armhf] p2v: fix handling of LPAE translation in BE mode
    - [x86] apic: Fix x2apic enablement without interrupt remapping
    - sched/deadline: Fix sched_dl_global_validate()
    - sched: Reenable interrupts in do_sched_yield()
    - [arm64] crypto: inside-secure - Fix sizeof() mismatch
    - [arm64] ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified
      mode
    - drm/msm: Add missing stub definition
    - [armhf] dts: aspeed: tiogapass: Remove vuart
    - [powerpc*] 64: Set up a kernel stack for secondaries before
      cpu_restore()
    - f2fs: call f2fs_get_meta_page_retry for nat page
    - RDMA/mlx5: Fix corruption of reg_pages in mlx5_ib_rereg_user_mr()
    - [arm64] drm/msm/dp: DisplayPort PHY compliance tests fixup
    - [arm64] drm/msm/dsi_pll_7nm: restore VCO rate during restore_state
    - [arm64] drm/msm/dsi_pll_10nm: restore VCO rate during restore_state
    - [arm64] drm/msm/dpu: fix clock scaling on non-sc7180 board
    - spi: spi-mem: fix reference leak in spi_mem_access_start
    - scsi: aacraid: Improve compat_ioctl handlers
    - ASoC: pcm: DRAIN support reactivation
    - [armhf] drm/bridge: tpd12s015: Fix irq registering in tpd12s015_probe
    - [arm64] crypto: arm64/poly1305-neon - reorder PAC authentication with SP
      update
    - [arm64] crypto: caam - fix printing on xts fallback allocation error
      path
    - selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling
    - nl80211/cfg80211: fix potential infinite loop
    - [armhf] spi: stm32: fix reference leak in stm32_spi_resume
    - [x86] mce: Correct the detection of invalid notifier priorities
    - drm/edid: Fix uninitialized variable in drm_cvt_modes()
    - ath11k: Initialize complete alpha2 for regulatory change
    - ath11k: Fix number of rules in filtered ETSI regdomain
    - ath11k: fix wmi init configuration
    - brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free}
    - [arm64,armhf] drm/panel: simple: Add flags to boe_nv133fhm_n61
    - Bluetooth: Fix null pointer dereference in hci_event_packet()
    - Bluetooth: Fix: LL PRivacy BLE device fails to connect
    - Bluetooth: hci_h5: fix memory leak in h5_close
    - [armhf] spi: stm32-qspi: fix reference leak in stm32 qspi operations
    - [armhf] spi: spi-ti-qspi: fix reference leak in ti_qspi_setup
    - [arm64] spi: tegra20-slink: fix reference leak in slink ops of tegra20
    - [arm64,armhf] spi: tegra20-sflash: fix reference leak in
      tegra_sflash_resume
    - [arm64,armhf] spi: tegra114: fix reference leak in tegra spi ops
    - [armhf] spi: imx: fix reference leak in two imx operations
    - [arm64] ASoC: qcom: common: Fix refcounting in qcom_snd_parse_of()
    - ath11k: Handle errors if peer creation fails
    - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure
    - [arm64] drm/msm/a6xx: Clear shadow on suspend
    - [arm64] drm/msm/a5xx: Clear shadow on suspend
    - [arm64] drm/msm/dp: return correct connection status after suspend
    - [arm64] drm/msm/dp: skip checking LINK_STATUS_UPDATED bit
    - [arm64] drm/msm/dp: do not notify audio subsystem if sink doesn't
      support audio
    - virtiofs fix leak in setup
    - RDMa/mthca: Work around -Wenum-conversion warning
    - [armhf] soc: ti: omap-prm: Do not check rstst bit on deassert if already
      deasserted
    - [x86] crypto: qat - fix status check in qat_hal_put_rel_rd_xfer()
    - drm/udl: Fix missing error code in udl_handle_damage()
    - [x86] media: tm6000: Fix sizeof() mismatches
    - media: v4l2-fwnode: Return -EINVAL for invalid bus-type
    - media: v4l2-fwnode: v4l2_fwnode_endpoint_parse caller must init vep
      argument
    - [arm64,armhf] media: cedrus: fix reference leak in
      cedrus_start_streaming
    - [arm64] media: venus: core: change clk enable and disable order in
      resume and suspend
    - [arm64] media: venus: core: vote for video-mem path
    - [arm64] media: venus: core: vote with average bandwidth and peak
      bandwidth as zero
    - RDMA/cma: Add missing error handling of listen_id
    - scsi: core: Fix VPD LUN ID designator priorities
    - [arm64] media: venus: put dummy vote on video-mem path after last
      session release
    - media: solo6x10: fix missing snd_card_free in error handling case
    - [arm64,armhf] mmc: sdhci: tegra: fix wrong unit with busy_timeout
    - [armhf] drm/omap: dmm_tiler: fix return error code in omap_dmm_probe()
    - [arm64] drm/meson: Free RDMA resources after tearing down DRM
    - [arm64] drm/meson: Unbind all connectors on module removal
    - [arm64] drm/meson: dw-hdmi: Register a callback to disable the regulator
    - [arm64] drm/meson: dw-hdmi: Ensure that clocks are enabled before
      touching the TOP registers
    - [amd64] iommu/vt-d: include conditionally on CONFIG_INTEL_IOMMU_SVM
    - Input: ads7846 - fix race that causes missing releases
    - Input: ads7846 - fix integer overflow on Rt calculation
    - Input: ads7846 - fix unaligned access on 7845
    - bus: mhi: core: Remove double locking from mhi_driver_remove()
    - bus: mhi: core: Fix null pointer access when parsing MHI configuration
    - [powerpc*] Avoid broken GCC __attribute__((optimize))
    - [powerpc*] feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32
    - [armhf] dts: tacoma: Fix node vs reg mismatch for flash memory
    - Revert "powerpc/pseries/hotplug-cpu: Remove double free in error path"
    - [powerpc*] powernv/sriov: fix unsigned int win compared to less than
      zero
    - [x86] EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId
    - scsi: ufs: Avoid to call REQ_CLKS_OFF to CLKS_OFF
    - scsi: ufs: Fix clkgating on/off
    - rcu: Allow rcu_irq_enter_check_tick() from NMI
    - rcu,ftrace: Fix ftrace recursion
    - rcu/tree: Defer kvfree_rcu() allocation to a clean context
    - spi: fix resource leak for drivers without .remove callback
    - [arm64] drm/meson: dw-hdmi: Disable clocks on driver teardown
    - [arm64] drm/meson: dw-hdmi: Enable the iahb clock early enough
    - PCI: Disable MSI for Pericom PCIe-USB adapter
    - [arm64] PCI: brcmstb: Initialize "tmp" before use
    - [arm64] dts: qcom: sm8250: correct compatible for sm8250-mtp
    - [armhf] Input: omap4-keypad - fix runtime PM error handling
    - ath11k: Fix the rx_filter flag setting for peer rssi stats
    - RDMA/cxgb4: Validate the number of CQEs
    - [arm64] pinctrl: sunxi: fix irq bank map for the Allwinner A100 pin
      controller
    - memstick: fix a double-free bug in memstick_check
    - brcmfmac: fix error return code in brcmf_cfg80211_connect()
    - orinoco: Move context allocation after processing the skb
    - rsi: fix error return code in rsi_reset_card()
    - [arm64] dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
    - [armel] leds: netxbig: add missing put_device() call in
      netxbig_leds_get_of_pdata()
    - RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind
    - media: siano: fix memory leak of debugfs members in smsdvb_hotplug
    - [x86] platform/x86: mlx-platform: Remove PSU EEPROM from default
      platform configuration
    - [x86] platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x
      platform configuration
    - [arm64] RDMA/hns: Only record vlan info for HIP08
    - [arm64] RDMA/hns: Fix missing fields in address vector
    - [arm64] RDMA/hns: Avoid setting loopback indicator when smac is same as
      dmac
    - RDMA/core: Track device memory MRs
    - [armhf] HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
    - [arm64] dts: armada-3720-turris-mox: update ethernet-phy handle name
    - [arm64] dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc
    - [x86] power: supply: max17042_battery: Fix current_{avg,now} hiding with
      no current sense
    - [x86] power: supply: bq24190_charger: fix reference leak
    - genirq/irqdomain: Don't try to free an interrupt that has no mapping
    - [arm64] dts: freescale: sl28: combine SPI MTD partitions
    - [arm64,armhf] phy: tegra: xusb: Fix usb_phy device driver field
    - [arm64] dts: qcom: c630: Polish i2c-hid devices
    - [arm64] dts: qcom: c630: Fix pinctrl pins properties
    - PCI: Bounds-check command-line resource alignment requests
    - PCI: Fix overflow in command-line resource alignment requests
    - [arm64] dts: meson: fix spi-max-frequency on Khadas VIM2
    - [arm64] soc: amlogic: canvas: add missing put_device() call in
      meson_canvas_get()
    - [arm64] scsi: hisi_sas: Fix up probe error handling for v3 hw
    - scsi: pm80xx: Do not sleep in atomic context
    - [arm64] spi: spi-fsl-dspi: Use max_native_cs instead of num_chipselect
      to set SPI_MCR
    - [arm64] RDMA/hns: Fix 0-length sge calculation error
    - [arm64] RDMA/hns: Bugfix for calculation of extended sge
    - soundwire: master: use pm_runtime_set_active() on add
    - [x86] platform/x86: dell-smbios-base: Fix error return code in
      dell_smbios_init
    - [x86] ASoC: Intel: Boards: tgl_max98373: update TDM slot_width
    - ath11k: Don't cast ath11k_skb_cb to ieee80211_tx_info.control
    - ath11k: Reset ath11k_skb_cb before setting new flags
    - ath11k: Fix an error handling path
    - ath10k: Fix the parsing error in service available event
    - ath10k: Fix an error handling path
    - ath10k: Release some resources in an error handling path
    - SUNRPC: rpc_wake_up() should wake up tasks in the correct order
    - NFSv4.2: condition READDIR's mask for security label based on LSM state
    - SUNRPC: xprt_load_transport() needs to support the netid "rdma6"
    - NFSv4: Fix the alignment of page data in the getdeviceinfo reply
    - net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs'
    - lockd: don't use interval-based rebinding over TCP
    - NFS: switch nfsiod to be an UNBOUND workqueue.
    - vfio-pci: Use io_remap_pfn_range() for PCI IO memory
    - f2fs: fix double free of unicode map
    - media: tvp5150: Fix wrong return value of tvp5150_parse_dt()
    - media: saa7146: fix array overflow in vidioc_s_audio()
    - [powerpc*] perf: Fix crash with is_sier_available when pmu is not set
    - [powerpc*] 64: Fix an EMIT_BUG_ENTRY in head_64.S
    - [powerpc*] xmon: Fix build failure for 8xx
    - [powerpc*] perf: Fix to update radix_scope_qual in power10
    - [powerpc*] perf: Update the PMU group constraints for l2l3 events in
      power10
    - [powerpc*] perf: Fix the PMU group constraints for threshold events in
      power10
    - [armel,armhf] clocksource/drivers/orion: Add missing
      clk_disable_unprepare() on error path
    - [arm64] mte: fix prctl(PR_GET_TAGGED_ADDR_CTRL) if TCF0=NONE
    - bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
    - [arm64,armhf] soc: rockchip: io-domain: Fix error return code in
      rockchip_iodomain_probe()
    - memstick: r592: Fix error return in r592_probe()
    - [mips64el] Don't round up kernel sections size for memblock_add()
    - mt76: dma: fix possible deadlock running mt76_dma_cleanup
    - net/mlx5: Properly convey driver version to firmware
    - mt76: fix memory leak if device probing fails
    - dm ioctl: fix error return code in target_message
    - [arm64] drm/msm: a5xx: Make preemption reset case reentrant
    - [arm64,armhf] clocksource/drivers/arm_arch_timer: Use stable count
      reader in erratum sne
    - [arm64,armhf] clocksource/drivers/arm_arch_timer: Correct fault
      programming of CNTKCTL_EL1.EVNTI
    - [m68k] macintosh/adb-iop: Always wait for reply message from IOP
    - [m68k] macintosh/adb-iop: Send correct poll command
    - Bluetooth: btusb: Add the missed release_firmware() in
      btusb_mtk_setup_firmware()
    - Bluetooth: btmtksdio: Add the missed release_firmware() in
      mtk_setup_firmware()
    - Bluetooth: sco: Fix crash when using BT_SNDMTU/BT_RCVMTU option
    - Bluetooth: btusb: Fix detection of some fake CSR controllers with a
      bcdDevice val of 0x0134
    - [x86] platform/x86: intel-vbtn: Fix SW_TABLET_MODE always reporting 1 on
      some HP x360 models
    - adm8211: fix error return code in adm8211_probe()
    - mtd: spi-nor: sst: fix BPn bits for the SST25VF064C
    - mtd: spi-nor: ignore errors in spi_nor_unlock_all()
    - mtd: spi-nor: atmel: remove global protection flag
    - mtd: spi-nor: atmel: fix unlock_all() for AT25FS010/040
    - [arm64] dts: meson: fix PHY deassert timing requirements
    - [armhf] dts: meson: fix PHY deassert timing requirements
    - [arm64] dts: meson: g12a: x96-max: fix PHY deassert timing requirements
    - [arm64] clk: fsl-sai: fix memory leak
    - scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe
    - scsi: pm80xx: Fix error return in pm8001_pci_probe()
    - scsi: iscsi: Fix inappropriate use of put_device()
    - seq_buf: Avoid type mismatch for seq_buf_init
    - [x86] scsi: fnic: Fix error return code in fnic_probe()
    - [x86] platform/x86: mlx-platform: Fix item counter assignment for
      MSN2700, MSN24xx systems
    - [x86] platform/x86: mlx-platform: Fix item counter assignment for
      MSN2700/ComEx system
    - [armel,armhf] 9030/1: entry: omit FP emulation for UND exceptions taken
      in kernel mode
    - [powerpc*] pseries/hibernation: drop pseries_suspend_begin() from
      suspend ops
    - [powerpc*] pseries/hibernation: remove redundant cacheinfo update
    - [powerpc*] powermac: Fix low_sleep_handler with CONFIG_VMAP_STACK
    - [x86] ASoC: amd: change clk_get() to devm_clk_get() and add missed
      checks
    - [x86] ASoC: max98390: Fix error codes in max98390_dsm_init()
    - [powerpc*] mm: sanity_check_fault() should work for all, not only BOOK3S
    - [armhf] usb: ehci-omap: Fix PM disable depth umbalance in
      ehci_hcd_omap_probe
    - speakup: fix uninitialized flush_lock
    - nfsd: Fix message level for normal termination
    - NFSD: Fix 5 seconds delay when doing inter server copy
    - nfs_common: need lock during iterate through the list
    - [x86] kprobes: Restore BTF if the single-stepping is cancelled
    - scsi: qla2xxx: Fix FW initialization error on big endian machines
    - scsi: qla2xxx: Fix N2N and NVMe connect retry failure
    - [arm64,armhf] platform/chrome: cros_ec_spi: Don't overwrite spi::mode
    - [arm64] bus: fsl-mc: add back accidentally dropped error check
    - [arm64] bus: fsl-mc: fix error return code in fsl_mc_object_allocate()
    - [armhf] fsi: Aspeed: Add mutex to protect HW access
    - [s390x] cio: fix use-after-free in ccw_device_destroy_console
    - iwlwifi: dbg-tlv: fix old length in is_trig_data_contained()
    - iwlwifi: mvm: hook up missing RX handlers
    - erofs: avoid using generic_block_bmap
    - [powerpc*] sstep: Emulate prefixed instructions only when
      CPU_FTR_ARCH_31 is set
    - [powerpc*] sstep: Cover new VSX instructions under CONFIG_VSX
    - ALSA: hda/hdmi: fix silent stream for first playback to DP
    - RDMA/core: Do not indicate device ready when device enablement fails
    - RDMA/uverbs: Fix incorrect variable type
    - [arm64,armhf] clk: tegra: Fix duplicated SE clock entry
    - [armhf] mtd: rawnand: gpmi: fix reference count leak in gpmi ops
    - [armhf] mtd: rawnand: gpmi: Fix the random DMA timeout issue
    - samples/bpf: Fix possible hang in xdpsock with multiple threads
    - fs: Handle I_DONTCACHE in iput_final() instead of generic_drop_inode()
    - mac80211: don't set set TDLS STA bandwidth wider than possible
    - mac80211: fix a mistake check for rx_stats update
    - [arm64] irqchip/alpine-msi: Fix freeing of interrupts on allocation
      error path
    - [arm64] RDMA/hns: Limit the length of data copied between kernel and
      userspace
    - [arm64] RDMA/hns: Normalization the judgment of some features
    - [arm64] RDMA/hns: Do shift on traffic class when using RoCEv2
    - gpiolib: irq hooks: fix recursion in gpiochip_irq_unmask
    - ath11k: Fix incorrect tlvs in scan start command
    - watchdog: Fix potential dereferencing of null pointer
    - sunrpc: fix xs_read_xdr_buf for partial pages receive
    - RDMA/mlx5: Fix MR cache memory leak
    - RDMA/cma: Don't overwrite sgid_attr after device is released
    - [powerpc*] perf: Fix Threshold Event Counter Multiplier width for P10
    - [powerpc*] ps3: use dma_mapping_error()
    - mm/gup: reorganize internal_get_user_pages_fast()
    - mm/gup: prevent gup_fast from racing with COW during fork
    - mm/gup: combine put_compound_head() and unpin_user_page()
    - mm: memcg/slab: fix return of child memcg objcg for root memcg
    - mm: memcg/slab: fix use after free in obj_cgroup_charge
    - mm/rmap: always do TTU_IGNORE_ACCESS
    - [sparc64] fix handling of page table constructor failure
    - mm/vmalloc: Fix unlock order in s_stop()
    - mm/vmalloc.c: fix kasan shadow poisoning size
    - mm,memory_failure: always pin the page in madvise_inject_error
    - hugetlb: fix an error code in hugetlb_reserve_pages()
    - mm: don't wake kswapd prematurely when watermark boosting is disabled
    - proc: fix lookup in /proc/net subdirectories after setns(2)
    - lan743x: fix rx_napi_poll/interrupt ping-pong
    - ice, xsk: clear the status bits for the next_to_use descriptor
    - i40e, xsk: clear the status bits for the next_to_use descriptor
    - [arm64] dpaa2-eth: fix the size of the mapped SGT buffer
    - [arm64] net: bcmgenet: Fix a resource leak in an error handling path in
      the probe functin
    - [armhf] net: allwinner: Fix some resources leak in the error handling
      path of the probe and in the remove function
    - NFS/pNFS: Fix a typo in ff_layout_resend_pnfs_read()
    - devlink: use _BITUL() macro instead of BIT() in the UAPI header
    - libnvdimm/label: Return -ENXIO for no slot in __blk_label_update
    - [powerpc*] 32s: Fix cleanup_cpu_mmu_context() compile bug
    - [arm64] watchdog: qcom: Avoid context switch in restart handler
    - [armhf] clk: ti: Fix memleak in ti_fapll_synth_setup
    - [armhf] pwm: imx27: Fix overflow for bigger periods
    - [arm64,armhf] pwm: sun4i: Remove erroneous else branch
    - io_uring: cancel only requests of current task
    - perf record: Fix memory leak when using '--user-regs=?' to list
      registers
    - qlcnic: Fix error code in probe
    - nfp: move indirect block cleanup to flower app stop callback
    - virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed()
    - virtio_net: Fix error code in probe()
    - virtio_ring: Fix two use after free bugs
    - vhost scsi: fix error return code in vhost_scsi_set_endpoint()
    - epoll: check for events when removing a timed out thread from the wait
      queue
    - [arm*] clk: bcm: dvp: Add MODULE_DEVICE_TABLE()
    - [armhf] clk: s2mps11: Fix a resource leak in error handling paths in the
      probe function
    - [arm64,armhf] clk: sunxi-ng: Make sure divider tables have sentinel
    - [powerpc*] smp: Add __init to init_big_cores()
    - [armel,armhf] 9044/1: vfp: use undef hook for VFP support detection
    - [armel,armhf] 9036/1: uncompress: Fix dbgadtb size parameter name
    - perf probe: Fix memory leak when synthesizing SDT probes
    - io_uring: fix racy IOPOLL flush overflow
    - io_uring: cancel reqs shouldn't kill overflow list
    - proc mountinfo: make splice available again
    - io_uring: fix io_cqring_events()'s noflush
    - io_uring: fix racy IOPOLL completions
    - io_uring: always let io_iopoll_complete() complete polled io
    - vfio/pci: Move dummy_resources_list init in vfio_pci_probe()
    - media: gspca: Fix memory leak in probe
    - io_uring: fix io_wqe->work_list corruption
    - io_uring: fix 0-iov read buffer select
    - io_uring: hold uring_lock while completing failed polled io in
      io_wq_submit_work()
    - io_uring: fix ignoring xa_store errors
    - io_uring: fix double io_uring free
    - io_uring: make ctx cancel on exit targeted to actual ctx
    - [armhf] media: sunxi-cir: ensure IR is handled when it is continuous
    - media: netup_unidvb: Don't leak SPI master in probe error path
    - [x86] Input: cyapa_gen6 - fix out-of-bounds stack access
    - ALSA: hda/ca0132 - Change Input Source enum strings.
    - [amd64,arm64] ACPI: NFIT: Fix input validation of bus-family
    - PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup()
    - Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources
      walks"
    - ACPI: PNP: compare the string length in the matching_id()
    - ALSA: hda: Fix regressions on clear and reconfig sysfs
    - ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg.
    - ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop
    - ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256
    - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255
    - ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button
    - ALSA: pcm: oss: Fix a few more UBSAN fixes
    - ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G
    - ALSA: hda/realtek: Add quirk for MSI-GP73
    - ALSA: hda/realtek: Apply jack fixup for Quanta NL3
    - ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658
    - ALSA: hda/realtek - Supported Dell fixed type headset
    - ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO
      devices
    - ALSA: usb-audio: Disable sample read check if firmware doesn't give back
    - ALSA: usb-audio: Add alias entry for ASUS PRIME TRX40 PRO-S
    - ALSA: core: memalloc: add page alignment for iram
    - [s390x] smp: perform initial CPU reset also for SMT siblings
    - [s390x] idle: add missing mt_cycles calculation
    - [s390x] idle: fix accounting with machine checks
    - [s390x] dasd: fix hanging device offline processing
    - [s390x] dasd: prevent inconsistent LCU device data
    - [s390x] dasd: fix list corruption of pavgroup group list
    - [s390x] dasd: fix list corruption of lcu list
    - binder: add flag to clear buffer on txn complete
    - [x86] ASoC: cx2072x: Fix doubly definitions of Playback and Capture
      streams
    - [amd64] ASoC: AMD Renoir - add DMI table to avoid the ACP mic probe
      (broken BIOS)
    - [amd64] ASoC: AMD Raven/Renoir - fix the PCI probe (PCI revision)
    - [x86] staging: comedi: mf6x4: Fix AI end-of-conversion detection
    - z3fold: simplify freeing slots
    - z3fold: stricter locking and more careful reclaim
    - [x86] perf/x86/intel: Add event constraint for
      CYCLE_ACTIVITY.STALLS_MEM_ANY
    - [x86] perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake
    - [x86] perf/x86/intel/lbr: Fix the return type of get_lbr_cycles()
    - [powerpc*] perf: Exclude kernel samples while counting events in user
      space.
    - [x86] cpufreq: intel_pstate: Use most recent guaranteed performance
      values
    - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
    - [x86] EDAC/amd64: Fix PCI component registration
    - cpuset: fix race between hotplug work and later CPU offline
    - dyndbg: fix use before null check
    - USB: serial: mos7720: fix parallel-port state restore
    - USB: serial: digi_acceleport: fix write-wakeup deadlocks
    - USB: serial: keyspan_pda: fix dropped unthrottle interrupts
    - USB: serial: keyspan_pda: fix write deadlock
    - USB: serial: keyspan_pda: fix stalled writes
    - USB: serial: keyspan_pda: fix write-wakeup use-after-free
    - USB: serial: keyspan_pda: fix tx-unthrottle use-after-free
    - USB: serial: keyspan_pda: fix write unthrottling
    - btrfs: do not shorten unpin len for caching block groups
    - btrfs: update last_byte_to_unpin in switch_commit_roots
    - btrfs: fix race when defragmenting leads to unnecessary IO
    - ext4: fix an IS_ERR() vs NULL check
    - ext4: fix a memory leak of ext4_free_data
    - ext4: fix deadlock with fs freezing and EA inodes
    - ext4: don't remount read-only with errors=continue on reboot
    - [riscv64] Fix usage of memblock_enforce_memory_limit
    - [arm64] KVM: Introduce handling of AArch32 TTBCR2 traps
    - [x86] KVM: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits
    - [x86] KVM: SVM: Remove the call to sev_platform_status() during setup
    - [arm64,armhf] iommu/arm-smmu: Allow implementation specific write_s2cr
    - [arm64,armhf] iommu/arm-smmu-qcom: Read back stream mappings
    - [arm64,armhf] iommu/arm-smmu-qcom: Implement S2CR quirk
    - [armhf] dts: pandaboard: fix pinmux for gpio user button of Pandaboard
      ES
    - xprtrdma: Fix XDRBUF_SPARSE_PAGES support
    - [powerpc*] 32: Fix vmap stack - Properly set r1 before activating MMU on
      syscall too
    - [powerpc*] Fix incorrect stw{, ux, u, x} instructions in __set_pte_at
    - [powerpc*] rtas: Fix typo of ibm,open-errinjct in RTAS filter
    - [powerpc*] bitops: Fix possible undefined behaviour with fls() and
      fls64()
    - [powerpc*] feature: Add CPU_FTR_NOEXECUTE to G2_LE
    - [powerpc*] xmon: Change printk() to pr_cont()
    - [powerpc*] 8xx: Fix early debug when SMC1 is relocated
    - [powerpc*] mm: Fix verification of MMU_FTR_TYPE_44x
    - [powerpc*] powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU
    - [powerpc*] powernv/memtrace: Don't leak kernel memory to user space
    - [powerpc*] powernv/memtrace: Fix crashing the kernel when enabling
      concurrently
    - ovl: make ioctl() safe
    - ceph: fix race in concurrent __ceph_remove_cap invocations
    - SMB3: avoid confusing warning message on mount to Azure
    - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot
      rsp
    - SMB3.1.1: do not log warning message if server doesn't populate salt
    - ubifs: wbuf: Don't leak kernel memory to flash
    - jffs2: Fix GC exit abnormally
    - jffs2: Fix ignoring mounting options problem during remounting
    - fsnotify: generalize handle_inode_event()
    - inotify: convert to handle_inode_event() interface
    - fsnotify: fix events reported to watching parent and child
    - jfs: Fix array index bounds check in dbAdjTree (CVE-2020-27815)
    - [arm64,armhf] drm/panfrost: Fix job timeout handling
    - [arm64,armhf] drm/panfrost: Move the GPU reset bits outside the timeout
      handler
    - [x86] platform/x86: mlx-platform: remove an unused variable
    - drm/dp_aux_dev: check aux_dev before use in
      drm_dp_aux_dev_get_by_minor()
    - [x86] drm/i915: Fix mismatch between misplaced vma check and vma insert
    - iio: ad_sigma_delta: Don't put SPI transfer buffer on the stack
    - [arm64,armhf] spi: pxa2xx: Fix use-after-free on unbind
    - [armhf] spi: gpio: Don't leak SPI master in probe error path
    - [armel] mtd: parser: cmdline: Fix parsing of part-names with colons
    - mtd: core: Fix refcounting for unpartitioned MTDs
    - scsi: qla2xxx: Fix crash during driver load on big endian machines
    - scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc()
    - scsi: lpfc: Fix scheduling call while in softirq context in
      lpfc_unreg_rpi
    - scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free()
    - openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT
    - iio: buffer: Fix demux update
    - iio: imu: st_lsm6dsx: fix edge-trigger interrupts
    - iio:light:rpr0521: Fix timestamp alignment and prevent data leak.
    - iio:light:st_uvis25: Fix timestamp alignment and prevent data leak.
    - iio:magnetometer:mag3110: Fix alignment and data leak issues.
    - iio:pressure:mpl3115: Force alignment of buffer
    - iio:imu:bmi160: Fix too large a buffer.
    - iio:imu:bmi160: Fix alignment and data leak issues
    - md/cluster: block reshape with remote resync job
    - md/cluster: fix deadlock when node is doing resync job
    - [arm64,armhf] pinctrl: sunxi: Always call chained_irq_{enter, exit} in
      sunxi_pinctrl_irq_handler
    - [arm64] clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9
    - [arm64,armhf] clk: tegra: Do not return 0 on failure
    - device-dax/core: Fix memory leak when rmmod dax.ko
    - dma-buf/dma-resv: Respect num_fences when initializing the shared fence
      list.
    - driver: core: Fix list corruption after device_del()
    - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace
      labels
    - [x86] platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha
      12
    - tracing: Disable ftrace selftests when any tracer is running
    - mt76: add back the SUPPORTS_REORDERING_BUFFER flag
    - PCI: Fix pci_slot_release() NULL pointer dereference
    - [arm64,armhf] regulator: axp20x: Fix DLDO2 voltage control register mask
      for AXP22x
    - [arm*] thermal/drivers/cpufreq_cooling: Update cpufreq_state only if
      state has changed
    - null_blk: Fix zone size initialization
    - null_blk: Fail zone append to conventional zones
    - drm/edid: fix objtool warning in drm_cvt_modes()
    - [x86] CPU/AMD: Save AMD NodeId as cpu_die_id
.
  [ Uwe Kleine-König ]
  * [armhf] Enable VIDEO_CODA and VIDEO_IMX_PXP for i.MX6 platforms
.
  [ Vincent Blut ]
  * [x86] Enable SND_SOC_INTEL_USER_FRIENDLY_LONG_NAMES. (Closes: #976791)
.
  [ Salvatore Bonaccorso ]
  * [rt] Drop "z3fold: simplify freeing slots"
  * [rt] Drop "z3fold: stricter locking and more careful reclaim"
  * [rt] Refresh "sched: Move mmdrop to RCU on RT"
  * Set ABI to 1
.
linux (5.10.2-1~exp1) experimental; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.2
    - ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info()
    - USB: legotower: fix logical error in recent commit
    - USB: add RESET_RESUME quirk for Snapscan 1212
    - ALSA: usb-audio: Fix potential out-of-bounds shift
    - ALSA: usb-audio: Fix control 'access overflow' errors from chmap
    - xhci: Give USB2 ports time to enter U3 in bus suspend
    - usb: xhci: Set quirk for XHCI_SG_TRB_CACHE_SIZE_QUIRK
    - xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP
    - xhci-pci: Allow host runtime PM as default for Intel Maple Ridge xHCI
    - USB: UAS: introduce a quirk to set no_write_same
    - ALSA: pcm: oss: Fix potential out-of-bounds shift
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.10.1-rt20
  * Revert "Generate BTF debug info" (fixes FTBFS on 32bit architectures)
    (Reopen: #973870) (Cf. #977715)
  * Enable USB_DUMMY_HCD as module (Closes: #868771)
.
linux (5.10.1-1~exp1) experimental; urgency=medium
.
  * New upstream release: https://kernelnewbies.org/Linux_5.10
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.1
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.10-rt17
.
  [ Ben Hutchings ]
  * userns: Enable unprivileged user namespaces by default (Closes: #898446)
    (sysctl: kernel.unprivileged_userns_clone)
.
  [ Bastian Blank ]
  * Enable all Industrial I/O accelerometers. (closes: #975572)
  * Enable all Industrial I/O ADC.
  * Enable all Industrial I/O DAC.
  * Enable all Industrial I/O digital gyroscopes.
  * Enable all Industrial I/O IMU.
  * Enable all Industrial I/O light sensors.
  * Enable all Industrial I/O magnetometers.
  * Enable all Industrial I/O pressure sensors.
  * Enable all Industrial I/O proximity sensors.
  * Enable all Industrial I/O temperatur sensors.
  * Enable BT_LEDS.
  * Enable remaining LEDS_TRIGGER_*.
  * Enable ZONEFS_FS.
  * Gemerate BTF debug info: (closes: #973870)
    - Enable DEBUG_INFO_BTF.
    - Build-depend on dwarves.
  * [amd64] Support high CPU counts:
    - Set MAXSMP.
    - Remove not longer modifiable NR_CPUS.
  * [armel/marvell] Disable uncompressed size check.
  * [x86] Enable INTEL_TXT. (closes: #960195)
.
linux (5.10~rc7-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Vincent Blut ]
  * net/sched: Enable NET_SCH_ETS and NET_SCH_FQ_PIE as modules.
.
  [ Bastian Blank ]
  * Enable SOUNDWIRE, SOUNDWIRE_INTEL, SOUNDWIRE_QCOM.
  * Enable SND_SOC_RT700_SDW, SND_SOC_RT711_SDW, SND_SOC_RT715_SDW.
    (closes: #976791)
  * [x86] Enable SND_SOC_SOF_INTEL_SOUNDWIRE_LINK.
  * [x86] Enable SND_SOC_SOF_COMETLAKE_LP_SUPPORT,
    SND_SOC_SOF_ELKHARTLAKE_SUPPORT, SND_SOC_SOF_JASPERLAKE_SUPPORT.
  * [cloud] Disable some further filesystems. (closes: #977005)
  * [cloud] Disable NET_VENDOR_MICROCHIP.
  * [cloud] Disable ICE, IGC.
  * [amd64] Make GVE module.
  * [x86] Enable X86_CPU_RESCTRL.
  * [amd64/cloud] Disable INFINIBAND_USNIC.
  * Enable PSTORE_BLK.
  * Set SQUASHFS_FILE_DIRECT, SQUASHFS_DECOMP_MULTI_PERCPU.
  * Disable EFI_VARS.
  * [x86] Enable APPLE_PROPERTIES.
  * Enable CRYPTO_ECRDSA, CRYPTO_CURVE25519, disable CRYPTO_SM2.
  * Enable CRYPTO_CFB, CRYPTO_OFB, CRYPTO_KEYWRAP, CRYPTO_ADIANTUM.
  * Enable CRYPTO_BLAKE2S, disable CRYPTO_SM3.
  * Enable CRYPTO_AES_TI, disable CRYPTO_SM4.
  * Enable CRYPTO_DRBG_HASH, CRYPTO_DRBG_CTR.
  * Enable SND_SOC_MAX98373_SDW, SND_SOC_RT1308_SDW, SND_SOC_RT5682_SDW.
  * Enable SND_SOC_INTEL_SOUNDWIRE_SOF_MACH.
  * Enable ATH11K. (closes: #977004)
  * [arm64] Enable most accelerated crypto modules. (closes: #976635)
  * [s390x] Disable IIO.
  * Enable BLK_CGROUP_IOCOST.
  * Enable CGROUP_HUGETLB.
.
  [ Ben Hutchings ]
  * Fix missing module.lds for building out-of-tree modules (Closes: #975571)
    - debian/rules.real: Install module.lds under arch directory
    - kbuild: Look for module.lds under arch directory too
.
linux (5.10~rc6-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Romain Perier ]
  * Enable F2FS compression support (Closes: #969139)
.
  [ Uwe Kleine-König ]
  * [arm64] Enable support for Kontron's sl28cpld Board Management Controller
  * [arm64] Enable support for NXP's PCF85063 RTC (Closes: #972345)
.
  [ Salvatore Bonaccorso ]
  * udeb: Remove efivars from efi-modules.
  * [rt] Update to 5.10-rc6-rt13
.
  [ Aurelien Jarno ]
  * [mips*] Increase RELOCATION_TABLE_SIZE to 0x180000.
.
linux (5.10~rc4-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Uwe Kleine-König ]
  * enable support for ISO 15765-2:2016 CAN (CAN_ISOTP)
.
  [ YunQiang Su ]
  * [mips/loongson-3]: enable some new features for 3A 4000
    - VIRTUALIZATION/KVM
    - HOTPLUG_PCI
    - RTC based on GOLDFISH
    - ieee754 to relaxed mode
.
  [ Madhu Adav M J ]
  * nvme: Enable NVME_TCP and NVME_TARGET_TCP as modules (Closes: #961573)
.
  [ Ben Hutchings ]
  * Rewrite "MODSIGN: load blacklist from MOKx" for 5.10
  * Revert "lockdown: Refer to Debian wiki until manual page exists";
    the page was added in man-pages 5.09
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.10-rc4-rt8
  * linux-cpupower: Add librt to turbostat linker flags
.
  [ Nicolas Dandrimont ]
  * udeb: add bonding driver to nic-modules

linux (5.9.15-1parrot1) rolling-testing; urgency=medium
.
  * Import new Debian release.
.
linux (5.9.15-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.12
    - io_uring: get an active ref_node from files_data
    - io_uring: order refnode recycling
    - [arm*] spi: bcm2835: Fix use-after-free on unbind
    - ipv4: use IS_ENABLED instead of ifdef
    - [amd64] IB/hfi1: Ensure correct mm is used at all times (CVE-2020-27835)
    - RDMA/i40iw: Address an mmap handler exploit in i40iw
    - btrfs: fix missing delalloc new bit for new delalloc ranges
    - btrfs: tree-checker: add missing return after error in root_item
    - btrfs: tree-checker: add missing returns after data_ref alignment checks
    - btrfs: don't access possibly stale fs_info data for printing duplicate
      device
    - btrfs: fix lockdep splat when reading qgroup config on mount
    - [arm64] rtc: pcf2127: fix a bug when not specify interrupts property
    - [s390x] fix fpu restore in entry.S
    - mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)
    - smb3: Call cifs reconnect from demultiplex thread
    - smb3: Avoid Mid pending list corruption
    - smb3: Handle error case during offload read path
    - cifs: fix a memleak with modefromsid
    - [powerpc*] KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing
      ESB page
    - [arm64] KVM: vgic-v3: Drop the reporting of GICR_TYPER.Last for
      userspace
    - [x86] KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint
    - [x86] KVM: x86: Fix split-irqchip vs interrupt injection window request
    - [amd64] iommu/vt-d: Don't read VCCAP register unless it exists
    - [arm64] firmware: xilinx: Use hash-table for api feature check
    - drm/amdgpu: fix SI UVD firmware validate resume fail
    - io_uring: fix ITER_BVEC check
    - trace: fix potenial dangerous pointer
    - [arm64] pgtable: Fix pte_accessible()
    - [arm64] pgtable: Ensure dirty bit is preserved across pte_wrprotect()
    - drm/amdgpu: fix a page fault
    - drm/amdgpu: update golden setting for sienna_cichlid
    - drm/amd/amdgpu: fix null pointer in runtime pm
    - HID: uclogic: Add ID for Trust Flex Design Tablet
    - HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off
      keypresses
    - HID: cypress: Support Varmilo Keyboards' media hotkeys
    - HID: add support for Sega Saturn
    - Input: i8042 - allow insmod to succeed on devices without an i8042
      controller
    - HID: hid-sensor-hub: Fix issue with devices with no report ID
    - HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices
    - [x86] xen: don't unbind uninitialized lock_kicker_irq
    - HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo
      Edge
    - HID: Add Logitech Dinovo Edge battery quirk
    - proc: don't allow async path resolution of /proc/self components
    - nvme: free sq/cq dbbuf pointers when dbbuf set fails
    - io_uring: handle -EOPNOTSUPP on path resolution
    - [arm64,armhf] net: stmmac: dwmac_lib: enlarge dma reset timeout
    - vhost: add helper to check if a vq has been setup
    - vhost scsi: alloc cmds per vq instead of session
    - vhost scsi: fix cmd completion race
    - [arm64,armhf] dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
    - scsi: libiscsi: Fix NOP race condition
    - scsi: target: iscsi: Fix cmd abort fabric stop race
    - lockdep: Put graph lock/unlock under lock_recursion protection
    - [x86] perf/x86: fix sysfs type mismatches
    - [x86] dumpstack: Do not try to access user space code of other tasks
    - [arm64,armhf] net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset
    - [armhf] bus: ti-sysc: Fix reset status check for modules with quirks
    - [armhf] bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw
    - [arm64,armhf] phy: tegra: xusb: Fix dangling pointer on probe failure
    - iwlwifi: mvm: use the HOT_SPOT_CMD to cancel an AUX ROC
    - iwlwifi: mvm: properly cancel a session protection for P2P
    - iwlwifi: mvm: write queue_sync_state only for sync
    - [s390x] KVM: pv: Mark mm as protected after the set secure parameters
      and improve cleanup
    - [s390x] KVM: remove diag318 reset code
    - btrfs: qgroup: don't commit transaction when we already hold the handle
    - arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
    - [armhf] bus: ti-sysc: suppress err msg for timers used as
      clockevent/source
    - scsi: ufs: Fix race between shutdown and runtime resume flow
    - bnxt_en: fix error return code in bnxt_init_one()
    - bnxt_en: fix error return code in bnxt_init_board()
    - [x86] video: hyperv_fb: Fix the cache type when mapping the VRAM
    - bnxt_en: Release PCI regions when DMA mask setup fails during probe.
    - cxgb4: fix the panic caused by non smac rewrite
    - [s390x] qeth: make af_iucv TX notification call more robust
    - [s390x] qeth: fix af_iucv notification race
    - [s390x] qeth: fix tear down of async TX buffers
    - bonding: wait for sysfs kobject destruction before freeing struct slave
    - [powerpc*] 64s: Fix allnoconfig build since uaccess flush
    - iommu: Check return of __iommu_attach_device()
    - IB/mthca: fix return value of error branch in mthca_init_cq()
    - i40e: Fix removing driver while bare-metal VFs pass traffic
    - [arm64] firmware: xilinx: Fix SD DLL node reset issue
    - [armhf] spi: imx: fix the unbalanced spi runtime pm management
    - io_uring: fix shift-out-of-bounds when round up cq size
    - [amd64,arm64] aquantia: Remove the build_skb path
    - net: ena: handle bad request id in ena_netdev
    - net: ena: set initial DMA width to avoid intel iommu issue
    - net: ena: fix packet's addresses for rx_offset feature
    - [arm64] optee: add writeback to valid memory type
    - efi/efivars: Set generic ops before loading SSDT
    - efivarfs: revert "fix memory leak in efivarfs_create()"
      (Closes:  #977048)
    - efi: EFI_EARLYCON should depend on EFI
    - [riscv64] Add missing jump label initialization
    - [riscv64] fix barrier() use in <vdso/processor.h>
    - [arm64,armhf] net: stmmac: fix incorrect merge of patch upstream
    - [arm64] enetc: Let the hardware auto-advance the taprio base-time of 0
    - drm/nouveau: fix relocations applying logic and a double-free
    - can: gs_usb: fix endianess problem with candleLight firmware
    - [x86] platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup
      time
    - [x86] platform/x86: toshiba_acpi: Fix the wrong variable assignment
    - [arm64] RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
    - [arm64] RDMA/hns: Bugfix for memory window mtpt configuration
    - perf record: Synthesize cgroup events only if needed
    - perf stat: Use proper cpu for shadow stats
    - perf probe: Fix to die_entrypc() returns error correctly
    - [arm*] spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe
    - USB: core: Change %pK for __user pointers to %px
    - usb: gadget: f_midi: Fix memleak in f_midi_alloc
    - USB: core: Fix regression in Hercules audio card
    - USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO
      built-in usb-audio card
    - usb: gadget: Fix memleak in gadgetfs_fill_super
    - [arm64] irqchip/exiu: Fix the index of fwspec for IRQ type
    - [x86] mce: Do not overwrite no_way_out if mce_end() fails
    - [x86] speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb
    - drm/amdgpu: add rlc iram and dram firmware support
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.13
    - devlink: Hold rtnl lock while reading netdev attributes
    - devlink: Make sure devlink instance and port are in same net namespace
    - ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init
    - [s390x] net/af_iucv: set correct sk_protocol for child sockets
    - net: openvswitch: fix TTL decrement action netlink message format
    - rose: Fix Null pointer dereference in rose_send_frame()
    - sock: set sk_err to ee_errno on dequeue from errq
    - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control
    - tun: honor IOCB_NOWAIT flag
    - vsock/virtio: discard packets only when socket is really closed
    - net/packet: fix packet receive on L3 devices without visible hard header
    - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING
      traversal
    - ipv4: Fix tos mask in inet_rtm_getroute()
    - dt-bindings: net: correct interrupt flags in examples
    - tipc: fix incompatible mtu of transmission
    - inet_ecn: Fix endianness of checksum update when setting ECT(1)
    - geneve: pull IP header before ECN decapsulation
    - net: ip6_gre: set dev->hard_header_len when using header_ops
    - cxgb3: fix error return code in t3_sge_alloc_qset()
    - [powerpc*] net: pasemi: fix error return code in pasemi_mac_open()
    - vxlan: fix error return code in __vxlan_dev_create()
    - [arm64,armhf] net: mvpp2: Fix error return code in mvpp2_open()
    - net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl
    - net: openvswitch: ensure LSE is pullable before reading it
    - net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering
    - net/mlx5: Fix wrong address reclaim when command interface is down
    - net: mlx5e: fix fs_tcp.c build when IPV6 is not enabled
    - ALSA: usb-audio: US16x08: fix value count for level meters
    - Input: xpad - support Ardwiino Controllers
    - Input: i8042 - add ByteSpeed touchpad to noloop table
    - Input: atmel_mxt_ts - fix lost interrupts
    - tracing: Fix alignment of static buffer
    - tracing: Remove WARN_ON in start_thread()
    - uapi: fix statx attribute value overlap for DAX & MOUNT_ROOT
    - [x86] drm/i915/gt: Fixup tgl mocs for PTE tracking
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.14
    - usb: gadget: f_fs: Use local copy of descriptors for userspace copy
    - USB: serial: kl5kusb105: fix memleak on open
    - USB: serial: ch341: add new Product ID for CH341A
    - USB: serial: ch341: sort device-id entries
    - USB: serial: option: add Fibocom NL668 variants
    - USB: serial: option: add support for Thales Cinterion EXS82
    - USB: serial: option: fix Quectel BG96 matching
    - tty: Fix ->pgrp locking in tiocspgrp() (CVE-2020-29661)
    - tty: Fix ->session locking (CVE-2020-29660)
    - speakup: Reject setting the speakup line discipline outside of speakup
      (CVE-2020-27830)
    - ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14
    - ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model
    - ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294
    - ALSA: hda/realtek - Add new codec supported for ALC897
    - ALSA: hda/realtek - Fixed Dell AIO wrong sound tone
    - ALSA: hda/generic: Add option to enforce preferred_dacs pairs
    - ring-buffer: Update write stamp with the correct ts
    - ring-buffer: Set the right timestamp in the slow path of
      __rb_reserve_next()
    - ring-buffer: Always check to put back before stamp when crossing pages
    - ftrace: Fix updating FTRACE_FL_TRAMP
    - ftrace: Fix DYNAMIC_FTRACE_WITH_DIRECT_CALLS dependency
    - cifs: allow syscalls to be restarted in __smb_send_rqst()
    - cifs: fix potential use-after-free in cifs_echo_request()
    - cifs: refactor create_sd_buf() and and avoid corrupting the buffer
    - cifs: add NULL check for ses->tcon_ipc
    - gfs2: Upgrade shared glocks for atime updates
    - gfs2: Fix deadlock between gfs2_{create_inode,inode_lookup} and
      delete_work_func
    - [s390x] pci: fix CPU address in MSI for directed IRQ
    - [arm64,armhf] i2c: imx: Fix reset of I2SR_IAL flag
    - [arm64,armhf] i2c: imx: Check for I2SR_IAL after every byte
    - [arm64,armhf] i2c: imx: Don't generate STOP condition if arbitration has
      been lost
    - tracing: Fix userstacktrace option for instances
    - [x86] thunderbolt: Fix use-after-free in remove_unplugged_switch()
    - [armhf] drm/omap: sdi: fix bridge enable/disable
    - drm/amdgpu/vcn3.0: stall DPG when WPTR/RPTR reset
    - drm/amdgpu/vcn3.0: remove old DPG workaround
    - [x86] drm/i915/gt: Retain default context state across shrinking
    - [x86] drm/i915/gt: Limit frequency drop to RPe on parking
    - [x86] drm/i915/gt: Program mocs:63 for cache eviction on gen9
    - [powerpc*] KVM: PPC: Book3S HV: XIVE: Fix vCPU id sanity check
    - scsi: mpt3sas: Fix ioctl timeout
    - io_uring: fix recvmsg setup with compat buf-select
    - dm writecache: advance the number of arguments when reporting max_age
    - dm writecache: fix the maximum number of arguments
    - [powerpc*] 64s/powernv: Fix memory corruption when saving SLB entries on
      MCE
    - genirq/irqdomain: Add an irq_create_mapping_affinity() function
    - [powerpc*] pseries: Pass MSI affinity to irq_create_mapping()
    - dm: fix bug with RCU locking in dm_blk_report_zones
    - dm: fix double RCU unlock in dm_dax_zero_page_range() error path
    - dm: remove invalid sparse __acquires and __releases annotations
    - [x86] uprobes: Do not use prefixes.nbytes when looping over
      prefixes.bytes
    - coredump: fix core_pattern parse error
    - mm: list_lru: set shrinker map bit when child nr_items is not zero
    - mm/swapfile: do not sleep with a spin lock held
    - hugetlb_cgroup: fix offline of hugetlb cgroup with reservations
    - Revert "amd/amdgpu: Disable VCN DPG mode for Picasso"
    - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs
    - mm: memcg/slab: fix obj_cgroup_charge() return value handling
    - lib/syscall: fix syscall registers retrieval on 32-bit platforms
      (CVE-2020-28588)
    - can: af_can: can_rx_unregister(): remove WARN() statement from list
      operation sanity check
    - gfs2: check for empty rgrp tree in gfs2_ri_update
    - netfilter: ipset: prevent uninit-value in hash_ip6_add
    - tipc: fix a deadlock when flushing scheduled work
    - gfs2: Fix deadlock dumping resource group glocks
    - gfs2: Don't freeze the file system during unmount
    - rtw88: debug: Fix uninitialized memory in debugfs code
    - [arm64] i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc()
    - dm writecache: remove BUG() and fail gracefully instead
    - Input: i8042 - fix error return code in i8042_setup_aux()
    - netfilter: nf_tables: avoid false-postive lockdep splat
    - netfilter: nftables_offload: set address type in control dissector
    - netfilter: nftables_offload: build mask based from the matching bytes
    - [x86] insn-eval: Use new for_each_insn_prefix() macro to loop over
      prefixes bytes
    - Revert "geneve: pull IP header before ECN decapsulation"
    - bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds.
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.15
    - mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING
    - kprobes: Remove NMI context check
    - kprobes: Tell lockdep about kprobe nesting
    - [x86] ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 Detachable quirks
    - net, xsk: Avoid taking multiple skbuff references
    - bpftool: Fix error return value in build_btf_type_table
    - [powerpc*] 64s: Fix hash ISA v3.0 TLBIEL instruction generation
    - batman-adv: Consider fragmentation for needed_headroom
    - batman-adv: Reserve needed_*room for fragments
    - batman-adv: Don't always reallocate the fragmentation skb head
    - ipvs: fix possible memory leak in ip_vs_control_net_init
    - [armhf] drm/panel: sony-acx565akm: Fix race condition in probe
    - can: sja1000: sja1000_err(): don't count arbitration lose as an error
    - [armhf] can: sun4i_can: sun4i_can_err(): don't count arbitration lose as
      an error
    - [armhf] can: c_can: c_can_power_up(): fix error handling
    - [x86] scsi: storvsc: Fix error return in storvsc_probe()
    - iwlwifi: pcie: invert values of NO_160 device config entries
    - [x86] perf/x86/intel: Fix a warning on x86_pmu_stop() with large PEBS
    - [x390x] zlib: export S390 symbols for zlib modules
    - mm/mmap.c: fix mmap return value when vma is merged after call_mmap()
    - [arm64] dts: rockchip: Remove system-power-controller from pmic on
      Odroid Go Advance
    - iwlwifi: pcie: limit memory read spin time
    - iwlwifi: sta: set max HE max A-MPDU according to HE capa
    - iwlwifi: pcie: set LTR to avoid completion timeout
    - iwlwifi: mvm: fix kernel panic in case of assert during CSA
    - [powerpc*] Drop -me200 addition to build flags
    - scsi: ufs: Fix unexpected values from ufshcd_read_desc_param()
    - scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE
    - [arm64,armhf] irqchip/gic-v3-its: Unconditionally save/restore the ITS
      state on suspend
    - [arm64] spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts
    - [arm64,armhf] arm-smmu-qcom: Ensure the qcom_scm driver has finished
      probing
    - btrfs: do nofs allocations when adding and removing qgroup relations
    - btrfs: fix lockdep splat when enabling and disabling qgroups
    - [arm64] soc: fsl: dpio: Get the cpumask through cpumask_of(cpu)
    - sched/idle: Fix arch_cpu_idle() vs tracing
    - [x86] intel_idle: Fix intel_idle() vs tracing
    - [x86] platform/x86: thinkpad_acpi: add P1 gen3 second fan support
    - [x86] platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga
      11e
    - [x86] platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for
      Thinkpad Yoga 11e 4th gen
    - [x86] platform/x86: thinkpad_acpi: Whitelist P15 firmware for dual fan
      control
    - [x86] platform/x86: acer-wmi: add automatic keyboard background light
      toggle key as KEY_LIGHTS_TOGGLE
    - [x86] platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion
      13 x360 PC
    - [s390x] fix irq state tracing
    - [x86] intel_idle: Build fix
    - media: pulse8-cec: fix duplicate free at disconnect or probe error
    - media: pulse8-cec: add support for FW v10 and up
    - xen: add helpers for caching grant mapping pages
    - xen: don't use page->lru for ZONE_DEVICE memory
    - Input: cm109 - do not stomp on control URB
    - Input: i8042 - add Acer laptops to the i8042 reset list
    - pinctrl: amd: remove debounce filter setting in IRQ type setting
    - [arm64] mmc: sdhci-of-arasan: Fix clock registration error for Keem Bay
      SOC
    - mmc: block: Fixup condition for CMD13 polling for RPMB requests
    - [x86] drm/i915/gem: Propagate error from cancelled submit due to context
      closure
    - [x86] drm/i915/display/dp: Compute the correct slice count for VDSC on
      DP
    - [x86] drm/i915/gt: Declare gen9 has 64 mocs entries!
    - [x86] drm/i915/gt: Ignore repeated attempts to suspend request flow
      across reset
    - [x86] drm/i915/gt: Cancel the preemption timeout on responding to it
    - drm/amdgpu: fix sdma instance fw version and feature version init
    - kbuild: avoid static_assert for genksyms
    - proc: use untagged_addr() for pagemap_read addresses
    - mm/hugetlb: clear compound_nr before freeing gigantic pages
    - scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()"
    - [x86] membarrier: Get rid of a dubious optimization
    - [x86] apic/vector: Fix ordering in vector assignment
    - [x86] kprobes: Fix optprobe to detect INT3 padding correctly
.
  [ Salvatore Bonaccorso ]
  * [x86] drm/i915: Update TGL and RKL DMC firmware versions (Closes: #974646)
  * [rt] Refresh "mm/zsmalloc: copy with get_cpu_var() and locking"
  * xen/xenbus: Allow watches discard events before queueing (CVE-2020-29568,
    XSA-349)
  * xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path()
    (CVE-2020-29568, XSA-349)
  * xen/xenbus/xen_bus_type: Support will_handle watch callback
    (CVE-2020-29568, XSA-349)
  * xen/xenbus: Count pending messages for each watch (CVE-2020-29568,
    XSA-349)
  * xenbus/xenbus_backend: Disallow pending watch messages (CVE-2020-29568,
    XSA-349)
  * xen-blkback: set ring->xenblkd to NULL after kthread_stop()
    (CVE-2020-29569, XSA-350)
  * Bump ABI to 5
.
linux (5.9.11-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.10
    - [powerpc*] 64s: flush L1D on kernel entry (CVE-2020-4788)
    - [powerpc*] 64s: flush L1D after user accesses (CVE-2020-4788)
    - [powerpc*] Only include kup-radix.h for 64-bit Book3S
    - Input: sunkbd - avoid use-after-free in teardown paths (CVE-2020-25669)
    - mac80211: always wind down STA state
    - can: proc: can_remove_proc(): silence remove_proc_entry warning
    - [powerpc*] smp: Call rcu_cpu_starting() earlier
    - [x86] perf/x86/intel/uncore: Fix Add BW copypasta
    - [x86] KVM: clflushopt should be treated as a no-op by emulation
    - [arm64,x86] ACPI: GED: fix -Wformat
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.11
    - ah6: fix error return code in ah6_input()
    - atm: nicstar: Unmap DMA on send error
    - bnxt_en: read EEPROM A2h address using page 0
    - devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill()
    - [arm64] enetc: Workaround for MDIO register access issue
    - Exempt multicast addresses from five-second neighbor lifetime
    - inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill()
    - ipv6: Fix error path to cancel the meseage
    - lan743x: fix issue causing intermittent kernel log warnings
    - lan743x: prevent entire kernel HANG on open, for some platforms
    - net: b44: fix error return code in b44_init_one()
    - net: bridge: add missing counters to ndo_get_stats64 callback
    - [arm64,armhf] net: dsa: mv88e6xxx: Avoid VTU corruption on 6097
    - [armhf] net: ethernet: ti: cpsw: fix cpts irq after suspend
    - [armhf] net: ethernet: ti: cpsw: fix error return code in cpsw_probe()
    - [armhf] net: ftgmac100: Fix crash when removing driver
    - net: Have netpoll bring-up DSA management interface
    - netlabel: fix our progress tracking in netlbl_unlabel_staticlist()
    - netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist()
    - net/mlx4_core: Fix init_hca fields offset
    - [armhf] net/ncsi: Fix netlink registration
    - net: phy: mscc: remove non-MACSec compatible phy
    - net/smc: fix direct access to ib_gid_addr->ndev in
      smc_ib_determine_gid()
    - [arm64,armhf] net: stmmac: Use rtnl_lock/unlock on
      netif_set_real_num_rx_queues() call
    - page_frag: Recover from memory pressure
    - qed: fix error return code in qed_iwarp_ll2_start()
    - qed: fix ILT configuration of SRC block
    - qlcnic: fix error return code in qlcnic_83xx_restart_hw()
    - sctp: change to hold/put transport for proto_unreach_timer
    - tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate
    - vsock: forward all packets to the host when no H2G is registered
    - net/mlx5e: Fix check if netdev is bond slave
    - net/mlx5: Add handling of port type in rule deletion
    - net/mlx5: Clear bw_share upon VF disable
    - net/mlx5: Disable QoS when min_rates on all VFs are zero
    - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
    - [armhf] net: fec: Fix reference count leak in fec series ops
    - bnxt_en: Fix counter overflow logic.
    - bnxt_en: Free port stats during firmware reset.
    - [arm64,armhf] net: mvneta: fix possible memory leak in
      mvneta_swbm_add_rx_fragment
    - net: usb: qmi_wwan: Set DTR quirk for MR400
    - [armhf] Revert "Revert "gpio: omap: Fix lost edge wake-up interrupts""
    - tools, bpftool: Avoid array index warnings.
    - [arm64,armhf] pinctrl: rockchip: enable gpio pclk for
      rockchip_gpio_to_irq
    - scsi: ufs: Fix unbalanced scsi_block_reqs_cnt caused by ufshcd_hold()
    - scsi: ufs: Try to save power mode change and UIC cmd completion timeout
    - [armhf] pinctrl: mcp23s08: Print error message when regmap init fails
    - [x86] ACPI: button: Add DMI quirk for Medion Akoya E2228T
    - [arm64] errata: Fix handling of 1418040 with late CPU onlining
    - [arm64] psci: Avoid printing in cpu_psci_cpu_die()
    - [arm64] smp: Tell RCU about CPUs that fail to come online
    - vfs: remove lockdep bogosity in __sb_start_write
    - gfs2: fix possible reference leak in gfs2_check_blk_type
    - [arm64,armhf] hwmon: (pwm-fan) Fix RPM calculation
    - gfs2: Fix case in which ail writes are done to jdata holes
    - [arm64] Add MIDR value for KRYO2XX gold/silver CPU cores
    - [arm64] kpti: Add KRYO2XX gold/silver CPU cores to kpti safelist
    - [arm64] cpu_errata: Apply Erratum 845719 to KRYO2XX Silver
    - [arm64,armhf] usb: dwc2: Avoid leaving the error_debugfs label unused
    - [arm64] dts: allwinner: beelink-gs1: Enable both RGMII RX/TX delay
    - [arm64] dts: allwinner: Pine H64: Enable both RGMII RX/TX delay
    - [arm64] dts: allwinner: a64: OrangePi Win: Fix ethernet node
    - [arm64] dts: allwinner: a64: Pine64 Plus: Fix ethernet node
    - [arm64] dts: allwinner: h5: OrangePi PC2: Fix ethernet node
    - [armhf] dts: sun8i: r40: bananapi-m2-ultra: Fix ethernet node
    - [armhf] Revert "arm: sun8i: orangepi-pc-plus: Set EMAC activity LEDs to
      active high"
    - [armhf] dts: sun6i: a31-hummingbird: Enable RGMII RX/TX delay on
      Ethernet PHY
    - [armhf] dts: sun7i: cubietruck: Enable RGMII RX/TX delay on Ethernet PHY
    - [armhf] dts: sun7i: bananapi-m1-plus: Enable RGMII RX/TX delay on
      Ethernet PHY
    - [armhf] dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on
      Ethernet PHY
    - [armhf] dts: sun9i: Enable both RGMII RX/TX delay on Ethernet PHY
    - [arm64] dts: allwinner: h5: libretech-all-h5-cc: Enable RGMII RX/TX
      delay on PHY
    - [arm64] dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on
      PHY
    - [mips64el,mipsel] export has_transparent_hugepage() for modules
    - [arm64] dts: allwinner: h5: OrangePi Prime: Fix ethernet node
    - [armhf] dts: imx6q-prti6q: fix PHY address
    - swiotlb: using SIZE_MAX needs limits.h included
    - [armhf] dmaengine: ti: omap-dma: Block PM if SDMA is busy to fix audio
    - rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
    - spi: fix client driver breakages when using GPIO descriptors
    - Input: elan_i2c - fix firmware update on newer ICs
    - rfkill: Fix use-after-free in rfkill_resume()
    - perf lock: Correct field name "flags"
    - perf lock: Don't free "lock_seq_stat" if read_count isn't zero
    - SUNRPC: Fix oops in the rpc_xdr_buf event class
    - [arm64,armhf] drm: bridge: dw-hdmi: Avoid resetting force in the detect
      function
    - tools, bpftool: Add missing close before bpftool net attach exit
    - [amd64] IB/hfi1: Fix error return code in hfi1_init_dd()
    - ip_tunnels: Set tunnel option flag when tunnel metadata is present
    - can: af_can: prevent potential access of uninitialized member in
      can_rcv()
    - can: af_can: prevent potential access of uninitialized member in
      canfd_rcv()
    - can: dev: can_restart(): post buffer from the right context
    - can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to
      can_put_echo_skb()
    - can: peak_usb: fix potential integer overflow on shift of a int
    - [armhf] can: flexcan: fix failure handling of pm_runtime_get_sync()
    - [arm64] ASoC: qcom: lpass-platform: Fix memory leak
    - [arm64,armhf] drm/sun4i: dw-hdmi: fix error return code in
      sun8i_dw_hdmi_bind()
    - net/mlx5: E-Switch, Fail mlx5_esw_modify_vport_rate if qos disabled
    - bpf, sockmap: Fix partial copy_page_to_iter so progress can still be
      made
    - bpf, sockmap: Ensure SO_RCVBUF memory is observed on ingress redirect
    - can: kvaser_usb: kvaser_usb_hydra: Fix KCAN bittiming limits
    - dmaengine: fix error codes in channel_register()
    - [amd64] iommu/vt-d: Move intel_iommu_gfx_mapped to Intel IOMMU header
    - [amd64] iommu/vt-d: Avoid panic if iommu init fails in tboot system
    - [armhf] can: flexcan: flexcan_chip_start(): fix erroneous
      flexcan_transceiver_enable() during bus-off recovery
    - xfs: ensure inobt record walks always make forward progress
    - xfs: return corresponding errcode if xfs_initialize_perag() fail
    - [x86] ASOC: Intel: kbl_rt5663_rt5514_max98927: Do not try to disable
      disabled clock
    - [armhf] regulator: ti-abb: Fix array out of bound read access on the
      first transition
    - lib/strncpy_from_user.c: Mask out bytes after NUL terminator.
    - xfs: revert "xfs: fix rmap key and record comparison functions"
    - bpf, sockmap: Skb verdict SK_PASS to self already checked rmem limits
    - bpf, sockmap: On receive programs try to fast track SK_PASS ingress
    - bpf, sockmap: Use truesize with sk_rmem_schedule()
    - bpf, sockmap: Avoid returning unneeded EAGAIN when redirecting to self
    - [armhf] efi/arm: set HSCTLR Thumb2 bit correctly for HVC calls from HYP
    - [amd64] efi/x86: Free efi_pgd with free_pages()
    - sched/fair: Fix overutilized update in enqueue_task_fair()
    - sched: Fix data-race in wakeup
    - sched: Fix rq->nr_iowait ordering
    - libfs: fix error cast of negative value in simple_attr_write()
    - afs: Fix speculative status fetch going out of order wrt to
      modifications
    - HID: logitech-hidpp: Add PID for MX Anywhere 2
    - HID: logitech-dj: Handle quad/bluetooth keyboards with a builtin
      trackpad
    - HID: logitech-dj: Fix Dinovo Mini when paired with a MX5x00 receiver
    - speakup: Do not let the line discipline be used several times
      (CVE-2020-28941)
    - ALSA: firewire: Clean up a locking issue in copy_resp_to_buf()
    - ALSA: usb-audio: Add delay quirk for all Logitech USB devices
    - ALSA: ctl: fix error path at adding user-defined element set
    - ALSA: mixart: Fix mutex deadlock
    - ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button
    - ALSA: hda/realtek - Add supported mute Led for HP
    - ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220)
    - ALSA: hda/realtek - HP Headset Mic can't detect after boot
    - [armhf] tty: serial: imx: fix potential deadlock
    - [armhf] tty: serial: imx: keep console clocks always on
    - HID: logitech-dj: Fix an error in mse_bluetooth_descriptor
    - [arm64,armhf,x86] efivarfs: fix memory leak in efivarfs_create()
    - [arm64,x86] staging: rtl8723bs: Add 024c:0627 to the list of SDIO
      device-ids
    - xfs: fix forkoff miscalculation related to XFS_LITINO(mp)
    - [arm64,x86] ACPI: fan: Initialize performance state sysfs attribute
    - [x86] iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type
      enum
    - [x86] iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for
      setting tablet-mode
    - [arm64] iio: cros_ec: Use default frequencies when EC returns invalid
      information
    - spi: Introduce device-managed SPI controller allocation
    - [arm64,armhf] spi: bcm2835aux: Fix use-after-free on unbind
    - [armhf] regulator: pfuze100: limit pfuze-support-disable-sw to
      pfuze{100,200}
    - regulator: fix memory leak with repeated set_machine_constraints()
    - regulator: avoid resolve_supply() infinite recursion
    - regulator: workaround self-referent regulators
    - gfs2: Fix regression in freeze_go_sync
    - mac80211: minstrel: remove deferred sampling code
    - mac80211: minstrel: fix tx status processing corner case
    - mac80211: free sta in sta_info_insert_finish() on errors
    - [s390x] fix system call exit path
    - [s390x] cpum_sf.c: fix file permission for cpum_sfb_size
    - [s390x] dasd: fix null pointer dereference for ERP requests
    - [x86] Drivers: hv: vmbus: Allow cleanup of VMBUS_CONNECT_CPU if
      disconnected
    - [x86] drm/i915: Handle max_bpc==16
    - [x86] drm/i915/tgl: Fix Media power gate sequence.
    - io_uring: don't double complete failed reissue request
    - mmc: sdhci-pci: Prefer SDR25 timing for High Speed mode for BYT-based
      Intel controllers
    - [arm64] mmc: sdhci-of-arasan: Allow configuring zero tap values
    - [arm64] mmc: sdhci-of-arasan: Use Mask writes for Tap delays
    - [arm64] mmc: sdhci-of-arasan: Issue DLL reset explicitly
    - blk-cgroup: fix a hd_struct leak in blkcg_fill_root_iostats
    - ptrace: Set PF_SUPERPRIV when checking capability
    - seccomp: Set PF_SUPERPRIV when checking capability
    - fanotify: fix logic of reporting name info with watched parent
    - [x86] microcode/intel: Check patch signature before saving microcode for
      early loading
    - mm: never attempt async page lock if we've transferred data already
    - mm: fix readahead_page_batch for retry entries
    - mm: memcg/slab: fix root memcg vmstats
    - mm/userfaultfd: do not access vma->vm_mm after calling
      handle_userfault()
.
  [ Ben Hutchings ]
  * [arm64][rt] Disable KVM, which currently conflicts with PREEMPT_RT
.
  [ Yves-Alexis Perez ]
  * usbnet: ipheth: fix connectivity with iOS 14
.
  [ Salvatore Bonaccorso ]
  * Bump ABI to 4
.
  [ Julien Cristau ]
  * Disable NOUVEAU_LEGACY_CTX_SUPPORT, which was keeping DRM_LEGACY enabled
    for no good reason (closes: #975038)
.
linux (5.9.9-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7
    - net: core: use list_del_init() instead of list_del() in
      netdev_run_todo()
    - tipc: fix use-after-free in tipc_bcast_get_mode
    - [x86] drm/i915/gem: Avoid implicit vmap for highmem on x86-32
    - [x86] drm/i915/gem: Prevent using pgprot_writecombine() if PAT is not
      supported
    - [x86] drm/i915/gem: Always test execution status on closing the context
    - [x86] drm/i915/gt: Always send a pulse down the engine after disabling
      heartbeat
    - [x86] drm/i915: Break up error capture compression loops with
      cond_resched()
    - [x86] drm/i915: Cancel outstanding work after disabling heartbeats on an
      engine
    - [x86] drm/i915: Avoid mixing integer types during batch copies
    - [x86] drm/i915: Fix TGL DKL PHY DP vswing handling
    - [x86] drm/i915/gt: Initialize reserved and unspecified MOCS indices
    - [x86] drm/i915/gt: Undo forced context restores after trivial
      preemptions
    - [x86] drm/i915/gt: Delay execlist processing for tgl
    - [x86] drm/i915: Drop runtime-pm assert from vgpu io accessors
    - [x86] drm/i915: Exclude low pages (128KiB) of stolen from use
    - [x86] drm/i915: Mark ininitial fb obj as WT on eLLC machines to avoid
      rcu lockup during fbdev init
    - [x86] drm/i915: Use the active reference on the vma while capturing
    - [x86] drm/i915: Reject 90/270 degree rotated initial fbs
    - [x86] drm/i915: Restore ILK-M RPS support
    - drm/nouveau/kms/nv50-: Program notifier offset before requesting disp
      caps
    - drm/nouveau/device: fix changing endianess code to work on older GPUs
    - ptrace: fix task_join_group_stop() for the case when current is traced
    - [arm64,riscv64] cadence: force nonlinear buffers to be cloned
    - ip_tunnel: fix over-mtu packet send fail without TUNNEL_DONT_FRAGMENT
      flags
    - [armhf] net: ethernet: ti: cpsw: disable PTPv1 hw timestamping
      advertisement
    - net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition
    - sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms
    - [arm64,armhf,riscv64] sfp: Fix error handing in sfp_probe()
    - ip6_tunnel: set inner ipproto before ip6_tnl_encap
    - [armhf] net: fec: fix MDIO probing for some FEC hardware blocks
    - net: openvswitch: silence suspicious RCU usage warning
    - r8169: work around short packet hw bug on RTL8125
    - drm/nouveau/kms/nv50-: Get rid of bogus nouveau_conn_mode_valid()
    - drm/nouveau/kms/nv50-: Fix clock checking algorithm in
      nv50_dp_mode_valid()
    - Fonts: Replace discarded const qualifier
    - ALSA: hda/realtek - Fixed HP headset Mic can't be detected
    - ALSA: hda/realtek - Enable headphone for ASUS TM420
    - ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
    - ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices
    - ALSA: usb-audio: Add implicit feedback quirk for Qu-16
    - ALSA: usb-audio: Add implicit feedback quirk for MODX
    - hugetlb_cgroup: fix reservation accounting
    - mm: mempolicy: fix potential pte_unmap_unlock pte error
    - kthread_worker: prevent queuing delayed work from timer_fn when it is
      being canceled
    - mm: always have io_remap_pfn_range() set pgprot_decrypted()
    - gfs2: Wake up when sd_glock_disposal becomes zero
    - gfs2: Don't call cancel_delayed_work_sync from within delete work
      function
    - ring-buffer: Fix recursion protection transitions between interrupt
      context
    - drm/amdgpu: update golden setting for sienna_cichlid
    - drm/amdgpu: resolved ASD loading issue on sienna
    - [amd64] iommu/vt-d: Fix kernel NULL pointer dereference in find_domain()
    - mtd: spi-nor: Don't copy self-pointing struct around
    - ftrace: Fix recursion check for NMI test
    - ftrace: Handle tracing when switching between context
    - regulator: defer probe when trying to get voltage from unresolved supply
    - [arm*] spi: bcm2835: fix gpio cs level inversion
    - tracing: Fix out of bounds write in get_trace_buf
    - futex: Handle transient "ownerless" rtmutex state correctly
    - [amd64] x86/lib: Change .weak to SYM_FUNC_START_WEAK for
      arch/x86/lib/mem*_64.S
    - [x86] kexec: Use up-to-dated screen_info copy to fill boot params
    - [x86] hyperv_fb: Update screen_info after removing old framebuffer
    - io_uring: don't miss setting IO_WQ_WORK_CONCURRENT
    - of: Fix reserved-memory overlap detection
    - [arm64,armhf] drm/sun4i: frontend: Rework a bit the phase data
    - [arm64,armhf] drm/sun4i: frontend: Reuse the ch0 phase for RGB formats
    - [arm64,armhf] drm/sun4i: frontend: Fix the scaler phase on A33
    - blk-cgroup: Fix memleak on error path
    - blk-cgroup: Pre-allocate tree node on blkg_conf_prep
    - btrfs: drop the path before adding qgroup items when enabling qgroups
    - btrfs: add a helper to read the tree_root commit root for backref lookup
    - scsi: core: Don't start concurrent async scan on same host
    - drm/amdgpu: disable DCN and VCN for navi10 blockchain SKU(v3)
    - drm/amdgpu: add DID for navi10 blockchain SKU
    - [powerpc*] scsi: ibmvscsi: Fix potential race after loss of transport
    - vsock: use ns_capable_noaudit() on socket create
    - nvme-rdma: handle unexpected nvme completion data length
    - nvmet: fix a NULL pointer dereference when tracing the flush command
    - [arm*] staging: mmal-vchiq: Fix memory leak for vchiq_instance
    - [arm*] drm/vc4: drv: Add error handding for bind
    - [amd64,arm64] ACPI: NFIT: Fix comparison to '-ENXIO'
    - drm/nouveau/gem: fix "refcount_t: underflow; use-after-free"
    - [arm64] smp: Move rcu_cpu_starting() earlier
    - vt: Disable KD_FONT_OP_COPY
    - tty: fix crash in release_tty if tty->port is not set
    - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent
    - entry: Fix the incorrect ordering of lockdep and RCU check
    - [s390x] pci: fix hot-plug of PCI function missing bus
    - [s390x] mm: make pmd/pud_deref() large page aware
    - [s390x] pkey: fix paes selftest failure with paes and pkey static build
    - USB: serial: cyberjack: fix write-URB completion race
    - USB: serial: option: add Quectel EC200T module support
    - USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231
    - USB: serial: option: add Telit FN980 composition 0x1055
    - [arm64,armhf] usb: dwc3: ep0: Fix delay status handling
    - USB: Add NO_LPM quirk for Kingston flash drive
    - io_uring: fix link lookup racing with link timeout
    - mac80211: fix regression where EAPOL frames were sent in plaintext
    - [arm64,armhf] drm/panfrost: Fix a deadlock between the shrinker and
      madvise path
    - PM: runtime: Drop runtime PM references to supplier on link removal
    - PM: runtime: Drop pm_runtime_clean_up_links()
    - PM: runtime: Resume the device earlier in __device_release_driver()
    - [x86] drm/i915: Fix encoder lookup during PSR atomic check
    - [x86] drm/i915/gt: Use the local HWSP offset during submission
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.8
    - [x86] powercap: restrict energy meter to root access (CVE-2020-8694)
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.9
    - [x86] drm/i915: Hold onto an explicit ref to i915_vma_work.pinned
    - [x86] drm/i915/gem: Flush coherency domains on first set-domain-ioctl
    - mm: memcg: link page counters to root if use_hierarchy is false
    - nbd: don't update block size after device is started
    - [arm64] KVM: Force PTE mapping on fault resulting in a device mapping
    - xfrm: interface: fix the priorities for ipip and ipv6 tunnels
    - [x86] ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup function
    - [x86] hv_balloon: disable warning when floor reached
    - net: xfrm: fix a race condition during allocing spi
    - [riscv64] irqchip/sifive-plic: Fix broken irq_set_affinity() callback
    - mtd: spi-nor: Fix address width on flash chips > 16MB
    - xfs: set xefi_discard when creating a deferred agfl free log intent item
    - mac80211: don't require VHT elements for HE on 2.4 GHz
    - netfilter: nftables: fix netlink report logic in flowtable and genid
    - netfilter: use actual socket sk rather than skb sk when routing harder
    - netfilter: nf_tables: missing validation from the abort path
    - PCI: Always enable ACS even if no ACS Capability
    - netfilter: ipset: Update byte and packet counters regardless of whether
      they match
    - [riscv64] irqchip/sifive-plic: Fix chip_data access within a hierarchy
    - [powerpc*] eeh_cache: Fix a possible debugfs deadlock
    - [arm*] drm/vc4: bo: Add a managed action to cleanup the cache
    - IB/srpt: Fix memory leak in srpt_add_one
    - mm: memcontrol: correct the NR_ANON_THPS counter of hierarchical memcg
    - [arm64,armhf] drm/panfrost: rename error labels in device_init
    - [arm64,armhf] drm/panfrost: move devfreq_init()/fini() in device
    - [arm64,armhf] drm/panfrost: Fix module unload
    - perf trace: Fix segfault when trying to trace events by cgroup
    - perf tools: Add missing swap for ino_generation
    - perf tools: Add missing swap for cgroup events
    - [x86] ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link()
    - [amd64] iommu/vt-d: Fix sid not set issue in intel_svm_bind_gpasid()
    - [amd64] iommu/vt-d: Fix a bug for PDP check in prq_event_thread
    - afs: Fix warning due to unadvanced marshalling pointer
    - afs: Fix incorrect freeing of the ACL passed to the YFS ACL store op
    - vfio/pci: Implement ioeventfd thread handler for contended memory lock
    - can: rx-offload: don't call kfree_skb() from IRQ context
    - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ
      context
    - can: dev: __can_get_echo_skb(): fix real payload length return value for
      RTR frames
    - can: can_create_echo_skb(): fix echo skb generation: always use
      skb_clone()
    - can: j1939: swap addr and pgn in the send example
    - can: j1939: j1939_sk_bind(): return failure if netdev is down
    - can: peak_usb: add range checking in decode operations
    - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
    - can: peak_canfd: pucan_handle_can_rx(): fix echo management when
      loopback is on
    - [armhf] can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
      LS1021A
    - [armhf] can: flexcan: flexcan_remove(): disable wakeup completely
    - xfs: flush new eof page on truncate to avoid post-eof corruption
    - xfs: fix missing CoW blocks writeback conversion retry
    - xfs: fix scrub flagging rtinherit even if there is no rt device
    - io_uring: ensure consistent view of original task ->mm from SQPOLL
    - [arm64] spi: fsl-dspi: fix wrong pointer in suspend/resume
    - [armel,armhf] PCI: mvebu: Fix duplicate resource requests
    - ceph: check session state after bumping session->s_seq
    - [x86] speculation: Allow IBPB to be conditionally enabled on CPUs with
      always-on STIBP
    - USB: apple-mfi-fastcharge: fix reference leak in
      apple_mfi_fc_set_property
    - [arm64,x86] tpm: efi: Don't create binary_bios_measurements file for an
      empty log
    - [arm64] KVM: ARM_SMCCC_ARCH_WORKAROUND_1 doesn't return
      SMCCC_RET_NOT_REQUIRED
    - ath9k_htc: Use appropriate rs_datalen type
    - scsi: ufs: Fix missing brace warning for old compilers
    - [arm64] usb: dwc3: pci: add support for the Intel Alder Lake-S
    - opp: Reduce the size of critical section in _opp_table_kref_release()
    - usb: raw-gadget: fix memory leak in gadget_setup
    - ALSA: hda: Separate runtime and system suspend
    - ALSA: hda: Reinstate runtime_allow() for all hda controllers
    - [amd64] x86/boot/compressed/64: Introduce sev_status
    - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free
    - gfs2: Add missing truncate_inode_pages_final for sd_aspace
    - gfs2: check for live vs. read-only file system in gfs2_fitrim
    - scsi: hpsa: Fix memory leak in hpsa_init_one()
    - drm/amdgpu: perform srbm soft reset always on SDMA resume
    - mac80211: fix use of skb payload instead of header
    - cfg80211: initialize wdev data earlier
    - cfg80211: regulatory: Fix inconsistent format argument
    - tracing: Fix the checking of stackidx in __ftrace_trace_stack
    - Revert "nvme-pci: remove last_sq_tail"
    - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach()
    - scsi: mpt3sas: Fix timeouts observed while reenabling IRQ
    - nvme: introduce nvme_sync_io_queues
    - nvme-rdma: avoid race between time out and tear down
    - nvme-rdma: avoid repeated request completion
    - [amd64] iommu/amd: Increase interrupt remapping table limit to 512
      entries
    - [s390x] smp: move rcu_cpu_starting() earlier
    - vfio/pci: Bypass IGD init in case of -ENODEV
    - amd/amdgpu: Disable VCN DPG mode for Picasso
    - iomap: clean up writeback state logic on writepage error
    - [riscv64] Set text_offset correctly for M-Mode
    - tpm_tis: Disable interrupts on ThinkPad T490s
    - [arm*] spi: bcm2835: remove use of uninitialized gpio flags variable
    - [x86] pinctrl: intel: Fix 2 kOhm bias which is 833 Ohm
    - [x86] pinctrl: intel: Set default bias in case no particular value given
    - [armhf] gpio: aspeed: fix ast2600 bank properties
    - [armel,armhf] 9019/1: kprobes: Avoid fortify_panic() when copying
      optprobe template
    - bpf: Don't rely on GCC __attribute__((optimize)) to disable GCSE
    - libbpf, hashmap: Fix undefined behavior in hash_bits
    - [armhf] pinctrl: mcp23s08: Use full chunk of memory for regmap
      configuration
    - [armhf] pinctrl: aspeed: Fix GPI only function problem.
    - net/mlx5e: Fix modify header actions memory leak
    - net/mlx5e: Protect encap route dev from concurrent release
    - net/mlx5e: Use spin_lock_bh for async_icosq_lock
    - net/mlx5: Fix deletion of duplicate rules
    - net/mlx5: E-switch, Avoid extack error log for disabled vport
    - net/mlx5e: Fix VXLAN synchronization after function reload
    - net/mlx5e: Fix incorrect access of RCU-protected xdp_prog
    - SUNRPC: Fix general protection fault in trace_rpc_xdr_overflow()
    - NFSD: Fix use-after-free warning when doing inter-server copy
    - NFSD: fix missing refcount in nfsd4_copy by nfsd4_do_async_copy
    - tools/bpftool: Fix attaching flow dissector
    - bpf: Zero-fill re-used per-cpu map element
    - r8169: fix potential skb double free in an error path
    - r8169: disable hw csum for short packets on all chip versions
    - [arm64] pinctrl: qcom: Move clearing pending IRQ to
      .irq_request_resources callback
    - nbd: fix a block_device refcount leak in nbd_release
    - i40e: Fix MAC address setting for a VF via Host/VM
    - igc: Fix returning wrong statistics (Closes: #970722)
    - lan743x: correctly handle chips with internal PHY
    - net: phy: realtek: support paged operations on RTL8201CP
    - xfs: fix flags argument to rmap lookup when converting shared file rmaps
    - xfs: set the unwritten bit in rmap lookup flags in
      xchk_bmap_get_rmapextents
    - xfs: fix rmap key and record comparison functions
    - xfs: fix brainos in the refcount scrubber's rmap fragment processor
    - lan743x: fix "BUG: invalid wait context" when setting rx mode
    - xfs: fix a missing unlock on error in xfs_fs_map_blocks
    - of/address: Fix of_node memory leak in of_dma_is_coherent
    - ch_ktls: Update cheksum information
    - ch_ktls: tcb update fails sometimes
    - [i386] cosa: Add missing kfree in error path of cosa_write
    - hwmon: (applesmc) Re-work SMC comms
    - NFS: Fix listxattr receive buffer size
    - vrf: Fix fast path output packet handling with async Netfilter rules
    - lan743x: fix use of uninitialized variable
    - [arm64] mm: Validate hotplug range before creating linear mapping
    - kernel/watchdog: fix watchdog_allowed_mask not used warning
    - mm: memcontrol: fix missing wakeup polling thread
    - afs: Fix afs_write_end() when called with copied == 0 [ver #3]
    - perf: Fix get_recursion_context()
    - nvme: factor out a nvme_configure_metadata helper
    - nvme: freeze the queue over ->lba_shift updates
    - nvme: fix incorrect behavior when BLKROSET is called by the user
    - perf: Simplify group_sched_in()
    - perf: Fix event multiplexing for exclusive groups
    - [arm64] firmware: xilinx: fix out-of-bounds access
    - erofs: fix setting up pcluster for temporary pages
    - erofs: derive atime instead of leaving it empty
    - ext4: correctly report "not supported" for {usr,grp}jquota when
      !CONFIG_QUOTA
    - ext4: unlock xattr_sem properly in ext4_inline_data_truncate()
    - btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch
    - btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod
    - btrfs: fix min reserved size calculation in merge_reloc_root
    - btrfs: dev-replace: fail mount if we don't have replace item with target
      device
    - [arm64] KVM: Don't hide ID registers from userspace
    - [x86] thunderbolt: Fix memory leak if ida_simple_get() fails in
      enumerate_services()
    - [x86] thunderbolt: Add the missed ida_simple_remove() in
      ring_request_msix()
    - block: add a return value to set_capacity_revalidate_and_notify
    - loop: Fix occasional uevent drop
    - uio: Fix use-after-free in uio_unregister_device()
    - Revert "usb: musb: convert to devm_platform_ioremap_resource_byname"
    - usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode
    - [x86] usb: typec: ucsi: Report power supply changes
    - virtio: virtio_console: fix DMA memory allocation for rproc serial
    - futex: Don't enable IRQs unconditionally in put_pi_state()
    - jbd2: fix up sparse warnings in checkpoint code
    - bootconfig: Extend the magic check range to the preceding 3 bytes
    - mm/compaction: count pages and stop correctly during page isolation
    - mm/compaction: stop isolation if too many pages are isolated and we have
      pages to migrate
    - mm/slub: fix panic in slab_alloc_node()
    - mm/vmscan: fix NR_ISOLATED_FILE corruption on 64-bit
    - mm/gup: use unpin_user_pages() in __gup_longterm_locked()
    - Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint"
    - reboot: fix overflow parsing reboot cpu number
    - hugetlbfs: fix anon huge page migration race
    - ocfs2: initialize ip_next_orphan
    - hwmon: (amd_energy) modify the visibility of the counters
      (CVE-2020-12912)
    - selinux: Fix error return code in sel_ib_pkey_sid_slow()
    - io_uring: round-up cq size before comparing with rounded sq size
    - [riscv64] gpio: sifive: Fix SiFive gpio probe
    - gpio: pcie-idio-24: Fix irq mask when masking
    - gpio: pcie-idio-24: Fix IRQ Enable Register value
    - gpio: pcie-idio-24: Enable PEX8311 interrupts
    - [arm64] mmc: sdhci-of-esdhc: Handle pulse width detection erratum for
      more SoCs
    - don't dump the threads that had been already exiting when zapped.
    - [x86] drm/i915: Correctly set SFC capability for video engines
    - [x86] drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[]
    - NFSv4.2: fix failure to unregister shrinker
    - pinctrl: amd: use higher precision for 512 RtcClk
    - pinctrl: amd: fix incorrect way to disable debounce filter
    - swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb"
    - cpufreq: Introduce governor flags
    - cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET
    - cpufreq: Add strict_target to struct cpufreq_policy
    - cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account
    - ethtool: netlink: add missing netdev_features_change() call
    - IPv6: Set SIT tunnel hard_header_len to zero
    - [s390x] net/af_iucv: fix null pointer dereference on shutdown
    - net: udp: fix IP header access and skb lookup on Fast/frag0 UDP GRO
    - net: udp: fix UDP header access on Fast/frag0 UDP GRO
    - net: Update window_clamp if SOCK_RCVBUF is set
    - tipc: fix memory leak in tipc_topsrv_start()
    - devlink: Avoid overwriting port attributes of registered port
    - tunnels: Fix off-by-one in lower MTU bounds for ICMP/ICMPv6 replies
    - [powerpc*] 603: Always fault when _PAGE_ACCESSED is not set
    - null_blk: Fix scheduling in atomic with zoned mode
    - Convert trailing spaces and periods in path components
.
  [ Uwe Kleine-König ]
  * [amd64] Enable SND_SOC_AMD_ACP3x, SND_SOC_AMD_RENOIR and
    SND_SOC_AMD_RENOIR_MACH (Closes: #973252)
  * [arm64] Add device tree for Kobol helios64 from rockchip next branch.
.
  [ John L. Villalovos ]
  * [arm64] NUMA: Kconfig: Increase NODES_SHIFT to 4
.
  [ Salvatore Bonaccorso ]
  * [rt] Refresh "signals: Allow rt tasks to cache one sigqueue struct"
  * [armhf] dts: sun8i: a83t: Enable both RGMII RX/TX delay on Ethernet PHY
    (Closes: #973369)
  * Bump ABI to 3

linux (5.9.6-2parrot1) rolling-testing; urgency=medium
.
  * Import new Debian release.
.
linux (5.9.6-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.2
    - [powerpc*] ibmveth: Switch order of ibmveth_helper calls.
    - [powerpc*] ibmveth: Identify ingress large send packets.
    - cxgb4: handle 4-tuple PEDIT to NAT mode translation
    - ipv4: Restore flowi4_oif update before call to xfrm_lookup_route
    - mlx4: handle non-napi callers to napi_poll
    - net: dsa: microchip: fix race condition
    - net: fec: Fix phy_device lookup for phy_reset_after_clk_enable()
    - net: fec: Fix PHY init after phy_reset_after_clk_enable()
    - net: fix pos incrementment in ipv6_route_seq_next
    - net: ipa: skip suspend/resume activities if not set up
    - net: sched: Fix suspicious RCU usage while accessing tcf_tunnel_info
    - net/smc: fix use-after-free of delayed events
    - net/smc: fix valid DMBE buffer sizes
    - tipc: fix NULL pointer dereference in tipc_named_rcv
    - tipc: fix the skb_unshare() in tipc_buf_append()
    - socket: fix option SO_TIMESTAMPING_NEW
    - socket: don't clear SOCK_TSTAMP_NEW when SO_TIMESTAMPNS is disabled
    - can: m_can_platform: don't call m_can_class_suspend in runtime suspend
    - can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt
    - net: j1939: j1939_session_fresh_new(): fix missing initialization of
      skbcnt
    - binder: fix UAF when releasing todo list (CVE-2020-0423)
    - ALSA: bebob: potential info leak in hwdep_read()
    - ALSA: hda: fix jack detection with Realtek codecs when in D3
    - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close
    - tipc: re-configure queue limit for broadcast link
    - tipc: fix incorrect setting window for bcast link
    - ibmvnic: save changed mac address to adapter->mac_addr
    - icmp: randomize the global rate limiter
    - net: ftgmac100: Fix Aspeed ast2600 TX hang issue
    - net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
    - net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling
      ether_setup
    - net: Properly typecast int values to set sk_max_pacing_rate
    - net/sched: act_ct: Fix adding udp port mangle operation
    - net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels
    - netsec: ignore 'phy-mode' device property on ACPI systems
    - nexthop: Fix performance regression in nexthop deletion
    - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in
      nfc_genl_fw_download()
    - r8169: fix operation under forced interrupt threading
    - tcp: fix to update snd_wl1 in bulk receiver fast path
    - net: ethernet: mtk-star-emac: select REGMAP_MMIO
    - net/sched: act_gate: Unlock ->tcfa_lock in tc_setup_flow_action()
    - ixgbe: fix probing of multi-port devices with one MDIO
    - net: openvswitch: fix to make sure flow_lookup() is not preempted
    - sfc: move initialisation of efx->filter_sem to efx_init_struct()
    - ALSA: hda - Don't register a cb func if it is registered already
    - ALSA: hda - Fix the return value if cb func is already registered
    - ALSA: usb-audio: Line6 Pod Go interface requires static clock rate quirk
    - ALSA: hda/realtek - The front Mic on a HP machine doesn't work
    - ALSA: hda/realtek - set mic to auto detect on a HP AIO machine
    - ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7
    - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
    - cifs: remove bogus debug code
    - cifs: Return the error from crypt_message when enc/dec key not found.
    - SMB3: Resolve data corruption of TCP server info fields
    - SMB3.1.1: Fix ids returned in POSIX query dir
    - smb3: do not try to cache root directory if dir leases not supported
    - smb3: fix stat when special device file and mounted with modefromsid
    - [arm64] Make use of ARCH_WORKAROUND_1 even when KVM is not enabled
    - [x86] KVM: nVMX: Morph notification vector IRQ on nested VM-Enter to
      pending PI
    - [x86] KVM: nVMX: Reset the segment cache when stuffing guest segs
    - [x86] KVM: nVMX: Reload vmcs01 if getting vmcs12's pages fails
    - [x86] KVM: x86/mmu: Commit zap of remaining invalid pages when
      recovering lpages
    - [x86] KVM: x86: Intercept LA57 to inject #GP fault when it's reserved
    - [x86] KVM: SVM: Initialize prev_ga_tag before use
    - crypto: caam - add xts check for block length equal to zero
    - crypto: algif_aead - Do not set MAY_BACKLOG on the async path
    - crypto: caam/qi - add fallback for XTS with more than 8B IV
    - crypto: caam/qi - add support for more XTS key lengths
    - crypto: caam/jr - add fallback for XTS with more than 8B IV
    - crypto: caam/jr - add support for more XTS key lengths
    - crypto: caam/qi2 - add fallback for XTS with more than 8B IV
    - crypto: caam/qi2 - add support for more XTS key lengths
    - RAS/CEC: Fix cec_init() prototype
    - sched/fair: Fix wrong negative conversion in find_energy_efficient_cpu()
    - microblaze: fix kbuild redundant file warning
    - [x86] EDAC/i5100: Fix error handling order in i5100_init_one()
    - [x86] perf/x86/intel/ds: Fix x86_pmu_stop warning for large PEBS
    - [x86] x86/fpu: Allow multiple bits in clearcpuid= parameter
    - irqchip/ti-sci-inta: Fix unsigned comparison to zero
    - irqchip/ti-sci-intr: Fix unsigned comparison to zero
    - [arm64] kprobe: add checks for ARMv8.3-PAuth combined instructions
    - seqlock: Unbreak lockdep
    - drivers/perf: xgene_pmu: Fix uninitialized resource struct
    - drivers/perf: thunderx2_pmu: Fix memory resource error handling
    - sched/fair: Fix wrong cpu selecting from isolated domain
    - sched/fair: Use dst group while checking imbalance for NUMA balancer
    - [arm64] perf: Add missing ISB in armv8pmu_enable_counter()
    - [x86] perf/x86/intel/uncore: Update Ice Lake uncore units
    - [x86] perf/x86/intel/uncore: Reduce the number of CBOX counters
    - [x86] perf/x86/intel/uncore: Fix for iio mapping on Skylake Server
    - [x86] perf/x86/intel/uncore: Fix the scale of the IMC free-running
      events
    - [x86] x86/nmi: Fix nmi_handle() duration miscalculation
    - [amd64] x86/events/amd/iommu: Fix sizeof mismatch
    - [arm64] pinctrl: qcom: Set IRQCHIP_SET_TYPE_MASKED and
      IRQCHIP_MASK_ON_SUSPEND flags
    - [arm64] pinctrl: qcom: Use return value from irq_set_wake() call
    - [x86] perf/x86: Fix n_pair for cancelled txn
    - lockdep: Fix usage_traceoverflow
    - lockdep: Fix lockdep recursion
    - lockdep: Revert "lockdep: Use raw_cpu_*() for per-cpu variables"
    - perf/core: Fix race in the perf_mmap_close() function (CVE-2020-14351)
    - crypto: algif_skcipher - EBUSY on aio should be an error
    - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
    - crypto: picoxcell - Fix potential race condition bug
    - media: vivid: Fix global-out-of-bounds read in precalculate_color()
    - crypto: ccree - fix runtime PM imbalance on error
    - media: hantro: h264: Get the correct fallback reference buffer
    - media: hantro: postproc: Fix motion vector space allocation
    - media: ov5640: Correct Bit Div register in clock tree diagram
    - media: i2c: fix error check on max9286_read call
    - media: m5mols: Check function pointer in m5mols_sensor_power
    - fscrypt: restrict IV_INO_LBLK_32 to ino_bits <= 32
    - media: uvcvideo: Set media controller entity functions
    - media: uvcvideo: Silence shift-out-of-bounds warning
    - media: staging/intel-ipu3: css: Correctly reset some memory
    - media: omap3isp: Fix memleak in isp_probe
    - media: i2c: ov5640: Remain in power down for DVP mode unless streaming
    - media: i2c: ov5640: Separate out mipi configuration from s_power
    - media: i2c: ov5640: Enable data pins on poweron for DVP mode
    - media: i2c: max9286: Allocate v4l2_async_subdev dynamically
    - crypto: sa2ul - fix compiler warning produced by clang
    - spi: fsi: Handle 9 to 15 byte transfers lengths
    - spi: fsi: Fix use of the bneq+ sequencer instruction
    - spi: fsi: Implement restricted size for certain controllers
    - spi: dw-pci: free previously allocated IRQs if desc->setup() fails
    - crypto: sa2ul - Select CRYPTO_AUTHENC
    - crypto: omap-sham - fix digcnt register handling with export/import
    - crypto: sa2ul - Fix pm_runtime_get_sync() error checking
    - regmap: debugfs: Fix more error path regressions
    - hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
    - hwmon: (w83627ehf) Fix a resource leak in probe
    - crypto: stm32/crc32 - Avoid lock if hardware is already used
    - crypto: sun8i-ce - handle endianness of t_common_ctl
    - media: mx2_emmaprp: Fix memleak in emmaprp_probe
    - media: mtk-mdp: Fix Null pointer dereference when calling list_add
    - media: tc358743: initialize variable
    - media: tc358743: cleanup tc358743_cec_isr
    - nvme: fix error handling in nvme_ns_report_zones
    - media: rcar-vin: Fix a reference count leak.
    - media: rockchip/rga: Fix a reference count leak.
    - media: platform: fcp: Fix a reference count leak.
    - media: camss: Fix a reference count leak.
    - media: s5p-mfc: Fix a reference count leak
    - media: stm32-dcmi: Fix a reference count leak
    - media: ti-vpe: Fix a missing check and reference count leak
    - regulator: resolve supply after creating regulator
    - hwmon: (bt1-pvt) Test sensor power supply on probe
    - hwmon: (bt1-pvt) Cache current update timeout
    - hwmon: (bt1-pvt) Wait for the completion with timeout
    - spi: imx: Fix freeing of DMA channels if spi_bitbang_start() fails
    - btrfs: add owner and fs_info to alloc_state io_tree
    - blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue
    - ath10k: provide survey info as accumulated data
    - Bluetooth: hci_uart: Cancel init work before unregistering
    - [arm64,armhf] drm: panel: Fix bus format for OrtusTech COM43H4M85ULC
      panel
    - ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
    - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
    - ath10k: Fix the size used in a 'dma_free_coherent()' call in an error
      handling path
    - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
    - [arm64] ASoC: qcom: lpass-platform: fix memory leak
    - [arm64] ASoC: qcom: lpass-cpu: fix concurrency issue
    - ath11k: Fix possible memleak in ath11k_qmi_init_service
    - brcmfmac: check ndev pointer
    - mwifiex: Do not use GFP_KERNEL in atomic context
    - [arm64] drm/malidp: Use struct drm_gem_object_funcs.get_sg_table
      internally
    - staging: rtl8192u: Do not use GFP_KERNEL in atomic context
    - drm/gma500: fix error check
    - scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
    - scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call
    - scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg()
    - scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba()
    - scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
    - libbpf: Fix unintentional success return code in bpf_object__load
    - wilc1000: Fix memleak in wilc_sdio_probe
    - wilc1000: Fix memleak in wilc_bus_probe
    - rtw88: don't treat NULL pointer as an array
    - backlight: sky81452-backlight: Fix refcount imbalance on error
    - staging: wfx: fix frame reordering
    - staging: emxx_udc: Fix passing of NULL to dma_alloc_coherent()
    - [x86] VMCI: check return value of get_user_pages_fast() for errors
    - mm/error_inject: Fix allow_error_inject function signatures.
    - drm: panel: Fix bpc for OrtusTech COM43H4M85ULC panel
    - Bluetooth: Clear suspend tasks on unregister
    - scsi: ufs: Make ufshcd_print_trs() consider UFSHCD_QUIRK_PRDT_BYTE_GRAN
    - binder: Remove bogus warning on failed same-process transaction
    - drm/amdgpu: fix max_entries calculation v4
    - soundwire: stream: fix NULL/IS_ERR confusion
    - soundwire: intel: fix NULL/ERR_PTR confusion
    - tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()
    - pty: do tty_flip_buffer_push without port->lock in pty_write
    - [x86] pwm: lpss: Fix off by one error in base_unit math in
      pwm_lpss_prepare()
    - [x86] pwm: lpss: Add range limit check for the base_unit register value
    - sfc: don't double-down() filters in ef100_reset()
    - ath11k: fix a double free and a memory leak
    - video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value
      error
    - video: fbdev: sis: fix null ptr dereference
    - video: fbdev: radeon: Fix memleak in radeonfb_pci_register
    - HID: roccat: add bounds checking in kone_sysfs_write_settings()
    - ath11k: fix uninitialized return in ath11k_spectral_process_data()
    - drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check()
    - [arm64,armhf] drm/panfrost: Ensure GPU quirks are always initialised
    - iomap: Clear page error before beginning a write
    - iomap: Mark read blocks uptodate in write_begin
    - Bluetooth: Fix memory leak in read_adv_mon_features()
    - Bluetooth: Re-order clearing suspend tasks
    - [armhf] pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser
    - [armhf] pinctrl: mcp23s08: Fix mcp23x17 precious range
    - pinctrl: devicetree: Keep deferring even on timeout
    - [s390x] bpf: Fix multiple tail calls
    - net/mlx5: Fix uninitialized variable warning
    - net/mlx5: Don't call timecounter cyc2time directly from 1PPS flow
    - scsi: mpt3sas: Fix sync irqs
    - [arm64,armhf] net: stmmac: Fix incorrect location to set
      real_num_rx|tx_queues
    - [arm64,armhf] net: stmmac: use netif_tx_start|stop_all_queues() function
    - xfs: force the log after remapping a synchronous-writes file
    - [arm64] cpufreq: armada-37xx: Add missing MODULE_DEVICE_TABLE
    - ASoC: topology: disable size checks for bytes_ext controls if needed
    - ASoC: tlv320adcx140: Fix digital gain range
    - nvmem: core: fix missing of_node_put() in of_nvmem_device_get()
    - dmaengine: ti: k3-udma-glue: fix channel enable functions
    - Bluetooth: Fix auto-creation of hci_conn at Conn Complete event
    - xhci: don't create endpoint debugfs entry before ring buffer is set.
    - [arm64] drm/msm: Fix the a650 hw_apriv check
    - net: dsa: rtl8366: Check validity of passed VLANs
    - net: dsa: rtl8366: Refactor VLAN/PVID init
    - net: dsa: rtl8366: Skip PVID setting if not requested
    - net: wilc1000: clean up resource in error path of init mon interface
    - ASoC: tlv320aic32x4: Fix bdiv clock rate derivation
    - net: dsa: rtl8366rb: Support all 4096 VLANs
    - ASoC: SOF: control: add size checks for ext_bytes control .put()
    - ASoC: tas2770: Fix unbalanced calls to pm_runtime
    - [armhf] spi: omap2-mcspi: Improve performance waiting for CHSTAT
    - ath11k: Add checked value for ath11k_ahb_remove
    - ath6kl: wmi: prevent a shift wrapping bug in
      ath6kl_wmi_delete_pstream_cmd()
    - drm: rcar-du: Put reference to VSP device
    - phy: rockchip-dphy-rx0: Include linux/delay.h
    - dmaengine: dmatest: Check list for emptiness before access its last
      entry
    - ASoC: cros_ec_codec: fix kconfig dependency warning for
      SND_SOC_CROS_EC_CODEC
    - misc: mic: scif: Fix error handling path
    - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
    - net/mlx5e: IPsec: Use kvfree() for memory allocated with kvzalloc()
    - [arm*] usb: dwc2: Fix parameter type in function pointer prototype
    - [arm64,armhf] usb: dwc3: core: Properly default unspecified speed
    - [arm*] usb: dwc2: Add missing cleanups when usb_add_gadget_udc() fails
    - rtw88: Fix probe error handling race with firmware loading
    - rtw88: Fix potential probe error handling race with wow firmware loading
    - quota: clear padding in v2r1_mem2diskdqb()
    - [arm*] drm/vc4: crtc: Rework a bit the CRTC state code
    - ASoC: fsl_sai: Instantiate snd_soc_dai_driver
    - HID: hid-input: fix stylus battery reporting
    - tty: hvc: fix link error with CONFIG_SERIAL_CORE_CONSOLE=n
    - tty: serial: imx: fix link error with CONFIG_SERIAL_CORE_CONSOLE=n
    - nvmem: core: fix possibly memleak when use
      nvmem_cell_info_to_nvmem_cell()
    - [x86] hv: clocksource: Add notrace attribute to read_hv_sched_clock_*()
      functions
    - nl80211: fix OBSS PD min and max offset validation
    - iomap: Use kzalloc to allocate iomap_page
    - ibmvnic: set up 200GBPS speed
    - bpf: disallow attaching modify_return tracing functions to other BPF
      programs
    - qtnfmac: fix resource leaks on unsupported iftype error return path
    - pinctrl: aspeed: Use the right pinconf mask
    - [arm64] iommu/qcom: add missing put_device() call in
      qcom_iommu_of_xlate()
    - iio: adc: stm32-adc: fix runtime autosuspend delay when slow polling
    - net: enic: Cure the enic api locking trainwreck
    - pinctrl: tigerlake: Fix register offsets for TGL-H variant
    - serial: 8250: Discard RTS/DTS setting from clock update method
    - serial: 8250: Skip uninitialized TTY port baud rate update
    - serial: 8250_dw: Fix clk-notifier/port suspend deadlock
    - mfd: syscon: Don't free allocated name for regmap_config
    - mfd: sm501: Fix leaks in probe()
    - dm: fix missing imposition of queue_limits from dm_wq_work() thread
    - pinctrl: single: fix pinctrl_spec.args_count bounds check
    - pinctrl: single: fix debug output when #pinctrl-cells = 2
    - staging: rtl8712: Fix enqueue_reorder_recvframe()
    - ASoC: wm_adsp: Pass full name to snd_ctl_notify
    - iwlwifi: mvm: split a print to avoid a WARNING in ROC
    - iwlwifi: dbg: remove no filter condition
    - iwlwifi: dbg: run init_cfg function once per driver load
    - usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above.
    - usb: gadget: u_serial: clear suspended flag when disconnecting
    - usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
    - bus: mhi: core: Fix the building of MHI module
    - ocxl: fix kconfig dependency warning for OCXL
    - nl80211: fix non-split wiphy information
    - [arm*] usb: dwc2: Fix INTR OUT transfers in DDMA mode.
    - scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
    - scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs()
    - dmaengine: ioat: Allocate correct size for descriptor chunk
    - staging: qlge: fix build breakage with dumping enabled
    - ipmi_si: Fix wrong return value in try_smi_init()
    - tracing: Fix parse_synth_field() error handling
    - staging: wfx: fix BA sessions for older firmwares
    - [x86] platform/x86: mlx-platform: Remove PSU EEPROM configuration
    - dm: fix request-based DM to not bounce through indirect dm_submit_bio
    - mwifiex: fix double free
    - [arm64,armhf] drm/panfrost: increase readl_relaxed_poll_timeout values
    - drm/amdgpu: Fix invalid number of character '{' in amdgpu_acpi_init
    - ipvs: clear skb->tstamp in forwarding path
    - bpf, sockmap: Remove skb_orphan and let normal skb_kfree do cleanup
    - netfilter: nf_log: missing vlan offload tag and proto
    - mm/swapfile.c: fix potential memory leak in sys_swapon
    - mm: memcg/slab: fix racy access to page->mem_cgroup in
      mem_cgroup_from_obj()
    - mm/memcg: fix device private memcg accounting
    - mm/mmap.c: replace do_brk with do_brk_flags in comment of
      insert_vm_struct()
    - mm/page_alloc.c: fix freeing non-compound pages
    - mm, oom_adj: don't loop through tasks in __set_oom_adj when not
      necessary
    - fs: fix NULL dereference due to data race in prepend_path()
    - tracing: Handle synthetic event array field type checking correctly
    - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo
    - IB/mlx4: Fix starvation in paravirt mux/demux
    - IB/mlx4: Adjust delayed work when a dup is observed
    - [powerpc*] pseries: Fix missing of_node_put() in rng_init()
    - [powerpc*] icp-hv: Fix missing of_node_put() in success path
    - rcu/tree: Force quiescent state on callback overload
    - rcutorture: Properly set rcu_fwds for OOM handling
    - refperf: Avoid null pointer dereference when buf fails to allocate
    - RDMA/ucma: Fix locking for ctx->events_reported
    - RDMA/ucma: Add missing locking around rdma_leave_multicast()
    - mtd: lpddr: fix excessive stack usage with clang
    - RDMA/hns: Add a check for current state before modifying QP
    - RDMA/umem: Fix signature of stub ib_umem_find_best_pgsz()
    - [powerpc*] pseries: explicitly reschedule during drmem_lmb list
      traversal
    - [powerpc*] pseries/drmem: don't cache node id in drmem_lmb struct
    - RDMA/mlx5: Fix potential race between destroy and CQE poll
    - mtd: mtdoops: Don't write panic data twice
    - perf tools: Make GTK2 support opt-in
    - [armel,armhf] 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using
      DT values
    - xfs: fix finobt btree block recovery ordering
    - m68knommu: include SDHC support only when hardware has it
    - xfs: limit entries returned when counting fsmap records
    - xfs: fix deadlock and streamline xfs_getfsmap performance
    - nfs: add missing "posix" local_lock constant table definition
    - xfs: fix high key handling in the rt allocator's query_range function
    - RDMA/rtrs-srv: Incorporate ib_register_client into rtrs server init
    - RDMA/core: Delete function indirection for alloc/free kernel CQ
    - RDMA: Allow fail of destroy CQ
    - RDMA: Change XRCD destroy return value
    - RDMA: Restore ability to return error for destroy WQ
    - RDMA/umem: Fix ib_umem_find_best_pgsz() for mappings that cross a page
      boundary
    - RDMA/umem: Prevent small pages from being returned by
      ib_umem_find_best_pgsz()
    - RDMA/qedr: Fix qp structure memory leak
    - RDMA/qedr: Fix doorbell setting
    - RDMA/qedr: Fix use of uninitialized field
    - RDMA/qedr: Fix return code if accept is called on a destroyed qp
    - RDMA/qedr: Fix inline size returned for iWARP
    - [powerpc*] pseries/svm: Allocate SWIOTLB buffer anywhere in memory
    - [powerpc*] watchpoint: Fix quadword instruction handling on p10
      predecessors
    - [powerpc*] watchpoint: Fix handling of vector instructions
    - [powerpc*] watchpoint: Add hw_len wherever missing
    - [powerpc*] book3s64/hash/4k: Support large linear mapping range with 4K
    - [powerpc*] 64s/radix: Fix mm_cpumask trimming race vs kthread_use_mm
    - [powerpc*] papr_scm: Fix warning triggered by perf_stats_show()
    - RDMA/cma: Combine cma_ndev_work with cma_work
    - RDMA/cma: Remove dead code for kernel rdmacm multicast
    - RDMA/cma: Consolidate the destruction of a cma_multicast in one place
    - RDMA/cma: Fix use after free race in roce multicast join
    - perf intel-pt: Fix "context_switch event has no tid" error
    - perf metricgroup: Fix uncore metric expressions
    - RDMA/qedr: Fix resource leak in qedr_create_qp
    - RDMA/hns: Set the unsupported wr opcode
    - RDMA/mlx5: Use set_mkc_access_pd_addr_fields() in reg_create()
    - RDMA/mlx5: Make mkeys always owned by the kernel's PD when not enabled
    - RDMA/mlx5: Disable IB_DEVICE_MEM_MGT_EXTENSIONS if IB_WR_REG_MR can't
      work
    - i40iw: Add support to make destroy QP synchronous
    - perf stat: Skip duration_time in setup_system_wide
    - RDMA/hns: Add check for the validity of sl configuration
    - RDMA/hns: Solve the overflow of the calc_pg_sz()
    - RDMA/hns: Fix the wrong value of rnr_retry when querying qp
    - RDMA/hns: Fix configuration of ack_req_freq in QPC
    - RDMA/hns: Fix missing sq_sig_type when querying QP
    - RDMA/mlx5: Fix type warning of sizeof in __mlx5_ib_alloc_counters()
    - mtd: hyperbus: hbmc-am654: Fix direct mapping setup flash access
    - overflow: Include header file with SIZE_MAX declaration
    - mtd: parsers: bcm63xx: Do not make it modular
    - RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces
    - [powerpc*] 64: fix irq replay missing preempt
    - [powerpc*] 64: fix irq replay pt_regs->softe value
    - [powerpc*] perf: Exclude pmc5/6 from the irrelevant PMU group
      constraints
    - [powerpc*] perf/hv-gpci: Fix starting index value
    - perf stat: Fix out of bounds CPU map access when handling armv8_pmu
      events
    - i3c: master: Fix error return in cdns_i3c_master_probe()
    - [powerpc*] security: Fix link stack flush instruction
    - [powerpc*] book3s64/radix: Make radix_mem_block_size 64bit
    - [powerpc*] papr_scm: Add PAPR command family to pass-through command-set
    - [powerpc*] cpufreq: powernv: Fix frame-size-overflow in
      powernv_cpufreq_reboot_notifier
    - IB/rdmavt: Fix sizeof mismatch
    - RDMA/rxe: Fix skb lifetime in rxe_rcv_mcast_pkt()
    - f2fs: reject CASEFOLD inode flag without casefold feature
    - um: vector: Use GFP_ATOMIC under spin lock
    - um: time-travel: Fix IRQ handling in time_travel_handle_message()
    - thermal: core: Adding missing nlmsg_free() in
      thermal_genl_sampling_temp()
    - perf trace: Fix off by ones in memset() after realloc() in arches using
      libaudit
    - f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
    - afs: Fix rapid cell addition/removal by not using RCU on cells tree
    - afs: Fix cell refcounting by splitting the usage counter
    - afs: Fix cell purging with aliases
    - afs: Fix cell removal
    - RDMA/rxe: Handle skb_clone() failure in rxe_recv.c
    - mm/page_owner: change split_page_owner to take a count
    - mm/huge_memory: fix split assumption of page size
    - mm: fix a race during THP splitting
    - lib/crc32.c: fix trivial typo in preprocessor condition
    - ramfs: fix nommu mmap with gaps in the page cache
    - rapidio: fix error handling path
    - rapidio: fix the missed put_device() for rio_mport_add_riodev
    - clk: meson: axg-audio: separate axg and g12a regmap tables
    - rtc: ds1307: Clear OSF flag on DS1388 when setting time
    - clk: meson: g12a: mark fclk_div2 as critical
    - PCI: designware-ep: Fix the Header Type check
    - PCI: aardvark: Fix compilation on s390
    - PCI: aardvark: Check for errors from pci_bridge_emul_init() call
    - PCI: iproc: Set affinity mask on MSI interrupts
    - PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY
    - vfio: add a singleton check for vfio_group_pin_pages
    - [s390x] pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY
    - vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn
    - vfio: fix a missed vfio group put in vfio_pin_pages
    - [x86,arm64] vfio/type1: fix dirty bitmap calculation in vfio_dma_rw
    - nfsd: Cache R, RW, and W opens separately
    - [x86] PCI: hv: Fix hibernation in case interrupts are not re-created
    - module: statically initialize init section freeing data
    - clk: at91: clk-main: update key before writing AT91_CKGR_MOR
    - clk: bcm2835: add missing release if devm_clk_hw_register fails
    - kbuild: deb-pkg: do not build linux-headers package if CONFIG_MODULES=n
    - watchdog: Fix memleak in watchdog_cdev_register
    - watchdog: Use put_device on error
    - watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3
    - clk: at91: sam9x60: support only two programmable clocks
    - svcrdma: fix bounce buffers for unaligned offsets and multiple pages
    - ext4: fix dead loop in ext4_mb_new_blocks
    - ext4: discard preallocations before releasing group lock
    - ext4: disallow modifying DAX inode flag if inline_data has been set
    - ext4: limit entries returned when counting fsmap records
    - vfio/pci: Clear token on bypass registration failure
    - [x86,arm64] vfio iommu type1: Fix memory leak in
      vfio_iommu_type1_pin_pages
    - clk: qcom: gdsc: Keep RETAIN_FF bit set if gdsc is already on
    - clk: imx8mq: Fix usdhc parents order
    - SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()
    - NFSv4.2: Fix NFS4ERR_STALE error when doing inter server copy
    - platform/chrome: cros_ec_typec: Send enum values to
      usb_role_switch_set_role()
    - platform/chrome: cros_ec_lightbar: Reduce ligthbar get version command
    - Input: elants_i2c - fix typo for an attribute to show calibration count
    - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
    - Input: stmfts - fix a & vs && typo
    - Input: ep93xx_keypad - fix handling of platform_get_irq() error
    - Input: omap4-keypad - fix handling of platform_get_irq() error
    - Input: twl4030_keypad - fix handling of platform_get_irq() error
    - Input: sun4i-ps2 - fix handling of platform_get_irq() error
    - [x86] KVM: x86: emulating RDPID failure shall return #UD rather than #GP
    - [x86] KVM: nSVM: CR3 MBZ bits are only 63:52
    - scsi: bfa: Fix error return in bfad_pci_init()
    - [arm64] mm: use single quantity to represent the PA to VA translation
    - bpf: Enforce id generation for all may-be-null register type
    - net: dsa: seville: the packet buffer is 2 megabits, not megabytes
    - netfilter: conntrack: connection timeout after re-register
    - netfilter: ebtables: Fixes dropping of small packets in bridge nat
    - vdpa/mlx5: Make use of a specific 16 bit endianness API
    - vdpa/mlx5: Fix failure to bring link up
    - vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK
    - netfilter: nf_fwd_netdev: clear timestamp in forwarding path
    - [arm64] soc: xilinx: Fix error code in zynqmp_pm_probe()
    - [arm64] arm64: dts: meson: vim3: correct led polarity
    - [armhf] dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator
    - [arm64] dts: allwinner: h5: remove Mali GPU PMU module
    - [armhf] memory: omap-gpmc: Fix a couple off by ones
    - [armhf] memory: omap-gpmc: Fix build error without CONFIG_OF
    - [arm64] dts: qcom: msm8992: Fix UART interrupt property
    - [arm64] dts: qcom: sdm845-db845c: Fix hdmi nodes
    - [arm64] dts: qcom: sm8150: fix up primary USB nodes
    - [arm64] dts: qcom: sc7180: Fix the LLCC base register size
    - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
    - firmware: arm_scmi: Fix NULL pointer dereference in mailbox_chan_free
    - [arm64] dts: mt8173-elm: fix supported values for
      regulator-allowed-modes of da9211
    - [arm64] dts: qcom: sm8250: Rename UART2 node to UART12
    - dmaengine: ti: k3-udma-glue: Fix parameters for rx ring pair request
    - [arm64] dts: imx8mq: Add missing interrupts to GPC
    - [arm64] dts: qcom: sc7180: Drop flags on mdss irqs
    - [arm64] dts: sdm845: Fixup OPP table for all qup devices
    - [arm64] dts: qcom: msm8916: Remove one more thermal trip point unit name
    - [arm64] dts: qcom: pm8916: Remove invalid reg size from wcd_codec
    - [arm64] dts: qcom: msm8916: Fix MDP/DSI interrupts
    - [arm64] dts: mt8173: elm: Fix nor_flash node property
    - [arm64] dts: ti: k3-j721e: Rename mux header and update macro names
    - [arm64] dts: actions: limit address range for pinctrl node
    - lightnvm: fix out-of-bounds write to array devices->info[]
    - [powerpc*] powernv/dump: Fix race while processing OPAL dump
    - [powerpc*] 64s: Remove TM from Power10 features
    - [powerpc*] pseries: Avoid using addr_to_pfn in real mode
    - nvmet: fix uninitialized work for zero kato
    - nvmet: limit passthru MTDS by BIO_MAX_PAGES
    - [x86] KVM: ioapic: break infinite recursion on lazy EOI (CVE-2020-27152)
    - NTB: hw: amd: fix an issue about leak system resources
    - sched/features: Fix !CONFIG_JUMP_LABEL case
    - perf: correct SNOOPX field offset
    - random32: make prandom_u32() output unpredictable
    - i2c: core: Restore acpi_walk_dep_device_list() getting called after
      registering the ACPI i2c devs
    - md/bitmap: fix memory leak of temporary bitmap
    - block: ratelimit handle_bad_sector() message
    - [x86] dumpstack: Fix misleading instruction pointer error message
    - crypto: ccp - fix error handling
    - [x86] asm: Replace __force_order with a memory clobber
    - [x86] mce: Add Skylake quirk for patrol scrub reported errors
    - media: firewire: fix memory leak
    - media: ati_remote: sanity check for both endpoints
    - media: st-delta: Fix reference count leak in delta_run_work
    - media: sti: Fix reference count leaks
    - media: exynos4-is: Fix several reference count leaks due to
      pm_runtime_get_sync
    - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
    - media: exynos4-is: Fix a reference count leak
    - media: vsp1: Fix runtime PM imbalance on error
    - media: platform: s3c-camif: Fix runtime PM imbalance on error
    - media: platform: sti: hva: Fix runtime PM imbalance on error
    - media: bdisp: Fix runtime PM imbalance on error
    - media: media/pci: prevent memory leak in bttv_probe
    - [x86] mce: Annotate mce_rd/wrmsrl() with noinstr
    - crypto: hisilicon - fixed memory allocation error
    - spi: fsi: Fix clock running too fast
    - blk-mq: always allow reserved allocation in hctx_may_queue
    - [x86] mce: Make mce_rdmsrl() panic on an inaccessible MSR
    - media: uvcvideo: Ensure all probed info is returned to v4l2
    - mmc: sdio: Check for CISTPL_VERS_1 buffer size
    - media: saa7134: avoid a shift overflow
    - media: atomisp: fix memleak in ia_css_stream_create
    - media: venus: fixes for list corruption
    - notifier: Fix broken error handling pattern
    - fs: dlm: fix configfs memory leak
    - media: venus: core: Fix error handling in probe
    - media: venus: core: Fix runtime PM imbalance in venus_probe
    - ntfs: add check for mft record size in superblock
    - ip_gre: set dev->hard_header_len and dev->needed_headroom properly
    - mac80211: handle lack of sband->bitrates in rates
    - staging: wfx: fix handling of MMIC error
    - libbpf: Close map fd if init map slots failed
    - bpf: Use raw_spin_trylock() for pcpu_freelist_push/pop in NMI
    - PM: hibernate: remove the bogus call to get_gendisk() in
      software_resume()
    - scsi: mvumi: Fix error return in mvumi_io_attach()
    - scsi: target: core: Add CONTROL field for trace events
    - [amd64] mic: vop: copy data to kernel space then write to io memory
    - [amd64] misc: vop: add round_up(x,4) for vring_size to avoid kernel
      panic
    - [arm64,armhf] usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc
    - usb: gadget: function: printer: fix use-after-free in __lock_acquire
    - rtw88: pci: Power cycle device during shutdown
    - udf: Limit sparing table size
    - udf: Avoid accessing uninitialized data on failed inode read
    - rtw88: increse the size of rx buffer size
    - USB: cdc-acm: handle broken union descriptors
    - [arm64,armhf] usb: dwc3: simple: add support for Hikey 970
    - can: flexcan: flexcan_chip_stop(): add error handling and propagate
      error value
    - HID: multitouch: Lenovo X1 Tablet Gen3 trackpoint and buttons
    - ath9k: hif_usb: fix race condition between usb_get_urb() and
      usb_kill_anchored_urbs()
    - [arm64,armhf] drm/panfrost: add Amlogic GPU integration quirks
    - [arm64,armhf] drm/panfrost: add amlogic reset quirk callback
    - [arm64,armhf] drm/panfrost: add support for vendor quirk
    - bpf: Limit caller's stack depth 256 for subprogs with tailcalls
    - dma-direct: Fix potential NULL pointer dereference
    - misc: rtsx: Fix memory leak in rtsx_pci_probe
    - reiserfs: only call unlock_new_inode() if I_NEW
    - opp: Prevent memory leak in dev_pm_opp_attach_genpd()
    - xfs: make sure the rt allocator doesn't run off the end
    - usb: ohci: Default to per-port over-current protection
    - drm: fix double free for gbo in drm_gem_vram_init and
      drm_gem_vram_create
    - Bluetooth: Only mark socket zapped after unlocking
    - drm/msm/a6xx: fix a potential overflow issue
    - drm/xlnx: Use devm_drm_dev_alloc
    - iomap: fix WARN_ON_ONCE() from unprivileged users
    - scsi: ibmvfc: Fix error return in ibmvfc_probe()
    - scsi: qla2xxx: Warn if done() or free() are called on an already freed
      srb
    - soundwire: cadence: fix race condition between suspend and Slave device
      alerts
    - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
    - rtl8xxxu: prevent potential memory leak
    - Fix use after free in get_capset_info callback.
    - HID: ite: Add USB id match for Acer One S1003 keyboard dock
    - scsi: qedf: Return SUCCESS if stale rport is encountered
    - scsi: qedi: Mark all connections for recovery on link down event
    - scsi: qedi: Protect active command list to avoid list corruption
    - scsi: qedi: Fix list_del corruption while removing active I/O
    - fbmem: add margin check to fb_check_caps()
    - tty: ipwireless: fix error handling
    - Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb
    - ipvs: Fix uninit-value in do_ip_vs_set_ctl()
    - reiserfs: Fix memory leak in reiserfs_parse_options()
    - [s390x] qeth: strictly order bridge address events
    - mwifiex: don't call del_timer_sync() on uninitialized timer
    - ALSA: hda/ca0132 - Add AE-7 microphone selection commands.
    - ALSA: hda/ca0132 - Add new quirk ID for SoundBlaster AE-7.
    - [x86] ASoC: SOF: Add topology filename override based on dmi data match
    - [x86] ASoC: Intel: sof_rt5682: override quirk data for
      tgl_max98373_rt5682
    - scsi: smartpqi: Avoid crashing kernel for controller issues
    - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
    - usb: core: Solve race condition in anchor cleanup functions
    - soundwire: intel: reinitialize IP+DSP in .prepare(), but only when
      resuming
    - scsi: ufs: ufs-qcom: Fix race conditions caused by
      ufs_qcom_testbus_config()
    - dmaengine: dw: Add DMA-channels mask cell support
    - dmaengine: dw: Activate FIFO-mode for memory peripherals only
    - drm/hisilicon: Code refactoring for hibmc_drv_de
    - [arm64,armhf] drm/panfrost: perfcnt: fix ref count leak in
      panfrost_perfcnt_enable_locked
    - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
    - [s390x] qeth: don't let HW override the configured port role
    - tty: serial: lpuart: fix lpuart32_write usage
    - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char
    - usb: gadget: bcm63xx_udc: fix up the error of undeclared usb_debug_root
    - usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
    - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
    - usb: cdns3: gadget: free interrupt after gadget has deleted
    - eeprom: at25: set minimum read/write access stride to 1
    - usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets.
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.3
    - cpufreq: Improve code around unlisted freq check
    - netfilter: nftables_offload: KASAN slab-out-of-bounds Read in
      nft_flow_rule_create
    - io_uring: allow timeout/poll/files killing to take task into account
    - io_uring: move dropping of files into separate helper
    - io_uring: stash ctx task reference for SQPOLL
    - io_uring: unconditionally grab req->task
    - io_uring: return cancelation status from poll/timeout/files handlers
    - io_uring: enable task/files specific overflow flushing
    - io_uring: don't rely on weak ->files references
    - io_uring: reference ->nsproxy for file table commands
    - io_wq: Make io_wqe::lock a raw_spinlock_t
    - io-wq: fix use-after-free in io_wq_worker_running
    - io_uring: no need to call xa_destroy() on empty xarray
    - io_uring: Fix use of XArray in __io_uring_files_cancel
    - io_uring: Fix XArray usage in io_uring_add_task_file
    - io_uring: Convert advanced XArray uses to the normal API
    - scripts/setlocalversion: make git describe output more reliable
    - [arm64] efi/arm64: libstub: Deal gracefully with EFI_RNG_PROTOCOL
      failure
    - fs/kernel_read_file: Remove FIRMWARE_EFI_EMBEDDED enum
    - [arm64] Run ARCH_WORKAROUND_1 enabling code on all CPUs
    - [arm64] Run ARCH_WORKAROUND_2 enabling code on all CPUs
    - [arm64] link with -z norelro regardless of CONFIG_RELOCATABLE
    - [x86] PCI: Fix intel_mid_pci.c build error when ACPI is not enabled
    - efivarfs: Replace invalid slashes with exclamation marks in dentries.
    - bnxt_en: Check abort error state in bnxt_open_nic().
    - bnxt_en: Fix regression in workqueue cleanup logic in bnxt_remove_one().
    - bnxt_en: Invoke cancel_delayed_work_sync() for PFs also.
    - bnxt_en: Re-write PCI BARs after PCI fatal error.
    - bnxt_en: Send HWRM_FUNC_RESET fw command unconditionally.
    - cxgb4: set up filter action after rewrites
    - gtp: fix an use-before-init in gtp_newlink()
    - ibmveth: Fix use of ibmveth in a bridge.
    - ibmvnic: fix ibmvnic_set_mac
    - mlxsw: core: Fix memory leak on module removal
    - mlxsw: Only advertise link modes supported by both driver and device
    - netem: fix zero division in tabledist
    - net: hns3: Clear the CMDQ registers before unmapping BAR region
    - net: ipa: command payloads already mapped
    - net/sched: act_mpls: Add softdep on mpls_gso.ko
    - r8169: fix issue with forced threading in combination with shared
      interrupts
    - ravb: Fix bit fields checking in ravb_hwtstamp_get()
    - tcp: Prevent low rmem stalls with SO_RCVLOWAT.
    - tipc: fix memory leak caused by tipc_buf_append()
    - net/smc: fix invalid return code in smcd_new_buf_create()
    - net/smc: fix suppressed return code
    - net: protect tcf_block_unbind with block lock
    - erofs: avoid duplicated permission check for "trusted." xattrs
    - [x86] arch/x86/amd/ibs: Fix re-arming IBS Fetch
    - [x86] traps: Fix #DE Oops message regression
    - [x86] xen: disable Firmware First mode for correctable memory errors
    - PCI: aardvark: Fix initialization with old Marvell's Arm Trusted
      Firmware
    - ata: ahci: mvebu: Make SATA PHY optional for Armada 3720
    - fuse: fix page dereference after free
    - bpf: Fix comment for helper bpf_current_task_under_cgroup()
    - evm: Check size of security.evm before using it
    - p54: avoid accessing the data mapped to streaming DMA
    - cxl: Rework error message for incompatible slots
    - RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel()
    - mtd: lpddr: Fix bad logic in print_drs_error
    - [x86] drm/i915/gem: Serialise debugfs i915_gem_objects with ctx->mutex
    - serial: qcom_geni_serial: To correct QUP Version detection logic
    - serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt
    - PM: runtime: Fix timer_expires data type on 32-bit arches
    - ata: sata_rcar: Fix DMA boundary mask
    - mm: mark async iocb read as NOWAIT once some data has been copied
    - xen/gntdev.c: Mark pages as dirty
    - io_uring: don't reuse linked_timeout
    - misc: rtsx: do not setting OC_POWER_DOWN reg in rtsx_pci_init_ocp()
    - phy: marvell: comphy: Convert internal SMCC firmware return codes to
      errno
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.4
    - [x86,powerpc] Rename memcpy_mcsafe() to copy_mc_to_{user, kernel}()
    - [x86] copy_mc: Introduce copy_mc_enhanced_fast_string()
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.5
    - xen/events: avoid removing an event channel while handling it
      (CVE-2020-27675)
    - xen/events: add a proper barrier to 2-level uevent unmasking
      (CVE-2020-27673)
    - xen/events: fix race in evtchn_fifo_unmask() (CVE-2020-27673)
    - xen/events: add a new "late EOI" evtchn framework (CVE-2020-27673)
    - xen/blkback: use lateeoi irq binding (CVE-2020-27673)
    - xen/netback: use lateeoi irq binding (CVE-2020-27673)
    - xen/scsiback: use lateeoi irq binding (CVE-2020-27673)
    - xen/pvcallsback: use lateeoi irq binding (CVE-2020-27673)
    - xen/pciback: use lateeoi irq binding (CVE-2020-27673)
    - xen/events: switch user event channels to lateeoi model (CVE-2020-27673)
    - xen/events: use a common cpu hotplug hook for event channels
      (CVE-2020-27673)
    - xen/events: defer eoi in case of excessive number of events
      (CVE-2020-27673)
    - xen/events: block rogue events for some time (CVE-2020-27673)
    - [arm64] tee: client UUID: Skip REE kernel login method as well
    - [x86] unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10
      compiled kernels
    - [x86] alternative: Don't call text_poke() in lazy TLB mode
    - RDMA/mlx5: Fix devlink deadlock on net namespace deletion
    - afs: Fix a use after free in afs_xattr_get_acl()
    - afs: Fix afs_launder_page to not clear PG_writeback
    - RDMA/qedr: Fix memory leak in iWARP CM
    - ata: sata_nv: Fix retrieving of active qcs
    - [arm64] efi: increase EFI PE/COFF header padding to 64 KB
    - afs: Fix to take ref on page when PG_private is set
    - afs: Fix page leak on afs_write_begin() failure
    - afs: Fix where page->private is set during write
    - afs: Wrap page->private manipulations in inline functions
    - afs: Alter dirty range encoding in page->private
    - afs: Fix afs_invalidatepage to adjust the dirty region
    - afs: Fix dirty-region encoding on ppc32 with 64K pages
    - lockdep: Fix preemption WARN for spurious IRQ-enable
    - [arm64,armhf] usb: host: ehci-tegra: Fix error handling in
      tegra_ehci_probe()
    - futex: Fix incorrect should_fail_futex() handling
    - [powerpc*] vmemmap: Fix memory leak with vmemmap list allocation
      failures.
    - [powerpc*] powernv/smp: Fix spurious DBG() warning
    - RDMA/core: Change how failing destroy is handled during uobj abort
    - f2fs: allocate proper size memory for zstd decompress
    - mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race
    - [powerpc*] select ARCH_WANT_IRQS_OFF_ACTIVATE_MM
    - [sparc64] remove mm_cpumask clearing to fix kthread_use_mm race
    - f2fs: add trace exit in exception path
    - f2fs: do sanity check on zoned block device path
    - f2fs: fix uninit-value in f2fs_lookup
    - f2fs: fix to check segment boundary during SIT page readahead
    - [s390x] startup: avoid save_area_sync overflow
    - f2fs: compress: fix to disallow enabling compress on non-empty file
    - [s390x] ap/zcrypt: revisit ap and zcrypt error handling
    - f2fs: handle errors of f2fs_get_meta_page_nofail
    - afs: Don't assert on unpurgeable server records
    - [powerpc*] 64s: handle ISA v3.1 local copy-paste context switches
    - [armel,armhf] 8997/2: hw_breakpoint: Handle inexact watchpoint addresses
    - NFS4: Fix oops when copy_file_range is attempted with NFS4.0 source
    - xfs: Set xfs_buf type flag when growing summary/bitmap files
    - xfs: Set xfs_buf's b_ops member when zeroing bitmap/summary files
    - xfs: log new intent items created as part of finishing recovered intent
      items
    - power: supply: bq27xxx: report "not charging" on all types
    - xfs: change the order in which child and parent defer ops are finished
    - xfs: fix realtime bitmap/summary file truncation when growing rt volume
    - io_uring: don't set COMP_LOCKED if won't put
    - ath10k: fix retry packets update in station dump
    - [x86] kaslr: Initialize mem_limit to the real maximum address
    - drm/ast: Separate DRM driver from PCI code
    - drm/amdgpu: restore ras flags when user resets eeprom(v2)
    - ath10k: start recovery process when payload length exceeds max htc
      length for sdio
    - ath10k: fix VHT NSS calculation when STBC is enabled
    - drm/scheduler: Scheduler priority fixes (v2)
    - [x86] ASoC: SOF: fix a runtime pm issue in SOF when HDMI codec doesn't
      work
    - drm/bridge_connector: Set default status connected for eDP connectors
    - media: videodev2.h: RGB BT2020 and HSV are always full range
    - [x86] usb: typec: tcpm: During PR_SWAP, source caps should be sent only
      after tSwapSourceStart
    - mmc: via-sdmmc: Fix data race bug
    - brcmfmac: increase F2 watermark for BCM4329
    - [arm64] topology: Stop using MPIDR for topology information
    - printk: reduce LOG_BUF_SHIFT range for H8300
    - [ia64] kprobes: Use generic kretprobe trampoline handler
    - bpf: Permit map_ptr arithmetic with opcode add and offset 0
    - [arm64,armhf] drm: lima: fix common struct sg_table related issues
    - [arm64,armhf] drm: panfrost: fix common struct sg_table related issues
    - media: uvcvideo: Fix dereference of out-of-bound list iterator
    - selinux: access policycaps with READ_ONCE/WRITE_ONCE
    - samples/bpf: Fix possible deadlock in xdpsock
    - [riscv64] Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
    - cpufreq: sti-cpufreq: add stih418 support
    - USB: adutux: fix debugging
    - mac80211: add missing queue/hash initialization to 802.3 xmit
    - usb: xhci: omit duplicate actions when suspending a runtime suspended
      host.
    - SUNRPC: Mitigate cond_resched() in xprt_transmit()
    - [arm64] mm: return cpu_all_mask when node is NUMA_NO_NODE
    - [armhf] can: flexcan: disable clocks during stop mode
    - xfs: don't free rt blocks when we're doing a REMAP bunmapi call
    - xfs: avoid LR buffer overrun due to crafted h_len
    - ACPI: Add out of bounds and numa_off protections to pxm_to_node()
    - brcmfmac: Fix warning message after dongle setup failed
    - ath11k: Use GFP_ATOMIC instead of GFP_KERNEL in
      ath11k_dp_htt_get_ppdu_desc
    - ath11k: fix warning caused by lockdep_assert_held
    - ath11k: change to disable softirqs for ath11k_regd_update to solve
      deadlock
    - drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values
    - [arm64,armhf] usb: dwc3: core: do not queue work if dr_mode is not
      USB_DR_MODE_OTG
    - [arm64] bus/fsl_mc: Do not rely on caller to provide non NULL mc_io
    - ACPI: HMAT: Fix handling of changes from ACPI 6.2 to ACPI 6.3
    - block: Consider only dispatched requests for inflight statistic
    - btrfs: fix replace of seed device
    - md/bitmap: md_bitmap_get_counter returns wrong blocks
    - f2fs: fix to set SBI_NEED_FSCK flag for inconsistent inode
    - bnxt_en: Log unknown link speed appropriately.
    - [arm64] rpmsg: glink: Use complete_all for open states
    - PCI/ACPI: Add Ampere Altra SOC MCFG quirk
    - [armhf] clk: ti: clockdomain: fix static checker warning
    - nfsd: rename delegation related tracepoints to make them less confusing
    - nfsd4: remove check_conflicting_opens warning
    - net: 9p: initialize sun_server.sun_path to have addr's value only when
      addr is valid
    - ceph: encode inodes' parent/d_name in cap reconnect message
    - jbd2: avoid transaction reuse after reformatting
    - ext4: Detect already used quota file early
    - [ppc64el] KVM: PPC: Book3S HV: Do not allocate HPT for a nested guest
    - scsi: core: Clean up allocation and freeing of sgtables
    - gfs2: call truncate_inode_pages_final for address space glocks
    - gfs2: Fix NULL pointer dereference in gfs2_rgrp_dump
    - gfs2: use-after-free in sysfs deregistration
    - gfs2: add validation checks for size of superblock
    - Handle STATUS_IO_TIMEOUT gracefully
    - cifs: handle -EINTR in cifs_setattr
    - [armhf] memory: emif: Remove bogus debugfs error handling
    - nbd: make the config put is called before the notifying the waiter
    - sgl_alloc_order: fix memory leak
    - nvme-rdma: fix crash when connect rejected
    - vmlinux.lds.h: Add PGO and AutoFDO input sections
    - [mips64el,mipsel] irqchip/loongson-htvec: Fix initial interrupt clearing
    - md: fix the checking of wrong work queue
    - md/raid5: fix oops during stripe resizing
    - mmc: sdhci: Add LTR support for some Intel BYT based controllers
    - mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN
    - mm: memcg/slab: uncharge during kmem_cache_free_bulk()
    - seccomp: Make duplicate listener detection non-racy
    - [x86] perf/x86/intel: Fix Ice Lake event constraint table
    - [x86] perf/x86/amd: Fix sampling Large Increment per Cycle events
    - [x86] perf/amd/uncore: Set all slices and threads to restore perf stat
      -a behaviour
    - [x86] perf/x86/amd/ibs: Don't include randomized bits in
      get_ibs_op_count()
    - [x86] perf/x86/amd/ibs: Fix raw sample data accumulation
    - media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any effect
    - fs: Don't invalidate page buffers in block_write_full_page()
    - ACPI: configfs: Add missing config_item_put() to fix refcount leak
    - NFS: fix nfs_path in case of a rename retry
    - ACPI: button: fix handling lid state changes when input device closed
    - ACPI: video: use ACPI backlight for HP 635 Notebook
    - ACPI: debug: don't allow debugging when ACPI is disabled
    - PCI/ACPI: Whitelist hotplug ports for D3 if power managed by ACPI
    - ACPI: EC: PM: Flush EC work unconditionally after wakeup
    - ACPI: EC: PM: Drop ec_no_wakeup check from acpi_ec_dispatch_gpe()
    - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs
    - io-wq: assign NUMA node locality if appropriate
    - w1: mxc_w1: Fix timeout resolution problem leading to bus error
    - fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum
    - scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
    - scsi: qla2xxx: Fix MPI reset needed message
    - scsi: qla2xxx: Fix reset of MPI firmware
    - scsi: qla2xxx: Fix crash on session cleanup with unload
    - PM: runtime: Remove link state checks in rpm_get/put_supplier()
    - btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode
    - btrfs: improve device scanning messages
    - btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations
    - btrfs: sysfs: init devices outside of the chunk_mutex
    - btrfs: tracepoints: output proper root owner for
      trace_find_free_extent()
    - btrfs: reschedule if necessary when logging directory items
    - btrfs: send, orphanize first all conflicting inodes when processing
      references
    - btrfs: send, recompute reference path after orphanization of a directory
    - btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send()
    - btrfs: tree-checker: fix false alert caused by legacy btrfs root item
    - btrfs: reschedule when cloning lots of extents
    - btrfs: cleanup cow block on error
    - btrfs: skip devices without magic signature when mounting
    - btrfs: tree-checker: validate number of chunk stripes and parity
    - btrfs: fix use-after-free on readahead extent after failure to create it
    - btrfs: fix readahead hang and use-after-free after removing a device
    - btrfs: drop the path before adding block group sysfs files
    - usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC
    - [arm64] usb: dwc3: pci: Allow Elkhart Lake to utilize DSM method for PM
      functionality
    - [arm64,armhf] usb: dwc3: ep0: Fix ZLP for OUT ep0 requests
    - [arm64,armhf] usb: dwc3: gadget: Check MPS of the request length
    - [arm64,armhf] usb: dwc3: gadget: Reclaim extra TRBs after request
      completion
    - [arm64,armhf] usb: dwc3: core: add phy cleanup for probe error handling
    - [arm64,armhf] usb: dwc3: core: don't trigger runtime pm when remove
      driver
    - [arm64,armhf] usb: dwc3: gadget: Resume pending requests after
      CLEAR_STALL
    - [arm64,armhf] usb: dwc3: gadget: END_TRANSFER before CLEAR_STALL command
    - usb: cdc-acm: fix cooldown mechanism
    - [x86] usb: typec: tcpm: reset hard_reset_count for any disconnect
    - usbcore: Check both id_table and match() when both available
    - USB: apple-mfi-fastcharge: don't probe unhandled devices
    - [x86] drm/i915: Force VT'd workarounds when running as a guest OS
    - vt: keyboard, simplify vt_kdgkbsent
    - vt: keyboard, extend func_buf_lock to readers (CVE-2020-25656)
    - vt_ioctl: fix GIO_UNIMAP regression
    - HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery
    - [x86] mce: Allow for copy_mc_fragile symbol checksum to be generated
    - [arm64] tty: serial: fsl_lpuart: LS1021A has a FIFO size of 16 words,
      like LS1028A
    - tracing: Fix race in trace_open and buffer resize call
    - [powerpc*] Fix random segfault when freeing hugetlb range
    - udf: Fix memory leak when mounting
    - rcu-tasks: Fix grace-period/unlock race in RCU Tasks Trace
    - rcu-tasks: Fix low-probability task_struct leak
    - rcu-tasks: Enclose task-list scan in rcu_read_lock()
    - [s390x] stp: add locking to sysfs functions
    - [powerpc*] rtas: Restrict RTAS requests from userspace
    - [powerpc*] Warn about use of smt_snooze_delay
    - [powerpc*] memhotplug: Make lmb size 64bit
    - [powerpc*] powernv/elog: Fix race while processing OPAL error log event.
    - [powerpc*] powermac: Fix low_sleep_handler with KUAP and KUEP
    - [powerpc*] mce: Avoid nmi_enter/exit in real mode on pseries hash
    - [powerpc*] Fix undetected data corruption with P9N DD2.1 VSX CI load
      emulation
    - [powerpc*] 32: Fix vmap stack - Do not activate MMU before reading task
      struct
    - [powerpc*] 32: Fix vmap stack - Properly set r1 before activating MMU
    - block: advance iov_iter on bio_add_hw_page failure
    - io_uring: use type appropriate io_kiocb handler for double poll
    - [armhf] remoteproc: Fixup coredump debugfs disable request
    - gfs2: Make sure we don't miss any delayed withdraws
    - gfs2: Only access gl_delete for iopen glocks
    - NFSv4: Wait for stateid updates after CLOSE/OPEN_DOWNGRADE
    - NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag
    - NFSD: Add missing NFSv2 .pc_func methods
    - ubifs: dent: Fix some potential memory leaks while iterating entries
    - ubifs: xattr: Fix some potential memory leaks while iterating entries
    - ubifs: journal: Make sure to not dirty twice for auth nodes
    - ubifs: Fix a memleak after dumping authentication mount options
    - ubifs: Don't parse authentication mount options in remount process
    - ubifs: mount_ubifs: Release authentication resource in error handling
      path
    - perf vendor events amd: Add L2 Prefetch events for zen1
    - perf python scripting: Fix printable strings in python3 scripts
    - ubi: check kthread_should_stop() after the setting of task state
    - [arm64,armhf] i2c: imx: Fix external abort on interrupt in exit paths
    - drm/amdgpu: don't map BO in reserved region
    - drm/amdgpu: vcn and jpeg ring synchronization
    - drm/amdgpu: update golden setting for sienna_cichlid
    - drm/amdgpu: correct the gpu reset handling for job != NULL case
    - drm/amdgpu: add function to program pbb mode for sienna cichlid
    - drm/amdgpu: increase the reserved VM size to 2MB
    - ceph: promote to unsigned long long before shifting
    - libceph: clear con->out_msg on Policy::stateful_server faults
    - 9P: Cast to loff_t before multiplying
    - net/sunrpc: Fix return value for sysctl sunrpc.transports
    - [arm64] PCI: qcom: Make sure PCIe is reset before init for rev 2.1.0
    - ring-buffer: Return 0 on success from ring_buffer_resize()
    - [x86] intel_idle: Ignore _CST if control cannot be taken from the
      platform
    - [x86] intel_idle: Fix max_cstate for processor models without C-state
      tables
    - cpufreq: Avoid configuring old governors as default with intel_pstate
    - cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag
    - cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode
    - [amd64] vringh: fix __vringh_iov() when riov and wiov are different
    - ext4: fix leaking sysfs kobject after failed mount
    - ext4: fix error handling code in add_new_gdb
    - ext4: implement swap_activate aops using iomap
    - ext4: fix invalid inode checksum
    - ext4: clear buffer verified flag if read meta block from disk
    - ext4: fix bdev write error check failed when mount fs with ro
    - ext4: fix bs < ps issue reported with dioread_nolock mount opt
    - ext4: do not use extent after put_bh
    - drm/ttm: fix eviction valuable range check.
    - [arm64] mmc: sdhci-of-esdhc: make sure delay chain locked for HS400
    - [arm64] mmc: sdhci-of-esdhc: set timeout to max before tuning
    - mmc: sdhci: Use Auto CMD Auto Select only when v4_mode is true
    - [arm64,armhf] memory: tegra: Remove GPU from DRM IOMMU group
    - futex: Adjust absolute futex timeouts with per time namespace offset
    - drm/amd/psp: Fix sysfs: cannot create duplicate filename
    - drm/amdgpu: correct the cu and rb info for sienna cichlid
    - tty: make FONTX ioctl use the tty pointer they were actually passed
      (CVE-2020-25668)
    - cachefiles: Handle readpage error correctly
    - [hppa] hil/parisc: Disable HIL driver when it gets stuck
    - [arm64] Change .weak to SYM_FUNC_START_WEAK_PI for arch/arm64/lib/mem*.S
    - [arm64] dts: marvell: espressobin: Add ethernet switch aliases
    - null_blk: synchronization fix for zoned device
    - device property: Keep secondary firmware node secondary by type
    - device property: Don't clear secondary pointer for shared primary
      firmware node
    - [x86] KVM: Fix NULL dereference at kvm_msr_ignored_check()
    - [arm64] KVM: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR
    - stop_machine, rcu: Mark functions as notrace
    - [x86] staging: comedi: cb_pcidas: Allow 2-channel commands for AO
      subdevice
    - [mips64el,mipsel] staging: octeon: repair "fixed-link" support
    - [mips64el,mipsel] staging: octeon: Drop on uncorrectable alignment or
      FCS error
    - cpufreq: Introduce cpufreq_driver_test_flags()
    - cpufreq: schedutil: Always call driver if CPUFREQ_NEED_UPDATE_LIMITS is
      set
    - time: Prevent undefined behaviour in timespec64_to_ns()
    - time/sched_clock: Mark sched_clock_read_begin/retry() as notrace
    - null_blk: Fix zone reset all tracing
    - null_blk: Fix locking in zoned mode
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.6
    - [x86] ASOC: SOF: Intel: hda-codec: move unused label to correct position
.
  [ Sudip Mukherjee ]
  * Remove libtraceevent. (See: #971976)
.
  [ Vagrant Cascadian ]
  * [arm64] Add i2c_mv64xxx i2c-modules udeb.
  * [arm64] Add drivers/pinctrl to kernel-image udeb.
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.9.1-rt20
  * [rt] Drop "io_wq: Make io_wqe::lock a raw_spinlock_t"
  * [rt] Refresh "kernel/sched: move stack + kprobe clean up to
    __put_task_struct()" for context changes in 5.9.3
  * Bump ABI to 2
  * [x86] media/cec: Enable MEDIA_CEC_SUPPORT; Enable CEC_SECO as module
    (Closes: #972973)
  * [rt] Drop "printk: reduce LOG_BUF_SHIFT range for H8300"
  * [rt] Drop "mm: fix exec activate_mm vs TLB shootdown and lazy tlb
    switching race"
  * [x86] pinctrl: Enable PINCTRL_TIGERLAKE (Closes: #973372)
  * [x86] sound/soc: Enable SND_SOC_SOF_TIGERLAKE_SUPPORT (Closes: #973879)
  * perf/core: Fix a memory leak in perf_event_parse_addr_filter()
.
  [ Ben Hutchings ]
  * [rt] Rebase seqlock patches on top of 5.9.6
.
  [ John Paul Adrian Glaubitz ]
  * [sh4] Update kernel configuration for sh7785lcr flavor
    - Compile CONFIG_HID, CONFIG_USB_HID, CONFIG_INPUT_EVDEV and
      CONFIG_R8169 as modules to reduce kernel image size
    - Disable CONFIG_KEYBOARD_ATKBD, CONFIG_MOUSE_PS2*, CONFIG_SERIO*
      and CONFIG_PARPORT_1284 as the SH-7785LCR board does not support
      PC-style keyboards, serial and parallel ports and mice
.
linux (5.9.1-1) unstable; urgency=medium
.
  * New upstream release: https://kernelnewbies.org/Linux_5.9
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.1
    - Bluetooth: A2MP: Fix not initializing all members (CVE-2020-12352)
    - Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
      (CVE-2020-12351)
    - Bluetooth: MGMT: Fix not checking if BT_HS is enabled
    - media: usbtv: Fix refcounting mixup
    - USB: serial: option: add Cellient MPL200 card
    - USB: serial: option: Add Telit FT980-KS composition
    - [x86] staging: comedi: check validity of wMaxPacketSize of usb endpoints
      found
    - USB: serial: pl2303: add device-id for HP GC device
    - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters
    - vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
    - reiserfs: Initialize inode keys properly
    - reiserfs: Fix oops during mount
    - Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers"
    - [x86] crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA
.
  [ Romain Perier ]
  * [rt] Update to 5.9-rc8-rt12
.
  [ Uwe Kleine-König ]
  * [armhf,arm64] Enable CONFIG_VIDEO_SUNXI_CEDRUS (Closes: #972123)
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.9-rt16
  * [x86]  ACPI / extlog: Check for RDMSR failure (Closes: #971058)
  * Set ABI to 1
.
linux (5.9~rc8-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Ben Hutchings ]
  * linux-doc: Correct index filename in package description
  * [amd64/cloud-amd64] Generalise the description of supported platforms
.
  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.9-rc8-rt11
.
linux (5.9~rc6-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate:
.
  [ Ben Hutchings ]
  * linux-signed-*: Set Uploaders and Standards-Version to match linux
  * [rt] Update to 5.9-rc5-rt7 and re-enable
.
  [ Uwe Kleine-König ]
  * [arm64,generic] Enable configs used on SMARC-sAL28 board and its carriers.
    Patch by Michael Walle.
.
  [ Gianfranco Costamagna ]
  * Provide virtualbox-guest-modules now that the module is inside the kernel
    itself.
.
  [ Salvatore Bonaccorso ]
  * Set ABI to trunk
  * drivers/net/wireless: Enable RTW88_8821CE (Closes: #917941)
.
linux (5.9~rc4-1~exp1) experimental; urgency=medium
.
  * New upstream release candidate
.
  [ Ben Hutchings ]
  * Un-export symbols no longer needed by the Android ashmem and binder drivers
  * aufs: Disable support patchset until it is updated for Linux 5.9
  * Makefile: Do not check for libelf when building OOT module
  * udeb: Move any compression modules to kernel-image; drop compress-modules
  * libtraceevent1: Update symbols list for functions added in 5.9
  * drm/virtio: Revert "drm/virtio: Call the right shmem helpers"
.
linux (5.8.14-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.11
    - dt-bindings: spi: Fix spi-bcm-qspi compatible ordering
    - net: handle the return value of pskb_carve_frag_list() correctly
    - dt-bindings: PCI: intel,lgm-pcie: Fix matching on all snps,dw-pcie
      instances
    - [x86] hv_netvsc: Remove "unlikely" from netvsc_select_queue
    - loop: Set correct device size when using LOOP_CONFIGURE
    - firmware_loader: fix memory leak for paged buffer
    - xprtrdma: Release in-flight MRs on disconnect
    - NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation
      recall
    - [armhf] phy: omap-usb2-phy: disable PHY charger detect
    - scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort
    - scsi: libfc: Fix for double free()
    - scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery
    - scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional
      events
    - [arm64] regulator: pwm: Fix machine constraints application
    - NFS: Zero-stateid SETATTR should first return delegation
    - SUNRPC: stop printk reading past end of string
    - cifs: fix DFS mount with cifsacl/modefromsid
    - nvme-fc: cancel async events before freeing event struct
    - nvme-rdma: cancel async events before freeing event struct
    - block: only call sched requeue_request() for scheduled requests
    - f2fs: fix indefinite loop scanning for free nid
    - f2fs: Return EOF on unaligned end of file DIO read
    - i2c: algo: pca: Reapply i2c bus settings after reset
    - spi: Fix memory leak on splited transfers
    - [mips*] KVM: Change the definition of kvm type
    - [arm64,armhf] clk: rockchip: Fix initialization of mux_pll_src_4plls_p
    - [x86] ASoC: Intel: skl_hda_dsp_generic: Fix NULLptr dereference in
      autosuspend delay
    - [arm64] ASoC: qcom: Set card->owner to avoid warnings
    - ASoC: qcom: common: Fix refcount imbalance on error
    - [powerpc*] book3s64/radix: Fix boot failure with large amount of guest
      memory
    - ASoC: soc-core: add snd_soc_find_dai_with_mutex()
    - [x86] ASoC: Intel: haswell: Fix power transition refactor
    - ASoC: core: Do not cleanup uninitialized dais on soc_pcm_open failure
    - [x86] Drivers: hv: vmbus: hibernation: do not hang forever in
      vmbus_bus_resume()
    - scsi: libsas: Fix error path in sas_notify_lldd_dev_found()
    - [arm64] Allow CPUs unffected by ARM erratum 1418040 to come in late
    - [x86] Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
    - [x86] drm/i915/gem: Reduce context termination list iteration guard to
      RCU
    - fbcon: Fix user font detection test at fbcon_resize().
    - [arm64] bpf: Fix branch offset in JIT
    - [amd64] iommu/amd: Fix potential @entry null deref
    - [amd64] iommu/amd: Restore IRTE.RemapEn bit for
      amd_iommu_activate_guest_mode
    - [riscv64] Add sfence.vma after early page table changes
    - locking/lockdep: Fix "USED" <- "IN-NMI" inversions
    - efi: efibc: check for efivars write capability
    - locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count
    - [x86] unwind/fp: Fix FP unwinding in ret_from_fork
    - [x86] drm/i915/gem: Delay tracking the GEM context until it is
      registered
    - [x86] drm/i915: Filter wake_flags passed to default_wake_function
    - USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin
      notebook
    - USB: UAS: fix disconnect by unplugging a hub
    - usblp: fix race between disconnect() and read()
    - [x86] usb: typec: ucsi: acpi: Increase command completion timeout value
    - [x86] usb: typec: ucsi: Prevent mode overrun
    - [x86] i2c: i801: Fix resume bug
    - Revert "ALSA: hda - Fix silent audio output and corrupted input on MSI
      X570-A PRO"
    - ALSA: hda: fixup headset for ASUS GX502 laptop
    - ALSA: hda/realtek - The Mic on a RedmiBook doesn't work
    - percpu: fix first chunk size calculation for populated bitmap
    - Input: trackpoint - add new trackpoint variant IDs
    - Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists
    - [x86] thunderbolt: Retry DROM read once if parsing fails
    - serial: 8250_pci: Add Realtek 816a and 816b
    - serial: core: fix port-lock initialisation
    - serial: core: fix console port-lock regression
    - ksm: reinstate memcg charge on copied pages
    - kprobes: fix kill kprobe which has been marked as gone
    - mm/thp: fix __split_huge_pmd_locked() for migration PMD
    - [s390x] add 3f program exception handler
    - [s390x] pci: fix leak of DMA tables on hard unplug
    - [s390x] zcrypt: fix kmalloc 256k failure
    - ehci-hcd: Move include to keep CRC stable
    - [arm64] paravirt: Initialize steal time when cpu is online
    - [powerpc*] dma: Fix dma_map_ops::get_required_mask
    - dm/dax: Fix table reference counts
    - mm/memory_hotplug: drain per-cpu pages again during memory offline
    - dm: Call proper helper to determine dax support
    - dax: Fix compilation for CONFIG_DAX && !CONFIG_FS_DAX
    - mm: memcg: fix memcg reclaim soft lockup
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.12
    - act_ife: load meta modules before tcf_idr_check_alloc()
    - bnxt_en: Avoid sending firmware messages when AER error is detected.
    - bnxt_en: Fix NULL ptr dereference crash in bnxt_fw_reset_task()
    - cxgb4: fix memory leak during module unload
    - cxgb4: Fix offset when clearing filter byte counters
    - geneve: add transport ports in route lookup for geneve (CVE-2020-25645)
    - hdlc_ppp: add range checks in ppp_cp_parse_cr() (CVE-2020-25643)
    - [arm64,x86] hinic: bump up the timeout of SET_FUNC_STATE cmd
    - ip: fix tos reflection in ack and reset packets
    - ipv4: Initialize flowi4_multipath_hash in data path
    - ipv4: Update exception handling for multipath routes via same device
    - ipv6: avoid lockdep issue in fib6_del()
    - net: bridge: br_vlan_get_pvid_rcu() should dereference the VLAN group
      under RCU
    - net: DCB: Validate DCB_ATTR_DCB_BUFFER argument
    - net: Fix bridge enslavement failure
    - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC
    - net/mlx5: Fix FTE cleanup
    - net: phy: call phy_disable_interrupts() in phy_attach_direct() instead
    - net: sched: initialize with 0 before setting erspan md->u
    - net: sch_generic: aviod concurrent reset and enqueue op for lockless
      qdisc
    - net: sctp: Fix IPv6 ancestor_size calc in sctp_copy_descendant
    - nfp: use correct define to return NONE fec
    - tipc: Fix memory leak in tipc_group_create_member()
    - tipc: fix shutdown() of connection oriented socket
    - tipc: use skb_unshare() instead in tipc_buf_append()
    - net/mlx5e: Enable adding peer miss rules only if merged eswitch is
      supported
    - bnxt_en: Use memcpy to copy VPD field info.
    - bnxt_en: return proper error codes in bnxt_show_temp
    - bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex.
    - net: phy: Avoid NPD upon phy_detach() when driver is unbound
    - net: phy: Do not warn in phy_stop() on PHY_DOWN
    - net: add __must_check to skb_put_padto()
    - [armhf] net: ethernet: ti: cpsw_new: fix suspend/resume
    - wireguard: noise: take lock when removing handshake entry from table
    - wireguard: peerlookup: take lock before checking hash in replace
      operation
    - net/mlx5e: Fix memory leak of tunnel info when rule under multipath not
      ready
    - [arm64,x86] hinic: fix rewaking txq after netif_tx_disable
    - [x86] hv_netvsc: Fix hibernation for mlx5 VF driver
    - [arm64,armhf] net: dsa: link interfaces with the DSA master to get rid
      of lockdep warnings
    - net: macb: fix for pause frame receive enable bit
    - Revert "netns: don't disable BHs when locking "nsid_lock""
    - net/mlx5e: Use RCU to protect rq->xdp_prog
    - net/mlx5e: Use synchronize_rcu to sync with NAPI
    - net/mlx5e: Fix endianness when calculating pedit mask first bit
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.13
    - device_cgroup: Fix RCU list debugging warning
    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
    - [riscv64] Take text_mutex in ftrace_init_nop()
    - [armhf] i2c: aspeed: Mask IRQ status to relevant bits
    - [s390x] init: add missing __init annotations
    - lockdep: fix order in trace_hardirqs_off_caller()
    - i2c: core: Call i2c_acpi_install_space_handler() before
      i2c_acpi_register_devices()
    - objtool: Fix noreturn detection for ignored functions
    - mwifiex: Increase AES key storage size to 256 bits
    - batman-adv: bla: fix type misuse for backbone_gw hash indexing
    - libbpf: Fix build failure from uninitialized variable warning
    - atm: eni: fix the missed pci_disable_device() for eni_init_one()
    - batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
    - netfilter: ctnetlink: add a range check for l3/l4 protonum
      (CVE-2020-25211)
    - netfilter: ctnetlink: fix mark based dump filtering regression
    - netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
    - netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid
    - mac802154: tx: fix use-after-free
    - bpf: Fix clobbering of r2 in bpf_gen_ld_abs
    - tools/libbpf: Avoid counting local symbols in ABI check
    - [arm*] drm/vc4/vc4_hdmi: fill ASoC card owner
    - net: qed: Disable aRFS for NPAR and 100G
    - net: qede: Disable aRFS for NPAR and 100G
    - net: qed: RDMA personality shouldn't fail VF load
    - igc: Fix wrong timestamp latency numbers
    - igc: Fix not considering the TX delay for timestamps
    - [x86] hv_netvsc: Switch the data path at the right time during
      hibernation
    - RDMA/core: Fix ordering of CQ pool destruction
    - batman-adv: Add missing include for in_interrupt()
    - xsk: Fix number of pinned pages/umem size discrepancy
    - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
    - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
    - batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
    - bpf: Fix a rcu warning for bpffs map pretty-print
    - mac80211: do not disable HE if HT is missing on 2.4 GHz
    - cfg80211: fix 6 GHz channel conversion
    - mac80211: fix 80 MHz association to 160/80+80 AP on 6 GHz
    - [x86] ALSA: asihpi: fix iounmap in error handler
    - io_uring: fix openat/openat2 unified prep handling
    - SUNRPC: Fix svc_flush_dcache()
    - regmap: fix page selection for noinc reads
    - regmap: fix page selection for noinc writes
    - net/mlx5e: mlx5e_fec_in_caps() returns a boolean
    - [mips64el,mipsel] Loongson-3: Fix fp register access if MSA enabled
    - [armhf] PM / devfreq: tegra30: Disable clock on error in probe
    - [arm64,armhf] regulator: axp20x: fix LDO2/4 description
    - [x86] KVM: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
    - [x86] KVM: SVM: Add a dedicated INVD intercept routine
    - mm: validate pmd after splitting
    - [x86] arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache
      writeback
    - [x86] irq: Make run_on_irqstack_cond() typesafe
    - [x86] ioapic: Unbreak check_timer()
    - scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported
    - ALSA: usb-audio: Add delay quirk for H570e USB headsets
    - ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
    - ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation
      P520
    - lib/string.c: implement stpcpy
    - tracing: fix double free
    - [s390x] dasd: Fix zero write for FBA devices
    - kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
    - kprobes: tracing/kprobes: Fix to kill kprobes on initmem after boot
    - btrfs: fix put of uninitialized kobject after seed device delete
    - btrfs: fix overflow when copying corrupt csums for a message
    - media: cec-adap.c: don't use flush_scheduled_work()
    - dmabuf: fix NULL pointer dereference in dma_buf_release()
    - mm, THP, swap: fix allocating cluster for swapfile by mistake
    - mm/gup: fix gup_fast with dynamic page table folding
    - mm: replace memmap_context by meminit_context
    - mm: don't rely on system state to detect hot-plug operations
    - [s390x] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
    - io_uring: ensure open/openat2 name is cleaned on cancelation
    - [arm64] KVM: Assume write fault on S1PTW permission fault on instruction
      fetch
    - dm: fix bio splitting and its bio completion order for regular IO
    - [armhf] clocksource/drivers/timer-ti-dm: Do reset before enable
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.14
    - io_uring: always delete double poll wait entry on match
    - btrfs: fix filesystem corruption after a device replace
    - mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS
      models
    - USB: gadget: f_ncm: Fix NDP16 datagram validation
    - Revert "usbip: Implement a match function to fix usbip"
    - usbcore/driver: Fix specific driver selection
    - usbcore/driver: Fix incorrect downcast
    - usbcore/driver: Accommodate usbip
    - [x86] gpio: amd-fch: correct logic of GPIO_LINE_DIRECTION
    - [armhf] clk: samsung: Keep top BPLL mux on Exynos542x enabled
    - scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling
      getpeername()
    - [arm64,x86] i2c: i801: Exclude device from suspend direct complete
      optimization
    - Input: i8042 - add nopnp quirk for Acer Aspire 5 A515
    - ftrace: Move RCU is watching check after recursion check
    - tracing: Fix trace_find_next_entry() accounting of temp buffer size
    - memstick: Skip allocating card when removing host
    - drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config
    - xen/events: don't use chip_data for legacy IRQs
    - [x86] vboxsf: Fix the check for the old binary mount-arguments struct
    - drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices
    - Revert "wlcore: Adding suppoprt for IGTK key in wlcore driver"
    - [arm64,armhf] drm/sun4i: mixer: Extend regmap max_register
    - [x86] hv_netvsc: Cache the current data path to avoid duplicate call and
      message
    - net: dec: de2104x: Increase receive ring size for Tulip
    - rndis_host: increase sleep time in the query-response loop
    - nvme-pci: disable the write zeros command for Intel 600P/P3100
    - nvme-core: get/put ctrl and transport module in nvme_dev_open/release()
    - fuse: fix the ->direct_IO() treatment of iov_iter
    - drivers/net/wan/hdlc: Set skb->protocol before transmitting
    - mac80211: Fix radiotap header channel flag for 6GHz band
    - mac80211: do not allow bigger VHT MPDUs than the hardware supports
    - tracing: Make the space reserved for the pid wider
    - tools/io_uring: fix compile breakage
    - io_uring: mark statx/files_update/epoll_ctl as non-SQPOLL
    - cpuidle: psci: Fix suspicious RCU usage
    - nvme-pci: fix NULL req in completion handler
    - nvme-fc: fail new connections to a deleted host or remote port
    - scripts/kallsyms: skip ppc compiler stub *.long_branch.* /
      *.plt_branch.*
    - [armhf] pinctrl: mvebu: Fix i2c sda definition for 98DX3236
    - nfs: Fix security label length not being reset
    - NFSv4.2: fix client's attribute cache management for copy_file_range
    - pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly on read
    - [arm64,armhf] clk: tegra: Always program PLL_E when enabled
    - [arm64,armhf] clk: tegra: Fix missing prototype for
      tegra210_clk_register_emc()
    - [armhf] clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
    - scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG case
    - [arm64,armhf] gpio: pca953x: Fix uninitialized pending variable
    - Input: trackpoint - enable Synaptics trackpoints
    - blk-mq: call commit_rqs while list empty but error happen
    - scripts/dtc: only append to HOST_EXTRACFLAGS instead of overwriting
    - autofs: use __kernel_write() for the autofs pipe writing
    - [arm64,armhf] gpio: pca953x: Correctly initialize registers 6 and 7 for
      PCA957x
    - [amd64] iommu/amd: Fix the overwritten field in IVMD header
    - pipe: remove pipe_wait() and fix wakeup race with splice
    - random32: Restore __latent_entropy attribute on net_rand_state
    - gpiolib: Fix line event handling in syscall compatible mode
    - [x86] drm/i915/gvt: Fix port number for BDW on EDID region setup
    - scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks
    - scsi: sd: sd_zbc: Fix ZBC disk initialization
    - epoll: do not insert into poll queues until all sanity checks are done
    - epoll: replace ->visited/visited_list with generation count
    - epoll: EPOLL_CTL_ADD: close the race in decision to take fast path
    - ep_create_wakeup_source(): dentry name can change under you...
.
  [ Vagrant Cascadian ]
  * [armhf] Enable MFD_AXP20X_RSB as a built-in (Closes: #914813). Thanks
    to Bernhard.
.
  [ Salvatore Bonaccorso ]
  * [x86] Enable INTEL_PMC_CORE as module (Closes: #971017)
  * Bump ABI to 3
.
linux (5.8.10-1) unstable; urgency=medium
.
  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.8
    - HID: quirks: Always poll three more Lenovo PixArt mice
    - [arm64] drm/msm/dpu: Fix reservation failures in modeset
    - [arm64] drm/msm/dpu: Fix scale params in plane validation
    - [arm64] drm/msm/dpu: fix unitialized variable error
    - [arm64] drm/msm: add shutdown support for display platform_driver
    - [x86] hwmon: (applesmc) check status earlier.
    - nvmet: Disable keep-alive timer when kato is cleared to 0h
    - [arm64] drm/msm: enable vblank during atomic commits
    - [arm64] drm/msm/a6xx: fix gmu start on newer firmware
    - gfs2: add some much needed cleanup for log flushes that fail
    - [x86] hv_utils: return error if host timesysnc update is stale
    - [x86] hv_utils: drain the timesync packets on onchannelcallback
    - ceph: don't allow setlease on cephfs
    - [armhf] drm/omap: fix incorrect lock state
    - cpuidle: Fixup IRQ state
    - nbd: restore default timeout when setting it to zero
    - [s390x] don't trace preemption in percpu macros
    - xen/xenbus: Fix granting of vmalloc'd memory
    - dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling
    - batman-adv: Avoid uninitialized chaddr when handling DHCP
    - batman-adv: Fix own OGM check in aggregated OGMs
    - batman-adv: bla: use netif_rx_ni when not in interrupt context
    - rxrpc: Keep the ACK serial in a var in rxrpc_input_ack()
    - rxrpc: Fix loss of RTT samples due to interposed ACK
    - rxrpc: Make rxrpc_kernel_get_srtt() indicate validity
    - [mips*] mm: BMIPS5000 has inclusive physical caches
    - [arm64,x86] mmc: sdhci-acpi: Fix HS400 tuning for AMDI0040
    - perf sched timehist: Fix use of CPU list with summary option
    - perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set
    - netfilter: nf_tables: add NFTA_SET_USERDATA if not null
    - netfilter: nf_tables: incorrect enum nft_list_attributes definition
    - netfilter: nf_tables: fix destination register zeroing
    - [arm64] net: hns: Fix memleak in hns_nic_dev_probe
    - bpf: Fix a buffer out-of-bound access when filling raw_tp link_info
    - [arm64,armhf] dmaengine: pl330: Fix burst length if burst size is
      smaller than bus width
    - gtp: add GTPA_LINK info to msg sent to userspace
    - [armhf] net: ethernet: ti: cpsw: fix clean up of vlan mc entries for
      host port
    - [armhf] net: ethernet: ti: cpsw_new: fix clean up of vlan mc entries for
      host port
    - bnxt_en: Don't query FW when netif_running() is false.
    - bnxt_en: Check for zero dir entries in NVRAM.
    - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled.
    - bnxt_en: Fix PCI AER error recovery flow
    - bnxt_en: Fix possible crash in bnxt_fw_reset_task().
    - bnxt_en: fix HWRM error when querying VF temperature
    - xfs: finish dfops on every insert range shift iteration
    - xfs: fix boundary test in xfs_attr_shortform_verify
    - bnxt: don't enable NAPI until rings are ready
    - [armhf] net: ethernet: ti: cpsw_new: fix error handling in
      cpsw_ndo_vlan_rx_kill_vid()
    - netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of
      ENOBUFS
    - nvmet-fc: Fix a missed _irqsave version of spin_lock in
      'nvmet_fc_fod_op_done()'
    - nvme: fix controller instance leak
    - netfilter: conntrack: do not auto-delete clash entries on reply
    - opp: Don't drop reference for an OPP table that was never parsed
    - cxgb4: fix thermal zone device registration
    - [mips*] perf: Fix wrong check condition of Loongson event IDs
    - block: fix locking in bdev_del_partition
    - perf top/report: Fix infinite loop in the TUI for grouped events
    - perf cs-etm: Fix corrupt data after perf inject from
    - perf intel-pt: Fix corrupt data after perf inject from
    - perf tools: Correct SNOOPX field offset
    - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
    - fix regression in "epoll: Keep a reference on files added to the check
      list"
    - [arm64] net: bcmgenet: fix mask check in bcmgenet_validate_flow()
    - nfp: flower: fix ABI mismatch between driver and firmware
    - net: dp83867: Fix WoL SecureOn password
    - [mips*] add missing MSACSR and upper MSA initialization
    - xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt
      files
    - perf jevents: Fix suspicious code in fixregex()
    - perf stat: Turn off summary for interval mode by default
    - perf bench: The do_run_multi_threaded() function must use
      IS_ERR(perf_session__new())
    - tg3: Fix soft lockup when tg3_reset_task() fails.
    - [amd64] x86, fakenuma: Fix invalid starting node ID
    - [amd64] iommu/vt-d: Serialize IOMMU GCMD register modifications
    - [armhf] thermal: ti-soc-thermal: Fix bogus thermal shutdowns for
      omap4430
    - [arm64] thermal: qcom-spmi-temp-alarm: Don't suppress negative temp
    - [amd64] iommu/amd: Restore IRTE.RemapEn bit after programming IRTE
    - [amd64] iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE
    - [amd64] iommu/vt-d: Handle 36bit addressing for x86-32
    - [x86] tracing/kprobes, x86/ptrace: Fix regs argument order for i386
    - [x86] entry: Fix AC assertion
    - [x86] debug: Allow a single level of #DB recursion
    - ext2: don't update mtime on COW faults
    - xfs: don't update mtime on COW faults
    - btrfs: drop path before adding new uuid tree entry
    - btrfs: fix potential deadlock in the search ioctl
    - btrfs: allocate scrub workqueues outside of locks
    - btrfs: set the correct lockdep class for new nodes
    - btrfs: set the lockdep class for log tree extent buffers
    - btrfs: block-group: fix free-space bitmap threshold
    - btrfs: tree-checker: fix the error message for transid error
    - Bluetooth: Return NOTIFY_DONE for hci_suspend_notifier (Closes: #964839)
    - [x86] mm/32: Bring back vmalloc faulting on x86_32
    - Revert "ALSA: hda: Add support for Loongson 7A1000 controller"
    - ALSA: ca0106: fix error code handling
    - ALSA: usb-audio: Add basic capture support for Pioneer DJ DJM-250MK2
    - ALSA: usb-audio: Add implicit feedback quirk for UR22C
    - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
    - ALSA: hda/hdmi: always check pin power status in i915 pin fixup
    - ALSA: firewire-digi00x: exclude Avid Adrenaline from detection
    - ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A
      PRO
    - ALSA; firewire-tascam: exclude Tascam FE-8 from detection
    - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A
    - ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen
    - mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based
      controllers
    - media: rc: do not access device via sysfs after rc_unregister_device()
    - media: rc: uevent sysfs file races with rc_unregister_device()
    - affs: fix basic permission bits to actuall