Accepted linux 5.10.92-1~bpo10+1 (source) into buster-backports->backports-policy, buster-backports

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 03 Feb 2022 19:49:50 +0100
Source: linux
Architecture: source
Version: 5.10.92-1~bpo10+1
Distribution: buster-backports
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 988044 989285 994050 995425 995927 996672 996974 1000900
Changes:
 linux (5.10.92-1~bpo10+1) buster-backports; urgency=medium
 .
   * Rebuild for buster-backports:
     - Change ABI number to 0.bpo.11
 .
 linux (5.10.92-1) bullseye-security; urgency=high
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.85
     - usb: gadget: uvc: fix multiple opens
     - gcc-plugins: simplify GCC plugin-dev capability test
     - gcc-plugins: fix gcc 11 indigestion with plugins...
     - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
     - HID: add hid_is_usb() function to make it simpler for USB detection
     - HID: bigbenff: prevent null pointer dereference
     - HID: wacom: fix problems when device is not a valid USB device
     - HID: check for valid USB device for many HID drivers
     - [amd64] nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six
       8-bit groups
     - [amd64] IB/hfi1: Insure use of smp_processor_id() is preempt disabled
     - [amd64] IB/hfi1: Fix early init panic
     - [amd64] IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
     - can: kvaser_usb: get CAN clock frequency from device
     - [x86] can: sja1000: fix use after free in ems_pcmcia_add_card()
     - drm/amdgpu: move iommu_resume before ip init/resume
     - drm/amdgpu: init iommu after amdkfd device init
     - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
     - vrf: don't run conntrack on vrf with !dflt qdisc
     - bpf, x86: Fix "no previous prototype" warning
     - bpf: Fix the off-by-two error in range markings
     - ice: ignore dropped packets during init
     - bonding: make tx_rebalance_counter an atomic
     - nfp: Fix memory leak in nfp_cpp_area_cache_add()
     - seg6: fix the iif in the IPv6 socket control block
     - udp: using datalen to cap max gso segments
     - netfilter: conntrack: annotate data-races around ct->timeout
     - iavf: restore MSI state on reset
     - iavf: Fix reporting when setting descriptor count
     - [amd64] IB/hfi1: Correct guard on eager buffer deallocation
     - devlink: fix netns refcount leak in devlink_nl_cmd_reload()
     - net/sched: fq_pie: prevent dismantle issue
     - [x86] KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB
       flush hypercall
     - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
     - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
     - ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
     - ALSA: pcm: oss: Fix negative period/buffer sizes
     - ALSA: pcm: oss: Limit the period size to 16MB
     - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
     - scsi: qla2xxx: Format log strings only if needed
     - btrfs: clear extent buffer uptodate when we fail to write it
     - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
     - md: fix update super 1.0 on rdev size change
     - nfsd: fix use-after-free due to delegation race (Closes: #988044)
     - nfsd: Fix nsfd startup race (again)
     - tracefs: Have new files inherit the ownership of their parent
     - [arm64] clk: qcom: regmap-mux: fix parent clock lookup
     - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
     - [i386] can: pch_can: pch_can_rx_normal: fix use after free
     - libata: add horkage for ASMedia 1092
     - wait: add wake_up_pollfree()
     - binder: use wake_up_pollfree()
     - signalfd: use wake_up_pollfree()
     - aio: keep poll requests on waitqueue until completed
     - aio: fix use-after-free due to missing POLLFREE handling
     - [arm64,armhf] net: mvpp2: fix XDP rx queues registering
     - tracefs: Set all files to the same group ownership as the mount option
     - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
     - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
     - scsi: scsi_debug: Fix buffer size of REPORT ZONES command
     - qede: validate non LSO skb length
     - PM: runtime: Fix pm_runtime_active() kerneldoc comment
     - ASoC: rt5682: Fix crash due to out of scope stack vars
     - [arm64] RDMA/hns: Do not halt commands during reset until later
     - [arm64] RDMA/hns: Do not destroy QP resources in the hw resetting phase
     - i40e: Fix failed opcode appearing if handling messages from VF
     - i40e: Fix pre-set max number of queues for VF
     - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
     - [arm64] Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on
       emulated bridge"
     - Documentation/locking/locktypes: Update migrate_disable() bits.
     - dt-bindings: net: Reintroduce PHY no lane swap binding
     - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
     - [arm64,armhf] net: fec: only clear interrupt of handling queue in
       fec_enet_rx_queue()
     - net, neigh: clear whole pneigh_entry at alloc time
     - net/qla3xxx: fix an error code in ql_adapter_up()
     - USB: gadget: detect too-big endpoint 0 requests (CVE-2021-39685)
     - USB: gadget: zero allocate endpoint 0 buffers (CVE-2021-39685)
     - usb: core: config: fix validation of wMaxPacketValue entries
     - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
       suspending
     - usb: core: config: using bit mask instead of individual bits
     - xhci: avoid race between disable slot command and host runtime suspend
     - iio: gyro: adxrs290: fix data signedness
     - iio: trigger: Fix reference counting
     - iio: stk3310: Don't return error code in interrupt handler
     - iio: mma8452: Fix trigger reference couting
     - iio: ltr501: Don't return error code in trigger handler
     - iio: kxsd9: Don't return error code in trigger handler
     - iio: itg3200: Call iio_trigger_notify_done() on error
     - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
     - iio: ad7768-1: Call iio_trigger_notify_done() on error
     - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
     - [armhf] irqchip/aspeed-scu: Replace update_bits with write_bits.
     - [armhf] irqchip/armada-370-xp: Fix return value of
       armada_370_xp_msi_alloc()
     - [armhf] irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
     - [arm64,armhf] irqchip/irq-gic-v3-its.c: Force synchronisation when issuing
       INVALL
     - kbuild: simplify GCC_PLUGINS enablement in dummy-tools/gcc
     - doc: gcc-plugins: update gcc-plugins.rst
     - MAINTAINERS: adjust GCC PLUGINS after gcc-plugin.sh removal
     - Documentation/Kbuild: Remove references to gcc-plugin.sh
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.86
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.87
     - nfc: fix segfault in nfc_genl_dump_devices_done
     - [arm64] drm/msm/dsi: set default num_data_lanes
     - [arm64] KVM: arm64: Save PSTATE early on exit
     - [arm64] Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
     - net/mlx4_en: Update reported link modes for 1/10G
     - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
     - ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
     - [arm64,armhf] i2c: rk3x: Handle a spurious start completion interrupt flag
     - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
     - [x86] KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI
       req
     - bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc
     - fuse: make sure reclaim doesn't write the inode
     - [x86] hwmon: (dell-smm) Fix warning on /proc/i8k creation error
     - ethtool: do not perform operations on net devices being unregistered
     - [armel,armhf] memblock: free_unused_memmap: use pageblock units instead of
       MAX_ORDER
     - [armel,armhf] memblock: align freed memory map on pageblock boundaries
       with SPARSEMEM
     - memblock: ensure there is no overflow in memblock_overlaps_region()
     - [armel,armhf] arm: extend pfn_valid to take into account freed memory map
       alignment
     - [armel,armhf] arm: ioremap: don't abuse pfn_valid() to check if pfn is in
       RAM
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.88
     - KVM: downgrade two BUG_ONs to WARN_ON_ONCE
     - mac80211: fix regression in SSN handling of addba tx
     - mac80211: mark TX-during-stop for TX in in_reconfig
     - mac80211: send ADDBA requests using the tid/queue of the aggregation
       session
     - mac80211: validate extended element ID is present
     - bpf: Fix signed bounds propagation after mov32
     - bpf: Make 32->64 bounds propagation slightly more robust
     - virtio_ring: Fix querying of maximum DMA mapping size for virtio device
     - dm btree remove: fix use after free in rebalance_children()
     - audit: improve robustness of the audit queue handling
     - [arm64] dts: imx8mp-evk: Improve the Ethernet PHY description
     - [arm64] dts: rockchip: fix rk3308-roc-cc vcc-sd supply
     - [arm64] dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
     - mac80211: track only QoS data frames for admission control
     - ceph: fix duplicate increment of opened_inodes metric
     - ceph: initialize pathlen variable in reconnect_caps_cb
     - [armhf] socfpga: dts: fix qspi node compatible
     - clk: Don't parent clks until the parent is fully registered
     - [armhf] soc: imx: Register SoC device only on i.MX boards
     - virtio/vsock: fix the transport to work with VMADDR_CID_ANY
     - [s390x] kexec_file: fix error handling when applying relocations
     - sch_cake: do not call cake_destroy() from cake_init()
     - inet_diag: fix kernel-infoleak for UDP sockets
     - [arm64] net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
     - net/sched: sch_ets: don't remove idle classes from the round-robin list
     - drm/ast: potential dereference of null pointer
     - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
     - mac80211: fix lookup when adding AddBA extension element
     - flow_offload: return EOPNOTSUPP for the unsupported mpls action type
     - rds: memory leak in __rds_conn_create() (CVE-2021-45480)
     - [arm64,armhf] soc/tegra: fuse: Fix bitwise vs. logical OR warning
     - igb: Fix removal of unicast MAC filters of VFs
     - igbvf: fix double free in `igbvf_probe`
     - igc: Fix typo in i225 LTR functions
     - ixgbe: Document how to enable NBASE-T support
     - ixgbe: set X550 MDIO speed before talking to PHY
     - netdevsim: Zero-initialize memory for new map's value in function
       nsim_bpf_map_alloc (CVE-2021-4135)
     - net/packet: rx_owner_map depends on pg_vec
     - sfc_ef100: potential dereference of null pointer
     - net: Fix double 0x prefix print in SKB dump
     - net/smc: Prevent smc_release() from long blocking
     - sit: do not call ipip6_dev_free() from sit_init_net()
     - USB: gadget: bRequestType is a bitfield, not a enum
     - Revert "usb: early: convert to readl_poll_timeout_atomic()"
     - [x86] KVM: x86: Drop guest CPUID check for host initiated writes to
       MSR_IA32_PERF_CAPABILITIES
     - [x86] tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
     - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
     - [arm*] usb: dwc2: fix STM ID/VBUS detection startup delay in
       dwc2_driver_probe
     - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
     - PCI/MSI: Mask MSI-X vectors only on success
     - usb: xhci: Extend support for runtime power management for AMD's Yellow
       carp.
     - USB: serial: cp210x: fix CP2105 GPIO registration
     - USB: serial: option: add Telit FN990 compositions
     - btrfs: fix memory leak in __add_inode_ref()
     - btrfs: fix double free of anon_dev after failure to create subvolume
     - zonefs: add MODULE_ALIAS_FS
     - iocost: Fix divide-by-zero on donation from low hweight cgroup
     - [x86] serial: 8250_fintek: Fix garbled text for console
     - timekeeping: Really make sure wall_to_monotonic isn't positive
     - libata: if T_LENGTH is zero, dma direction should be DMA_NONE
     - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
     - Input: touchscreen - avoid bitwise vs logical OR warning
     - xsk: Do not sleep in poll() when need_wakeup set
     - media: mxl111sf: change mutex_init() location
     - fuse: annotate lock in fuse_reverse_inval_entry()
     - ovl: fix warning in ovl_create_real()
     - scsi: scsi_debug: Don't call kcalloc() if size arg is zero
     - scsi: scsi_debug: Fix type in min_t to avoid stack OOB
     - scsi: scsi_debug: Sanity check block descriptor length in
       resp_mode_select()
     - rcu: Mark accesses to rcu_state.n_force_qs
     - [armhf] bus: ti-sysc: Fix variable set but not used warning for
       reinit_modules
     - Revert "xsk: Do not sleep in poll() when need_wakeup set"
     - xen/blkfront: harden blkfront against event channel storms
       (CVE-2021-28711)
     - xen/netfront: harden netfront against event channel storms
       (CVE-2021-28712)
     - xen/console: harden hvc_xen against event channel storms (CVE-2021-28713)
     - xen/netback: fix rx queue stall detection (CVE-2021-28714)
     - xen/netback: don't queue unlimited number of packages (CVE-2021-28715)
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.89
     - net: usb: lan78xx: add Allied Telesis AT29M2-AF
     - ext4: prevent partial update of the extent blocks
     - ext4: check for out-of-order index extents in ext4_valid_extent_entries()
     - ext4: check for inconsistent extents between index and leaf block
     - HID: holtek: fix mouse probing
     - [arm64] dts: allwinner: orangepi-zero-plus: fix PHY mode
     - [arm64] spi: change clk_disable_unprepare to clk_unprepare
     - [amd64] IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
     - [arm64] RDMA/hns: Replace kfree() with kvfree()
     - netfilter: fix regression in looped (broad|multi)cast's MAC handling
     - qlcnic: potential dereference null pointer of rx_queue->page_ring
     - net: accept UFOv6 packages in virtio_net_hdr_to_skb
     - net: skip virtio_net_hdr_set_proto if protocol already set
     - igb: fix deadlock caused by taking RTNL in RPM resume path
     - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
     - bonding: fix ad_actor_system option setting to default
     - [amd64] fjes: Check for error irq
     - [armhf] drivers: net: smc911x: Check for error irq
     - sfc: Check null pointer of rx_queue->page_ring
     - sfc: falcon: Check null pointer of rx_queue->page_ring
     - Input: elantech - fix stack out of bound access in
       elantech_change_report_id()
     - [arm*] pinctrl: bcm2835: Change init order for gpio hogs
     - hwmon: (lm90) Fix usage of CONFIG2 register in detect function
     - hwmon: (lm90) Add basic support for TI TMP461
     - hwmon: (lm90) Introduce flag indicating extended temperature support
     - hwmon: (lm90) Drop critical attribute support for MAX6654
     - ALSA: jack: Check the return value of kstrdup()
     - ALSA: drivers: opl3: Fix incorrect use of vp->state
     - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
     - ALSA: hda/realtek: Add new alc285-hp-amp-init model
     - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
     - Input: atmel_mxt_ts - fix double free in mxt_read_info_block
     - ipmi: bail out if init_srcu_struct fails
     - ipmi: ssif: initialize ssif_info->client early
     - ipmi: fix initialization when workqueue allocation fails
     - [arm64] tee: handle lookup of shm with reference count 0
     - [x86] pkey: Fix undefined behaviour with PKRU_WD_BIT
     - [x86] platform/x86: intel_pmc_core: fix memleak on registration failure
     - [x86] KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this
       vCPU
     - [armhf] pinctrl: stm32: consider the GPIO offset to expose all the GPIO
       lines
     - [arm64,armhf] mmc: sdhci-tegra: Fix switch to HS400ES mode
     - mmc: core: Disable card detect during shutdown
     - [arm64,armhf] mmc: mmci: stm32: clear DLYB_CR after sending tuning command
     - [armel,armhf] 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
     - mac80211: fix locking in ieee80211_start_ap error path
     - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
     - [arm64] tee: optee: Fix incorrect page free bug
     - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
       (CVE-2021-45469)
     - ceph: fix up non-directory creation in SGID directories
     - usb: gadget: u_ether: fix race in setting MAC address in setup phase
     - [x86] KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
     - mm: mempolicy: fix THP allocations escaping mempolicy restrictions
     - [arm64] Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
     - Input: goodix - add id->model mapping for the "9111" model
     - ASoC: rt5682: fix the wrong jack type detected
     - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
     - hwmon: (lm90) Do not report 'busy' status bit as alarm
     - ax25: NPD bug when detaching AX25 device
     - hamradio: defer ax25 kfree after unregister_netdev
     - hamradio: improve the incomplete fix to avoid NPD
     - phonet/pep: refuse to enable an unbound pipe
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.90
     - Input: i8042 - add deferred probe support
     - Input: i8042 - enable deferred probe quirk for ASUS UM325UA
     - tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
     - tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
     - [x86] platform/x86: apple-gmux: use resource_size() with res
     - memblock: fix memblock_phys_alloc() section mismatch error
     - selinux: initialize proto variable in selinux_ip_postroute_compat()
     - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
     - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
     - net/mlx5e: Wrap the tx reporter dump callback to extract the sq
     - net/mlx5e: Fix ICOSQ recovery flow for XSK
     - udp: using datalen to cap ipv6 udp max gso segments
     - sctp: use call_rcu to free endpoint
     - net/smc: fix using of uninitialized completions
     - net: usb: pegasus: Do not drop long Ethernet frames
     - net/smc: improved fix wait on already cleared link
     - net/smc: don't send CDC/LLC message if link not ready
     - net/smc: fix kernel panic caused by race of smc_sock
     - igc: Fix TX timestamp support for non-MSI-X platforms
     - net/mlx5e: Fix wrong features assignment in case of error
     - [armhf] net/ncsi: check for error return from call to nla_put_u32
     - i2c: validate user data in compat ioctl
     - nfc: uapi: use kernel size_t to fix user-space builds
     - uapi: fix linux/nfc.h userspace compilation errors
     - drm/amdgpu: When the VCN(1.0) block is suspended, powergating is
       explicitly enabled
     - drm/amdgpu: add support for IP discovery gc_info table v2
     - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
     - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
     - [arm*] binder: fix async_free_space accounting for empty parcels
     - [x86] scsi: vmw_pvscsi: Set residual data length conditionally
     - Input: appletouch - initialize work before device registration
     - Input: spaceball - fix parsing of movement data packets
     - net: fix use-after-free in tw_timer_handler
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.91
     - f2fs: quota: fix potential deadlock
     - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
     - tracing: Tag trace_percpu_buffer as a percpu pointer
     - ieee802154: atusb: fix uninit value in atusb_set_extended_addr
     - i40e: Fix to not show opcode msg on unsuccessful VF MAC change
     - iavf: Fix limit of total number of queues to active queues of VF
     - RDMA/core: Don't infoleak GRH fields
     - netrom: fix copying in user data in nr_setsockopt
     - RDMA/uverbs: Check for null return of kmalloc_array
     - mac80211: initialize variable have_higher_than_11mbit
     - sfc: The RX page_ring is optional
     - i40e: fix use-after-free in i40e_sync_filters_subtask()
     - i40e: Fix for displaying message regarding NVM version
     - i40e: Fix incorrect netdev's real number of RX/TX queues
     - ipv4: Check attribute length for RTA_GATEWAY in multipath route
     - ipv4: Check attribute length for RTA_FLOW in multipath route
     - ipv6: Check attribute length for RTA_GATEWAY in multipath route
     - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
     - lwtunnel: Validate RTA_ENCAP_TYPE attribute length
     - batman-adv: mcast: don't send link-local multicast to mcast routers
     - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
     - net: ena: Fix undefined state when tx request id is out of bounds
     - net: ena: Fix error handling when calculating max IO queues number
     - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
       (CVE-2021-4155)
     - power: supply: core: Break capacity loop
     - rndis_host: support Hytera digital radios
     - phonet: refcount leak in pep_sock_accep (CVE-2021-45095)
     - ipv6: Continue processing multipath route even if gateway attribute is
       invalid
     - ipv6: Do cleanup if attribute validation fails in multipath route
     - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
     - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
     - net: udp: fix alignment problem in udp4_seq_show()
     - [amd64,arm64] atlantic: Fix buff_ring OOB in aq_ring_rx_clean
     - mISDN: change function names to avoid conflicts
     - drm/amd/display: Added power down for DCN10
     - ipv6: raw: check passed optlen before reading
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.92
     - md: revert io stats accounting
     - workqueue: Fix unbind_workers() VS wq_worker_running() race
     - bpf: Fix out of bounds access from invalid *_or_null type verification
       (CVE-2022-23222)
     - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
     - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
     - Bluetooth: btusb: Add support for Foxconn MT7922A
     - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
     - Bluetooth: bfusb: fix division by zero in send path
     - [armhf] dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
     - USB: core: Fix bug in resuming hub's handling of wakeup requests
     - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
     - ath11k: Fix buffer overflow when scanning with extraie
     - mmc: sdhci-pci: Add PCI ID for Intel ADL
     - veth: Do not record rx queue hint in veth_xmit
     - [x86] mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
     - can: gs_usb: fix use of uninitialized variable, detach device on reception
       of invalid USB data
     - can: isotp: convert struct tpcon::{idx,len} to unsigned int
     - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
     - random: fix data race on crng_node_pool
     - random: fix data race on crng init time
     - random: fix crash on multiple early calls to add_bootloader_randomness()
     - media: Revert "media: uvcvideo: Set unique vdev name based in type"
     - [x86] drm/i915: Avoid bitwise vs logical OR warning in
       snb_wm_latency_quirk()
 .
   [ Salvatore Bonaccorso ]
   * [arm64] drivers/net/ethernet/google: Enable GVE as module (Closes: #996974)
   * Refresh "Export symbols needed by Android drivers"
   * [rt] Update to 5.10.87-rt59
   * Bump ABI to 11
   * [rt] Update to 5.10.90-rt60
   * vfs: fs_context: fix up param length parsing in legacy_parse_param
     (CVE-2022-0185)
 .
   [ Andrew Balmos ]
   * net/can: Enable CONFIG_CAN_MCP251X as module
 .
   [ Cyril Brulebois ]
   * arm64: dts: Add support for Raspberry Pi Compute Module 4 IO Board,
     producing a DTB that's almost entirely identical to what a v5.16-rc8
     build produces, with lots of thanks to Uwe Kleine-König for the heavy
     lifting!
 .
 linux (5.10.84-1) bullseye; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.71
     - tty: Fix out-of-bound vmalloc access in imageblit
     - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
     - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
     - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
     - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
       15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
     - [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT
       table is incorrect
     - fs-verity: fix signed integer overflow with i_size near S64_MAX
     - hwmon: (tmp421) handle I2C errors
     - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
       structure field
     - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
       structure field
     - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
       structure field
     - [arm64,armhf] gpio: pca953x: do not ignore i2c errors
     - scsi: ufs: Fix illegal offset in UPIU event trace
     - mac80211: fix use-after-free in CCMP/GCMP RX
     - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
     - [x86] KVM: x86: Fix stack-out-of-bounds memory access from
       ioapic_write_indirect()
     - [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12
     - [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was
       activated
     - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
     - RDMA/cma: Do not change route.addr.src_addr.ss_family
     - drm/amd/display: Pass PCI deviceid into DC
     - drm/amdgpu: correct initial cp_hqd_quantum for gfx9
     - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
     - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
     - IB/cma: Do not send IGMP leaves for sendonly Multicast groups
     - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
     - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
     - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
     - mac80211: mesh: fix potentially unaligned access
     - mac80211-hwsim: fix late beacon hrtimer handling
     - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
     - hwmon: (tmp421) report /PVLD condition as fault
     - hwmon: (tmp421) fix rounding for negative values
     - [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits
     - net: ipv4: Fix rtnexthop len when RTA_FLOW is present
     - smsc95xx: fix stalled rx after link change
     - [x86] drm/i915/request: fix early tracepoints
     - [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
     - [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition
     - [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for
       DSA and CPU ports
     - e100: fix length calculation in e100_get_regs_len
     - e100: fix buffer overrun in e100_get_regs
     - [arm64] RDMA/hns: Fix inaccurate prints
     - bpf: Exempt CAP_BPF from checks against bpf_jit_limit
     - Revert "block, bfq: honor already-setup queue merges"
     - scsi: csiostor: Add module softdep on cxgb4
     - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
     - [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly
     - [arm64] net: hns3: keep MAC pause mode when multiple TCs are enabled
     - [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
       HCLGE_FLAG_DCB_ENABLE
     - [arm64] net: hns3: fix show wrong state when add existing uc mac address
     - [arm64] net: hns3: fix prototype warning
     - [arm64] net: hns3: reconstruct function hns3_self_test
     - [arm64] net: hns3: fix always enable rx vlan filter problem after selftest
     - [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
     - net: sched: flower: protect fl_walk() with rcu
     - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
     - [x86] perf/x86/intel: Update event constraints for ICX
     - nvme: add command id quirk for apple controllers
     - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
     - debugfs: debugfs_create_file_size(): use IS_ERR to check for error
     - ext4: fix loff_t overflow in ext4_max_bitmap_size()
     - ext4: limit the number of blocks in one ADD_RANGE TLV (Closes: #995425)
     - ext4: fix reserved space counter leakage
     - ext4: add error checking to ext4_ext_replay_set_iblocks()
     - ext4: fix potential infinite loop in ext4_dx_readdir()
     - HID: u2fzero: ignore incomplete packets without data
     - net: udp: annotate data race around udp_sk(sk)->corkflag
     - ASoC: dapm: use component prefix when checking widget names
     - usb: hso: remove the bailout parameter
     - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
       (CVE-2021-3744, CVE-2021-3764)
     - HID: betop: fix slab-out-of-bounds Write in betop_probe
     - netfilter: ipset: Fix oversized kvmalloc() calls
     - mm: don't allow oversized kvmalloc() calls
     - HID: usbhid: free raw_report buffers in usbhid_stop
     - [x86] KVM: x86: Handle SRCU initialization failure during page track init
     - netfilter: conntrack: serialize hash resizes and cleanups
     - netfilter: nf_tables: Fix oversized kvmalloc() calls
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.72
     - [arm64,armhf] spi: rockchip: handle zero length transfers without timing
       out
     - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
     - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
     - btrfs: fix mount failure due to past and transient device flush error
     - net: mdio: introduce a shutdown method to mdio device drivers
     - xen-netback: correct success/error reporting for the SKB-with-fraglist
       case
     - scsi: sd: Free scsi_disk device via put_device()
     - [arm*] usb: dwc2: check return value after calling platform_get_resource()
     - nvme-fc: update hardware queues before using them
     - nvme-fc: avoid race between time out and tear down
     - [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
     - scsi: ses: Retry failed Send/Receive Diagnostic commands
     - [arm64,armhf] irqchip/gic: Work around broken Renesas integration
     - smb3: correct smb3 ACL security descriptor
     - KVM: do not shrink halt_poll_ns below grow_start
     - [x86] kvm: Add AMD PMU MSRs to msrs_to_save_all[]
     - [x86] KVM: nSVM: restore int_vector in svm_clear_vintr
     - [x86] perf/x86: Reset destroy callback on event init failure
     - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.73
     - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
     - USB: cdc-acm: fix racy tty buffer accesses
     - USB: cdc-acm: fix break reporting
     - usb: typec: tcpm: handle SRC_STARTUP state if cc changes
     - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
     - xen/privcmd: fix error handling in mmap-resource processing
     - [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
     - ovl: fix missing negative dentry check in ovl_rename() (CVE-2021-20321)
     - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
     - nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
     - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
     - SUNRPC: fix sign error causing rpcsec_gss drops
     - xen/balloon: fix cancelled balloon action
     - [armhf] dts: omap3430-sdp: Fix NAND device node
     - [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc()
     - [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
     - [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo
     - [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo
     - [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child
       devices from the bus
     - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
     - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
     - [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss
     - bpf: Fix integer overflow in prealloc_elems_and_freelist()
       (CVE-2021-41864)
     - net/mlx5e: IPSEC RX, enable checksum complete
     - net/mlx5: E-Switch, Fix double allocation of acl flow counter
     - phy: mdio: fix memory leak
     - net_sched: fix NULL deref in fifo_set_limit()
     - [i386] ptp_pch: Load module automatically if ID matches
     - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
       sequence
     - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
     - net: bridge: fix under estimation in br_get_linkxstats_size()
     - net/sched: sch_taprio: properly cancel timer from taprio_destroy()
     - net: sfp: Fix typo in state machine debug string
     - netlink: annotate data races around nlk->bound
     - perf jevents: Tidy error handling
     - [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
     - [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
     - drm/nouveau: avoid a use-after-free when BO init fails
     - drm/nouveau/kms/nv50-: fix file release memory leak
     - drm/nouveau/debugfs: fix file release memory leak
     - [amd64] gve: Correct available tx qpl check
     - [amd64] gve: Avoid freeing NULL pointer
     - rtnetlink: fix if_nlmsg_stats_size() under estimation
     - [amd64] gve: fix gve_get_stats()
     - [amd64] gve: report 64bit tx_bytes counter from gve_handle_report_stats()
     - i40e: fix endless loop under rtnl
     - i40e: Fix freeing of uninitialized misc IRQ vector
     - net: prefer socket bound to interface when not in VRF
     - [powerpc*] iommu: Report the correct most efficient DMA mask for PCI
       devices
     - i2c: acpi: fix resource leak in reconfiguration device addition
     - [s390x] bpf, s390: Fix potential memory leak about jit_data
     - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
     - [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
     - [i386] x86/platform/olpc: Correct ifdef symbol to intended
       CONFIG_OLPC_XO15_SCI
     - [x86] entry: Correct reference to intended CONFIG_64_BIT
     - [x86] hpet: Use another crystalball to evaluate HPET usability
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.74
     - ext4: check and update i_disksize properly
     - ext4: correct the error path of ext4_write_inline_data_end()
     - [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
     - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
     - netfilter: ip6_tables: zero-initialize fragment offset
     - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
     - [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid
       batching
     - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
     - netfilter: nf_nat_masquerade: defer conntrack walk to work queue
     - mac80211: Drop frames from invalid MAC address in ad-hoc mode
     - net: prevent user from passing illegal stab size
     - mac80211: check return value of rhashtable_init
     - [x86] vboxfs: fix broken legacy mount signature checking
     - drm/amdgpu: fix gart.bo pin_count leak
     - scsi: ses: Fix unsigned comparison with less than zero
     - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
     - perf/core: fix userpage->time_enabled of inactive events
     - sched: Always inline is_percpu_thread()
     - [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.75
     - ALSA: usb-audio: Add quirk for VF0770
     - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
     - ALSA: seq: Fix a potential UAF by wrong private_free call order
     - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
     - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
     - ALSA: hda/realtek: Complete partial device name to avoid ambiguity
     - ALSA: hda/realtek: Add quirk for Clevo X170KM-G
     - ALSA: hda/realtek - ALC236 headset MIC recording issue
     - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
     - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
       13s Gen2
     - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
     - [s390x] fix strrchr() implementation
     - [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
     - drm/msm: Avoid potential overflow in timeout_to_jiffies()
     - btrfs: unlock newly allocated extent buffer after error
     - btrfs: deal with errors when replaying dir entry during log replay
     - btrfs: deal with errors when adding inode reference during log replay
     - btrfs: check for error when looking up inode during dir entry replay
     - btrfs: update refs for any root except tree log roots
     - btrfs: fix abort logic in btrfs_replace_file_extents
     - [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
     - [x86] mei: me: add Ice Lake-N device id.
     - xhci: guard accesses to ep_state in xhci_endpoint_reset()
     - xhci: Fix command ring pointer corruption while aborting a command
     - xhci: Enable trust tx length quirk for Fresco FL11 USB controller
     - cb710: avoid NULL pointer subtraction
     - [arm64,x86] efi/cper: use stack buffer for error record decoding
     - efi: Change down_interruptible() in virt_efi_reset_system() to
       down_trylock()
     - [armhf] usb: musb: dsps: Fix the probe error path (Closes: 1000900)
     - Input: xpad - add support for another USB ID of Nacon GC-100
     - USB: serial: qcserial: add EM9191 QDL support
     - USB: serial: option: add Quectel EC200S-CN module support
     - USB: serial: option: add Telit LE910Cx composition 0x1204
     - USB: serial: option: add prod. id for Quectel EG91
     - virtio: write back F_VERSION_1 before validate
     - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
     - [powerpc*] xive: Discard disabled interrupts in get_irqchip_state()
     - driver core: Reject pointless SYNC_STATE_ONLY device links
     - iio: adc: ad7192: Add IRQ flag
     - iio: adc: ad7780: Fix IRQ flag
     - iio: adc: ad7793: Fix IRQ flag
     - iio: adc128s052: Fix the error handling path of 'adc128_probe()'
     - iio: adc: max1027: Fix wrong shift with 12-bit devices
     - iio: light: opt3001: Fixed timeout error when 0 lux
     - iio: adc: max1027: Fix the number of max1X31 channels
     - iio: dac: ti-dac5571: fix an error code in probe()
     - [arm64] tee: optee: Fix missing devices unregister during optee_remove
     - [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address
     - [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
     - [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
     - nvme-pci: Fix abort command id
     - sctp: account stream padding length for reconf chunk
     - [arm64,armhf] gpio: pca953x: Improve bias setting
     - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
     - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
     - net: stmmac: fix get_hw_feature() on old hardware
     - ethernet: s2io: fix setting mac address during resume
     - nfc: fix error handling of nfc_proto_register()
     - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
     - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
     - [i386] pata_legacy: fix a couple uninitialized variable bugs
     - ata: ahci_platform: fix null-ptr-deref in
       ahci_platform_enable_regulators()
     - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
     - [arm64] drm/msm: Fix null pointer dereference on pointer edp
     - [arm64] drm/msm/mdp5: fix cursor-related warnings
     - [arm64] drm/msm/a6xx: Track current ctx by seqno
     - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
     - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
     - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
     - [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time
     - mqprio: Correct stats in mqprio_dump_class_stats().
     - qed: Fix missing error code in qed_slowpath_start()
     - nfp: flow_offload: move flow_indr_dev_register from app init to app start
     - [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
       skb
     - [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.76
     - xhci: add quirk for host controllers that don't update endpoint DCS
     - io_uring: fix splice_fd_in checks backport typo
     - [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address
     - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
     - [x86] xen/x86: prevent PVH type from getting clobbered
     - NFSD: Keep existing listeners on portlist error
     - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
       value
     - ice: fix getting UDP tunnel entry
     - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
     - netfilter: ipvs: make global sysctl readonly in non-init netns
     - tcp: md5: Fix overlap between vrf and non-vrf keys
     - ipv6: When forwarding count rx stats on the orig netdev
     - [powerpc*] smp: do not decrement idle task preempt count in CPU offline
     - [arm64] net: hns3: reset DWRR of unused tc to zero
     - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
     - [arm64] net: hns3: schedule the polling again when allocation fails
     - [arm64] net: hns3: fix vf reset workqueue cannot exit
     - [arm64] net: hns3: disable sriov before unload hclge layer
     - net: stmmac: Fix E2E delay mechanism
     - e1000e: Fix packet loss on Tiger Lake and later
     - ice: Add missing E810 device ids
     - [arm64] net: enetc: fix ethtool counter name for PM0_TERR
     - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
       notification
     - can: peak_pci: peak_pci_remove(): fix UAF
     - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
     - can: isotp: isotp_sendmsg(): add result check for
       wait_event_interruptible()
     - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
     - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
     - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
       error length
     - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
     - ceph: skip existing superblocks that are blocklisted or shut down when
       mounting
     - ceph: fix handling of "meta" errors
     - ocfs2: fix data corruption after conversion from inline format
     - ocfs2: mount fails with buffer overflow in strlen
     - userfaultfd: fix a race between writeprotect and exit_mmap()
     - vfs: check fd has read access in kernel_read_file_from_fd()
     - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
     - ALSA: hda/realtek: Add quirk for Clevo PC50HS
     - ASoC: DAPM: Fix missing kctl change notifications
     - audit: fix possible null-pointer dereference in audit_filter_rules
     - [powerpc*] powerpc64/idle: Fix SP offsets when saving GPRs
     - [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in
       idle_kvm_start_guest()
     - [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it
       went to guest (CVE-2021-43056)
     - [powerpc*] idle: Don't corrupt back chain when going idle
     - mm, slub: fix mismatch between reconstructed freelist depth and cnt
     - mm, slub: fix potential memoryleak in kmem_cache_open()
     - mm, slub: fix incorrect memcg slab count for bulk free
     - [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode
     - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
     - isdn: cpai: check ctr->cnr to avoid array index out of bound
       (CVE-2021-43389)
     - [arm64] net: hns3: fix the max tx size according to user manual
     - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
     - btrfs: deal with errors when checking if a dir entry exists during log
       replay
     - net: stmmac: add support for dwmac 3.40a
     - isdn: mISDN: Fix sleeping function called from invalid context
     - [x86] platform/x86: intel_scu_ipc: Update timeout value in comment
     - ALSA: hda: avoid write to STATESTS if controller is in reset
     - [x86] perf/x86/msr: Add Sapphire Rapids CPU support
     - scsi: iscsi: Fix set_param() handling
     - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
     - sched/scs: Reset the shadow stack when idle_task_exit
     - [arm64] net: hns3: fix for miscalculation of rx unused desc
     - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
     - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
       isotp_sendmsg()
     - [s390x] pci: fix zpci_zdev_put() on reserve
     - net: mdiobus: Fix memory leak in __mdiobus_register
     - tracing: Have all levels of checks prevent recursion
     - e1000e: Separate TGP board type from SPT
     - [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.77
     - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
     - io_uring: don't take uring_lock during iowq cancel
     - [powerpc*] bpf: Fix BPF_MOD when imm == 1
     - [arm64] Avoid premature usercopy failure
     - ext4: fix possible UAF when remounting r/o a mmp-protected file system
     - usbnet: sanity check for maxpacket
     - usbnet: fix error return code in usbnet_probe()
     - pinctrl: amd: disable and mask interrupts on probe
     - ata: sata_mv: Fix the error handling of mv_chip_id()
     - tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267)
     - nfc: port100: fix using -ERRNO as command type mask
     - Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
     - mmc: vub300: fix control-message timeouts
     - mmc: cqhci: clear HALT state after CQE enable
     - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
     - mmc: sdhci: Map more voltage level to SDHCI_POWER_330
     - [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
       standard tuning circuit
     - ocfs2: fix race between searching chunks and release journal_head from
       buffer_head
     - nvme-tcp: fix H2CData PDU send accounting (again)
     - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
     - cfg80211: fix management registrations locking
     - net: lan78xx: fix division by zero in send path
     - mm, thp: bail out early in collapse_file for writeback page
     - drm/ttm: fix memleak in ttm_transfered_destroy
     - drm/amdgpu: fix out of bounds write (CVE-2021-42327)
     - cgroup: Fix memory leak caused by missing cgroup_bpf_offline
     - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
     - bpf: Fix potential race in tail call compatibility check
     - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
     - [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt
       fields
     - [amd64] IB/hfi1: Fix abba locking issue with sc_disable()
     - nvmet-tcp: fix data digest pointer calculation
     - nvme-tcp: fix data digest pointer calculation
     - nvme-tcp: fix possible req->offset corruption
     - RDMA/mlx5: Set user priority for DCT
     - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
     - regmap: Fix possible double-free in regcache_rbtree_exit()
     - net: batman-adv: fix error handling
     - net-sysfs: initialize uid and gid before calling net_ns_get_ownership
     - cfg80211: correct bridge/4addr mode check
     - net: Prevent infinite while loop in skb_tx_hash()
     - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
     - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
       fails
     - net: ethernet: microchip: lan743x: Fix dma allocation failure by using
       dma_set_mask_and_coherent
     - phy: phy_ethtool_ksettings_get: Lock the phy for consistency
     - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
     - phy: phy_start_aneg: Add an unlocked version
     - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
     - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
     - sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772)
     - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
     - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
     - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
     - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
     - lan743x: fix endianness when accessing descriptors
     - [s390x] KVM: clear kicked_mask before sleeping again
     - [s390x] KVM: preserve deliverable_mask in __airqs_kick_single_vcpu
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.78
     - scsi: core: Put LLD module refcnt after SCSI device is released
     - Revert "io_uring: reinforce cancel on flush during exit"
     - sfc: Fix reading non-legacy supported link modes
     - vrf: Revert "Reset skb conntrack connection..."
     - net: ethernet: microchip: lan743x: Fix skb allocation failure
     - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
       (CVE-2021-42739)
     - Revert "xhci: Set HCD flag to defer primary roothub registration"
     - Revert "usb: core: hcd: Add support for deferring roothub registration"
     - mm: khugepaged: skip huge page collapse for special files
     - Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
     - [arm*] 9120/1: Revert "amba: make use of -1 IRQs warn"
     - [arm64] Revert "wcn36xx: Disable bmps when encryption is disabled"
     - ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
     - ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.79
     - [x86] Revert "x86/kvm: fix vcpu-id indexed array sizes"
     - [arm64,armhf] usb: musb: Balance list entry in musb_gadget_queue
     - usb-storage: Add compatibility quirk flags for iODD 2531/2541
     - [arm*] binder: don't detect sender/target during buffer cleanup
     - printk/console: Allow to disable console output by using console="" or
       console=null
     - staging: rtl8712: fix use-after-free in rtl8712_dl_fw
     - isofs: Fix out of bound access for corrupted isofs image
     - [x86] comedi: dt9812: fix DMA buffers on stack
     - [x86] comedi: ni_usb6501: fix NULL-deref in command paths
     - [x86] comedi: vmk80xx: fix transfer-buffer overflows
     - [x86] comedi: vmk80xx: fix bulk-buffer overflow
     - [x86] comedi: vmk80xx: fix bulk and interrupt message timeouts
     - staging: r8712u: fix control-message timeout
     - [x86] staging: rtl8192u: fix control-message timeouts
     - rsi: fix control-message timeout
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.80
     - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
       delay
     - usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
     - [arm*] binder: use euid from cred instead of using task
     - [arm*] binder: use cred instead of task for selinux checks
     - [arm*] binder: use cred instead of task for getsecid
     - Input: iforce - fix control-message timeout
     - Input: elantench - fix misreporting trackpoint coordinates
       (Closes: #989285)
     - libata: fix read log timeout value
     - ocfs2: fix data corruption on truncate
     - scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
     - scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
     - scsi: qla2xxx: Fix use after free in eh_abort path
     - [arm64,armhf] mmc: dw_mmc: Dont wait for DRTO on Write RSP error
     - exfat: fix incorrect loading of i_blocks for large files
     - tpm: Check for integer overflow in tpm2_map_response_body()
     - media: ite-cir: IR receiver stop working after receive overflow
       (Closes: #996672)
     - media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
       (Closes: #994050)
     - media: v4l2-ioctl: Fix check_ext_ctrls
     - ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
     - ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
     - ALSA: hda/realtek: Add quirk for Clevo PC70HS
     - ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
     - ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
     - ALSA: hda/realtek: Add quirk for ASUS UX550VE
     - ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
     - ALSA: ua101: fix division by zero at probe
     - ALSA: 6fire: fix control and bulk message timeouts
     - ALSA: line6: fix control and interrupt message timeouts
     - ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
     - ALSA: usb-audio: Add registration quirk for JBL Quantum 400
     - ALSA: hda: Free card instance properly at probe errors
     - ALSA: synth: missing check for possible NULL after the call to kstrdup
     - ALSA: timer: Fix use-after-free problem
     - ALSA: timer: Unconditionally unlink slave instances, too
     - ext4: fix lazy initialization next schedule time computation in more
       granular unit
     - ext4: ensure enough credits in ext4_ext_shift_path_extents
     - ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
     - fuse: fix page stealing
     - [x86] cpu: Fix migration safety with X86_BUG_NULL_SEL
     - [x86] irq: Ensure PI wakeup handler is unregistered before module unload
     - ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
     - ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
     - [arm64] cavium: Return negative value when pci_alloc_irq_vectors() fails
     - scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
     - scsi: qla2xxx: Fix unmap of already freed sgl
     - mISDN: Fix return values of the probe function
     - [arm64] cavium: Fix return values of the probe function
     - sfc: Export fibre-specific supported link modes
     - sfc: Don't use netif_info before net_device setup
     - [armhf] reset: socfpga: add empty driver allowing consumers to probe
     - drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
     - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
     - bpf: Prevent increasing bpf_jit_limit above max
     - xen/netfront: stop tx queues during live migration
     - nvmet-tcp: fix a memory leak when releasing a queue
     - [armhf] spi: spl022: fix Microwire full duplex mode
     - net: multicast: calculate csum of looped-back and forwarded packets
     - [armhf] watchdog: Fix OMAP watchdog early handling
     - drm: panel-orientation-quirks: Add quirk for GPD Win3
     - block: schedule queue restart after BLK_STS_ZONE_RESOURCE
     - nvmet-tcp: fix header digest verification
     - r8169: Add device 10ec:8162 to driver r8169
     - [x86] vmxnet3: do not stop tx queues after netif_device_detach()
     - nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
     - net/smc: Fix smc_link->llc_testlink_time overflow
     - net/smc: Correct spelling mistake to TCPF_SYN_RECV
     - rds: stop using dmapool
     - btrfs: clear MISSING device status bit in btrfs_close_one_device
     - btrfs: fix lost error handling when replaying directory deletes
     - btrfs: call btrfs_check_rw_degradable only if there is a missing device
     - [x86] KVM: VMX: Unregister posted interrupt wakeup handler on hardware
       unsetup
     - selinux: fix race condition when computing ocontext SIDs
     - [armhf] regulator: s5m8767: do not use reset value as DVS voltage if GPIO
       DVS is disabled
     - [amd64] EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
     - [x86] mwifiex: fix division by zero in fw download path
     - ath6kl: fix division by zero in send path
     - ath6kl: fix control-message timeout
     - ath10k: fix control-message timeout
     - ath10k: fix division by zero in send path
     - PCI: Mark Atheros QCA6174 to avoid bus reset
     - rtl8187: fix control-message timeouts
     - [arm64] wcn36xx: Fix HT40 capability for 2Ghz band
     - [arm64] wcn36xx: Fix tx_status mechanism
     - [arm64] wcn36xx: Fix (QoS) null data frame bitrate/modulation
     - PM: sleep: Do not let "syscore" devices runtime-suspend during system
       transitions
     - mwifiex: Read a PCI register after writing the TX ring write pointer
     - mwifiex: Try waking the firmware until we get an interrupt
     - libata: fix checking of DMA state
     - [arm64] wcn36xx: handle connection loss indication
     - rsi: fix occasional initialisation failure with BT coex
     - rsi: fix key enabled check causing unwanted encryption for vap_id > 0
     - rsi: fix rate mask set leading to P2P failure
     - rsi: Fix module dev_oper_mode parameter description
     - [x86] perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
     - [x86] perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
     - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
     - signal: Remove the bogus sigkill_pending in ptrace_stop
     - [mips*] signal/mips: Update (_save|_restore)_fp_context to fail with
       -EFAULT
     - [arm64] soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
     - [arm64] soc: fsl: dpio: use the combined functions to protect critical
       zone
     - [x86] power: supply: max17042_battery: Prevent int underflow in
       set_soc_threshold
     - [x86] power: supply: max17042_battery: use VFSOC for capacity when no rsns
     - [arm64] KVM: arm64: Extract ESR_ELx.EC only
     - [x86] KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in
       use
     - can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
     - can: j1939: j1939_can_recv(): ignore messages with invalid source address
     - ring-buffer: Protect ring_buffer_reset() from reentrancy
     - serial: core: Fix initializing and restoring termios speed
     - ifb: fix building without CONFIG_NET_CLS_ACT
     - ALSA: mixer: oss: Fix racy access to slots
     - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
     - xen/balloon: add late_initcall_sync() for initial ballooning done
     - ovl: fix use after free in struct ovl_aio_req
     - [arm*] PCI: pci-bridge-emul: Fix emulation of W1C bits
     - [arm64] PCI: aardvark: Do not clear status bits of masked interrupts
     - [arm64] PCI: aardvark: Fix checking for link up via LTSSM state
     - [arm64] PCI: aardvark: Do not unmask unused interrupts
     - [arm64] PCI: aardvark: Fix reporting Data Link Layer Link Active
     - [arm64] PCI: aardvark: Fix configuring Reference clock
     - [arm64] PCI: aardvark: Fix return value of MSI domain .alloc() method
     - [arm64] PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
     - [arm64] PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on
       emulated bridge
     - [arm64] PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on
       emulated bridge
     - [arm64] PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
     - [arm64] PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
     - quota: check block number when reading the block in quota file
     - quota: correct error number in free_dqentry()
     - pinctrl: core: fix possible memory leak in pinctrl_enable()
     - iio: dac: ad5446: Fix ad5622_write() return value
     - iio: ad5770r: make devicetree property reading consistent
     - USB: serial: keyspan: fix memleak on probe errors
     - serial: 8250: fix racy uartclk update
     - USB: iowarrior: fix control-message timeouts
     - [arm64,armhf] USB: chipidea: fix interrupt deadlock
     - [x86] power: supply: max17042_battery: Clear status bits in interrupt
       handler
     - dma-buf: WARN on dmabuf release with pending attachments
     - drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
     - drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
     - drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
     - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
       (CVE-2021-3640)
     - Bluetooth: fix use-after-free error in lock_sock_nested()
     - drm/panel-orientation-quirks: add Valve Steam Deck
     - [x86] platform/x86: wmi: do not fail if disabling fails
     - locking/lockdep: Avoid RCU-induced noinstr fail
     - net: sched: update default qdisc visibility after Tx queue cnt changes
     - rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
     - ath11k: Align bss_chan_info structure with firmware
     - [x86] Increase exception stack sizes
     - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
     - mwifiex: Properly initialize private structure on interface type changes
     - fscrypt: allow 256-bit master keys with AES-256-XTS
     - drm/amdgpu: Fix MMIO access page fault
     - ath11k: Avoid reg rules update during firmware recovery
     - ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
     - ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected
       packets
     - ath10k: high latency fixes for beacon buffer
     - media: netup_unidvb: handle interrupt properly according to the firmware
     - media: uvcvideo: Set capability in s_param
     - media: uvcvideo: Return -EIO for control errors
     - media: uvcvideo: Set unique vdev name based in type
     - [armhf] media: imx: set a media_device bus_info string
     - media: mceusb: return without resubmitting URB in case of -EPROTO error.
     - rtw88: fix RX clock gate setting while fifo dump
     - brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
     - ipmi: Disable some operations during a panic
     - fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
     - ACPICA: Avoid evaluating methods too early during system resume
     - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
     - net-sysfs: try not to restart the syscall if it will fail eventually
     - tracefs: Have tracefs directories not set OTH permission bits by default
     - ath: dfs_pattern_detector: Fix possible null-pointer dereference in
       channel_detector_create()
     - iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
     - ACPI: battery: Accept charges over the design capacity as full
     - net: phy: micrel: make *-skew-ps check more lenient
     - [arm64] drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
     - block: bump max plugged deferred size from 16 to 32
     - md: update superblock after changing rdev flags in state_store
     - memstick: r592: Fix a UAF bug when removing the driver
     - lib/xz: Avoid overlapping memcpy() with invalid input with in-place
       decompression
     - lib/xz: Validate the value before assigning it to an enum variable
     - workqueue: make sysfs of unbound kworker cpumask more clever
     - mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
     - block: remove inaccurate requeue check
     - nvmet: fix use-after-free when a port is removed
     - nvmet-rdma: fix use-after-free when a port is removed
     - nvmet-tcp: fix use-after-free when a port is removed
     - nvme: drop scan_lock and always kick requeue list when removing namespaces
     - PM: hibernate: Get block device exclusively in swsusp_check()
     - iwlwifi: mvm: disable RX-diversity in powersave
     - gre/sit: Don't generate link-local addr if addr_gen_mode is
       IN6_ADDR_GEN_MODE_NONE
     - gfs2: Cancel remote delete work asynchronously
     - gfs2: Fix glock_hash_walk bugs
     - vrf: run conntrack only in context of lower/physdev for locally generated
       packets
     - net: annotate data-race in neigh_output()
     - ACPI: AC: Quirk GK45 to skip reading _PSR
     - btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
     - btrfs: do not take the uuid_mutex in btrfs_rm_device
     - [arm64] wcn36xx: Correct band/freq reporting on RX
     - [x86] hyperv: Protect set_hv_tscchange_cb() against getting preempted
     - drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
     - task_stack: Fix end_of_stack() for architectures with upwards-growing
       stack
     - erofs: don't trigger WARN() when decompression fails
     - netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream
       state
     - Bluetooth: fix init and cleanup of sco_conn.timeout_work
     - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
     - objtool: Add xen_start_kernel() to noreturn list
     - [x86] xen: Mark cpu_bringup_and_idle() as dead_end_function
     - objtool: Fix static_call list generation
     - virtio-gpu: fix possible memory allocation failure
     - lockdep: Let lock_is_held_type() detect recursive read as read
     - net: net_namespace: Fix undefined member in key_remove_domain()
     - cgroup: Make rebind_subsystems() disable v2 controllers all at once
     - [arm64] wcn36xx: Fix Antenna Diversity Switching
     - Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
     - [arm64] crypto: caam - disable pkc for non-E SoCs
     - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
     - ath11k: fix some sleeping in atomic bugs
     - ath11k: Avoid race during regd updates
     - ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
     - ath11k: Fix memory leak in ath11k_qmi_driver_event_work
     - ath10k: Fix missing frame timestamp for beacon/probe-resp
     - ath10k: sdio: Add missing BH locking around napi_schdule()
     - drm/ttm: stop calling tt_swapin in vm_access
     - [arm64] mm: update max_pfn after memory hotplug
     - drm/amdgpu: fix warning for overflow check
     - media: em28xx: add missing em28xx_close_extension
     - media: dvb-usb: fix ununit-value in az6027_rc_query
     - media: v4l2-ioctl: S_CTRL output the right value
     - media: si470x: Avoid card name truncation
     - [x86] media: tm6000: Avoid card name truncation
     - media: cx23885: Fix snd_card_free call on null card pointer
     - kprobes: Do not use local variable when creating debugfs file
     - cpuidle: Fix kobject memory leaks in error paths
     - media: em28xx: Don't use ops->suspend if it is NULL
     - ath9k: Fix potential interrupt storm on queue reset
     - PM: EM: Fix inefficient states detection
     - [amd64] EDAC/amd64: Handle three rank interleaving mode
     - rcu: Always inline rcu_dynticks_task*_{enter,exit}()
     - netfilter: nft_dynset: relax superfluous check on set updates
     - [x86] crypto: qat - detect PFVF collision after ACK
     - [x86] crypto: qat - disregard spurious PFVF interrupts
     - b43legacy: fix a lower bounds test
     - b43: fix a lower bounds test
     - [amd64] gve: Recover from queue stall due to missed IRQ
     - [armhf] mmc: sdhci-omap: Fix NULL pointer exception if regulator is not
       configured
     - [armhf] mmc: sdhci-omap: Fix context restore
     - memstick: jmb38x_ms: use appropriate free function in
       jmb38x_ms_alloc_host()
     - net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
     - hwmon: Fix possible memleak in __hwmon_device_register()
     - ath10k: fix max antenna gain unit
     - kernel/sched: Fix sched_fork() access an invalid sched_task_group
     - tcp: switch orphan_count to bare per-cpu counters
     - [arm64] drm/msm: potential error pointer dereference in init()
     - [arm64] drm/msm: uninitialized variable in msm_gem_import()
     - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
     - [x86] platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
     - mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
     - rsi: stop thread firstly in rsi_91x_init() error handling
     - mwifiex: Send DELBA requests according to spec
     - [arm64] net: enetc: unmap DMA in enetc_send_cmd()
     - phy: micrel: ksz8041nl: do not use power down mode
     - nvme-rdma: fix error code in nvme_rdma_setup_ctrl
     - PM: hibernate: fix sparse warnings
     - [arm64] drm/msm: Fix potential NULL dereference in DPU SSPP
     - bpftool: Avoid leaking the JSON writer prepared for program metadata
     - [s390x] gmap: don't unconditionally call pte_unmap_unlock() in
       __gmap_zap()
     - [s390x] KVM: pv: avoid double free of sida page
     - [s390x] KVM: pv: avoid stalls for kvm_s390_pv_init_vm
     - tpm: fix Atmel TPM crash caused by too frequent queries
     - tpm_tis_spi: Add missing SPI ID
     - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
     - [s390x] KVM: Fix handle_sske page fault handling
     - libertas_tf: Fix possible memory leak in probe and disconnect
     - libertas: Fix possible memory leak in probe and disconnect
     - [arm64] wcn36xx: add proper DMA memory barriers in rx path
     - [arm64] wcn36xx: Fix discarded frames due to wrong sequence number
     - drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
     - [amd64,arm64] net: amd-xgbe: Toggle PLL settings during rate change
     - net: phylink: avoid mvneta warning when setting pause parameters
     - crypto: pcrypt - Delay write to padata->info
     - udp6: allow SO_MARK ctrl msg to affect routing
     - cgroup: Fix rootcg cpu.stat guest double counting
     - bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and
       var_off.
     - bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
     - iio: st_sensors: Call st_sensors_power_enable() from bus drivers
     - iio: st_sensors: disable regulators after device unregistration
     - RDMA/bnxt_re: Fix query SRQ failure
     - [arm64] dts: meson-g12a: Fix the pwm regulator supply properties
     - [armhf] bus: ti-sysc: Fix timekeeping_suspended warning on resume
     - scsi: dc395: Fix error case unwinding
     - JFS: fix memleak in jfs_mount
     - ALSA: hda: Reduce udelay() at SKL+ position reporting
     - ALSA: hda: Release controller display power during shutdown/reboot
     - ALSA: hda: Fix hang during shutdown due to link reset
     - ALSA: hda: Use position buffer for SKL+ again
     - soundwire: debugfs: use controller id and link_id for debugfs
     - scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
     - driver core: Fix possible memory leak in device_link_add()
     - [x86] ASoC: SOF: topology: do not power down primary core during topology
       removal
     - [arm64,armhf] soc/tegra: Fix an error handling path in
       tegra_powergate_power_up()
     - [powerpc*] Refactor is_kvm_guest() declaration to new header
     - [powerpc*] Rename is_kvm_guest() to check_kvm_guest()
     - [powerpc*] Reintroduce is_kvm_guest() as a fast-path check
     - [powerpc*] Fix is_kvm_guest() / kvm_para_available()
     - [powerpc*] fix unbalanced node refcount in check_kvm_guest()
     - serial: 8250_dw: Drop wrong use of ACPI_PTR()
     - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
     - RDMA/mlx4: Return missed an error if device doesn't support steering
     - iio: adis: do not disabe IRQs in 'adis_init()'
     - scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
     - [arm64,armhf] serial: imx: fix detach/attach of serial console
     - [arm*] usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
     - [arm*] usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be
       disabled
     - [arm*] usb: dwc2: drd: reset current session before setting the new one
     - [arm64] firmware: qcom_scm: Fix error retval in
       __qcom_scm_is_call_available()
     - [arm64] phy: qcom-qusb2: Fix a memory leak on probe
     - [armhf] phy: ti: gmii-sel: check of_get_address() for failure
     - [arm64] serial: xilinx_uartps: Fix race condition causing stuck TX
     - HID: u2fzero: clarify error check and length calculations
     - HID: u2fzero: properly handle timeouts in usb_submit_urb
     - virtio_ring: check desc == NULL when using indirect with packed
     - [mips*] cm: Convert to bitfield API to fix out-of-bounds access
     - apparmor: fix error check
     - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
     - nfsd: don't alloc under spinlock in rpc_parse_scope_id
     - NFS: Fix dentry verifier races
     - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
     - drm/plane-helper: fix uninitialized variable reference
     - [arm64] PCI: aardvark: Don't spam about PIO Response Status
     - [arm64] PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on
       emulated bridge
     - opp: Fix return in _opp_add_static_v2()
     - NFS: Fix deadlocks in nfs_scan_commit_list()
     - fs: orangefs: fix error return code of orangefs_revalidate_lookup()
     - [arm64] mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
     - mtd: core: don't remove debugfs directory if device is in use
     - [armhf] remoteproc: Fix a memory leak in an error handling path in
       'rproc_handle_vdev()'
     - NFS: Fix up commit deadlocks
     - NFS: Fix an Oops in pnfs_mark_request_commit()
     - Fix user namespace leak
     - [arm64] soc: fsl: dpaa2-console: free buffer before returning from
       dpaa2_console_read
     - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
     - [x86] watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
     - scsi: qla2xxx: Changes to support FCP2 Target
     - scsi: qla2xxx: Relogin during fabric disturbance
     - scsi: qla2xxx: Fix gnl list corruption
     - scsi: qla2xxx: Turn off target reset during issue_lip
     - NFSv4: Fix a regression in nfs_set_open_stateid_locked()
     - xen-pciback: Fix return in pm_ctrl_init()
     - [armhf] net: davinci_emac: Fix interrupt pacing disable
     - ethtool: fix ethtool msg len calculation for pause stats
     - net: vlan: fix a UAF in vlan_dev_real_dev()
     - ice: Fix replacing VF hardware MAC to existing MAC filter
     - ice: Fix not stopping Tx queues for VFs
     - [x86] ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
     - net: phy: fix duplex out of sync problem while changing settings
     - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
     - mfd: core: Add missing of_node_put for loop iteration
     - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
       zs_unregister_migration()
     - zram: off by one in read_block_state()
     - llc: fix out-of-bound array index in llc_sk_dev_hash()
     - nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
     - [arm64] pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
     - bpf, sockmap: Remove unhash handler for BPF sockmap usage
     - bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
     - [amd64] gve: Fix off by one in gve_tx_timeout()
     - seq_file: fix passing wrong private data
     - net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
     - [arm64] net: hns3: fix kernel crash when unload VF while it is being reset
     - [arm64] net: hns3: allow configure ETS bandwidth of all TCs
     - net: stmmac: allow a tc-taprio base-time of zero
     - vsock: prevent unnecessary refcnt inc for nonblocking connect
     - net/smc: fix sk_refcnt underflow on linkdown and fallback
     - cxgb4: fix eeprom len when diagnostics not implemented
     - [armel,armhf] 9155/1: fix early early_iounmap()
     - [armhf] 9156/1: drop cc-option fallbacks for architecture selection
     - [x86] mce: Add errata workaround for Skylake SKX37
     - posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
     - f2fs: should use GFP_NOFS for directory inodes
     - net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
     - 9p/net: fix missing error check in p9_check_errors
     - memcg: prohibit unconditional exceeding the limit of dying tasks
     - [powerpc*] lib: Add helper to check if offset is within conditional branch
       range
     - [powerpc*] bpf: Validate branch ranges
     - [powerpc*] security: Add a helper to query stf_barrier type
     - [powerpc*] bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
     - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
     - mm, oom: do not trigger out_of_memory from the #PF
     - video: backlight: Drop maximum brightness override for brightness zero
     - [s390x] cio: check the subchannel validity for dev_busid
     - [s390x] tape: fix timer initialization in tape_std_assign()
     - [s390x] ap: Fix hanging ioctl caused by orphaned replies
     - [s390x] cio: make ccw_device_dma_* more robust
     - [powerpc*] powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module
       unload
     - [arm64,armhf] drm/sun4i: Fix macros in sun8i_csc.h
     - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
     - [arm64] PCI: aardvark: Fix PCIe Max Payload Size setting
     - SUNRPC: Partial revert of commit 6f9f17287e78
     - ath10k: fix invalid dma_addr_t token assignment
     - arch/cc: Introduce a function to check for confidential computing features
     - [arm64,armhf] soc/tegra: pmc: Fix imbalanced clock disabling in error code
       path
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.81
     - block: Add a helper to validate the block size
     - loop: Use blk_validate_block_size() to validate block size
     - bootconfig: init: Fix memblock leak in xbc_make_cmdline()
     - net: stmmac: add clocks management for gmac driver
     - net: stmmac: fix missing unlock on error in stmmac_suspend()
     - net: stmmac: fix system hang if change mac address after interface ifdown
     - net: stmmac: fix issue where clk is being unprepared twice
     - [arm64,armhf] net: stmmac: dwmac-rk: fix unbalanced pm_runtime_enable
       warnings
     - [x86] iopl: Fake iopl(3) CLI/STI usage
     - PCI/MSI: Destroy sysfs before freeing entries
     - PCI/MSI: Deal with devices lying about their MSI mask capability
     - PCI: Add MSI masking quirk for Nvidia ION AHCI
     - erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
     - erofs: fix unsafe pagevec reuse of hooked pclusters
     - scripts/lld-version.sh: Rewrite based on upstream ld-version.sh
     - perf/core: Avoid put_page() when GUP fails
     - thermal: Fix NULL pointer dereferences in of_thermal_ functions
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.82
     - [arm64] zynqmp: Do not duplicate flash partition label property
     - [arm64] zynqmp: Fix serial compatible string
     - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
     - [armhf] bus: ti-sysc: Add quirk handling for reinit on context lost
     - [armhf] bus: ti-sysc: Use context lost quirk for otg
     - [armhf] usb: musb: tusb6010: check return value after calling
       platform_get_resource()
     - [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
     - staging: rtl8723bs: remove possible deadlock when disconnect (v2)
     - [x86] ASoC: SOF: Intel: hda-dai: fix potential locking issue
     - [armhf] clk: imx: imx6ul: Move csi_sel mux to correct base register
     - [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
     - scsi: advansys: Fix kernel pointer leak
     - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
       codec
     - firmware_loader: fix pre-allocated buf built-in firmware use
     - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
     - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
     - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
     - scsi: target: Fix ordered tag handling
     - scsi: target: Fix alua_tg_pt_gps_count tracking
     - iio: imu: st_lsm6dsx: Avoid potential array overflow in
       st_lsm6dsx_set_odr()
     - [i386] ALSA: gus: fix null pointer dereference on pointer block
     - maple: fix wrong return value of maple_bus_init().
     - f2fs: fix up f2fs_lookup tracepoints
     - f2fs: fix to use WHINT_MODE
     - f2fs: compress: disallow disabling compress on non-empty compressed file
     - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
     - [armhf] clk/ast2600: Fix soc revision for AHB
     - [arm64] clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
     - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
     - [x86] perf/x86/vlbr: Add c->flags to vlbr event constraints
     - blkcg: Remove extra blkcg_bio_issue_init
     - perf bpf: Avoid memory leak from perf_env__insert_btf()
     - perf bench futex: Fix memory leak of perf_cpu_map__new()
     - perf tests: Remove bash construct from record+zstd_comp_decomp.sh
     - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
     - net-zerocopy: Copy straggler unaligned data for TCP Rx. zerocopy.
     - net-zerocopy: Refactor skb frag fast-forward op.
     - tcp: Fix uninitialized access in skb frags array for Rx 0cp.
     - tracing: Add length protection to histogram string copies
     - bnxt_en: reject indirect blk offload when hw-tc-offload is off
     - tipc: only accept encrypted MSG_CRYPTO msgs
     - net: reduce indentation level in sk_clone_lock()
     - sock: fix /proc/net/sockstat underflow in sk_clone_lock()
     - net/smc: Make sure the link_id is unique
     - iavf: Fix return of set the new channel count
     - iavf: check for null in iavf_fix_features
     - iavf: free q_vectors before queues in iavf_disable_vf
     - iavf: Fix failure to exit out from last all-multicast mode
     - iavf: prevent accidental free of filter structure
     - iavf: validate pointers
     - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
     - iavf: Fix for setting queues to 0
     - [x86] platform/x86: hp_accel: Fix an error handling path in
       'lis3lv02d_probe()'
     - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
     - net/mlx5: Lag, update tracker when state change event received
     - net/mlx5: E-Switch, Change mode lock from mutex to rw semaphore
     - net/mlx5: E-Switch, return error if encap isn't supported
     - scsi: core: sysfs: Fix hang when device state is set via sysfs
     - net: sched: act_mirred: drop dst for the direction from egress to ingress
     - [arm64] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
     - net: virtio_net_hdr_to_skb: count transport header in UFO
     - i40e: Fix correct max_pkt_size on VF RX queue
     - i40e: Fix NULL ptr dereference on VSI filter sync
     - i40e: Fix changing previously set num_queue_pairs for PFs
     - i40e: Fix ping is lost after configuring ADq on VF
     - i40e: Fix warning message and call stack during rmmod i40e driver
     - i40e: Fix creation of first queue by omitting it if is not power of two
     - i40e: Fix display error code in dmesg
     - e100: fix device suspend/resume (Closes: #995927)
     - [powerpc*] KVM: PPC: Book3S HV: Use GLOBAL_TOC for
       kvmppc_h_set_dabr/xdabr()
     - [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
       Server
     - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
     - [s390x] kexec: fix return code handling
     - [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
     - tun: fix bonding active backup with arp monitoring
     - tipc: check for null after calling kmemdup
     - ipc: WARN if trying to remove ipc object which is absent
     - [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup
       fails
     - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
     - [s390x] kexec: fix memory leak of ipl report buffer
     - block: Check ADMIN before NICE for IOPRIO_CLASS_RT
     - [x86] KVM: nVMX: don't use vcpu->arch.efer when checking host state on
       nested state load
     - udf: Fix crash after seekdir
     - [armhf] net: stmmac: socfpga: add runtime suspend/resume callback for
       stratix10 platform
     - btrfs: fix memory ordering between normal and ordered work functions
     - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
     - drm/udl: fix control-message timeout
     - drm/nouveau: Add a dedicated mutex for the clients list (CVE-2020-27820)
     - drm/nouveau: use drm_dev_unplug() during device removal (CVE-2020-27820)
     - drm/nouveau: clean up all clients on device removal (CVE-2020-27820)
     - [x86] drm/i915/dp: Ensure sink rate values are always valid
     - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
       and dvi connectors
     - scsi: ufs: core: Fix task management completion
     - scsi: ufs: core: Fix task management completion timeout race
     - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (CVE-2021-4002)
     - RDMA/netlink: Add __maybe_unused to static inline in C file
     - selinux: fix NULL-pointer dereference when hashtab allocation fails
     - ASoC: DAPM: Cover regression by kctl change notification fix
     - ice: Delete always true check of PF pointer
     - fs: export an inode_update_time helper
     - btrfs: update device path inode time instead of bd_inode
     - [x86] ALSA: hda: hdac_ext_stream: fix potential locking issues
     - ALSA: hda: hdac_stream: fix potential locking issue in
       snd_hdac_stream_assign()
     - Revert "perf: Rework perf_event_exit_event()"
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.83
     - bpf: Fix toctou on read-only map's constant scalar tracking
       (CVE-2021-4001)
     - ACPI: Get acpi_device's parent from the parent field
     - USB: serial: option: add Telit LE910S1 0x9200 composition
     - USB: serial: option: add Fibocom FM101-GL variants
     - [arm*] usb: dwc2: gadget: Fix ISOC flow for elapsed frames
     - [arm*] usb: dwc2: hcd_queue: Fix use of floating point literal
     - [arm64,armhf] usb: dwc3: gadget: Ignore NoStream after End Transfer
     - [arm64,armhf] usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer
     - [arm64,armhf] usb: dwc3: gadget: Fix null pointer exception
     - net: nexthop: fix null pointer dereference when IPv6 is not enabled
     - [arm64,armhf] usb: chipidea: ci_hdrc_imx: fix potential error pointer
       dereference in probe
     - usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
     - usb: hub: Fix usb enumeration issue due to address0 race
     - usb: hub: Fix locking issues with address0_mutex
     - [arm*] binder: fix test regression due to sender_euid change
     - ALSA: ctxfi: Fix out-of-range access
     - ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100
     - ALSA: hda/realtek: Fix LED on HP ProBook 435 G7
     - media: cec: copy sequence field for the reply
     - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
     - [x86] staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
     - fuse: release pipe buf after last use
     - xen: don't continue xenstore initialization in case of errors
     - xen: detect uninitialized xenbus in xenbus_init
     - [powerpc*] KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
     - tracing/uprobe: Fix uprobe_perf_open probes iteration
     - tracing: Fix pid filtering when triggers are attached
     - [arm64,armhf] mmc: sdhci-esdhc-imx: disable CMDQ support
     - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
     - [armhf] mdio: aspeed: Fix "Link is Down" issue
     - [arm64] PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
     - [arm64] PCI: aardvark: Update comment about disabling link training
     - [arm64] PCI: aardvark: Implement re-issuing config requests on CRS
       response
     - [arm64] PCI: aardvark: Simplify initialization of rootcap on virtual
       bridge
     - [arm64] PCI: aardvark: Fix link training
     - proc/vmcore: fix clearing user buffer by properly using clear_user()
     - netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
     - netfilter: ctnetlink: do not erase error code with EINVAL
     - netfilter: ipvs: Fix reuse connection if RS weight is 0
     - netfilter: flowtable: fix IPv6 tunnel addr match
     - [x86] ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
     - net: ieee802154: handle iftypes as u32
     - NFSv42: Don't fail clone() unless the OP_CLONE operation failed
     - [armhf] socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
     - drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks
     - scsi: mpt3sas: Fix kernel panic during drive powercycle test
     - [arm*] drm/vc4: fix error code in vc4_create_object()
     - iavf: Prevent changing static ITR values if adaptive moderation is on
     - ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec
     - [arm64,armhf] firmware: smccc: Fix check for ARCH_SOC_ID not implemented
     - ipv6: fix typos in __ip6_finish_output()
     - nfp: checking parameter process for rx-usecs/tx-usecs is invalid
     - net: stmmac: fix system hang caused by eee_ctrl_timer during
       suspend/resume
     - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls
     - net: ipv6: add fib6_nh_release_dsts stub
     - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
     - ice: fix vsi->txq_map sizing
     - ice: avoid bpf_prog refcount underflow
     - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
     - scsi: scsi_debug: Zero clear zones at reset write pointer
     - erofs: fix deadlock when shrink erofs slab
     - net/smc: Ensure the active closing peer first closes clcsock
     - [arm64,armhf] net: marvell: mvpp2: increase MTU limit when XDP enabled
     - nvmet-tcp: fix incomplete data digest send
     - [armhf] net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
     - PM: hibernate: use correct mode for swsusp_close()
     - drm/amd/display: Set plane update flags for all planes in reset
     - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
       flows
     - lan743x: fix deadlock in lan743x_phy_link_status_change()
     - net: phylink: Force link down and retrigger resolve on interface change
     - net: phylink: Force retrigger in case of latched link-fail indicator
     - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
     - net/smc: Fix loop in smc_listen
     - nvmet: use IOCB_NOWAIT only if the filesystem supports it
     - igb: fix netpoll exit with traffic
     - [mips*] loongson64: fix FTLB configuration
     - [mips*] use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
     - net/sched: sch_ets: don't peek at classes beyond 'nbands'
     - net: vlan: fix underflow for the real_dev refcnt
     - net/smc: Don't call clcsock shutdown twice when smc shutdown
     - [arm64] net: hns3: fix VF RSS failed problem after PF enable multi-TCs
     - [arm64] net: mscc: ocelot: don't downgrade timestamping RX filters in
       SIOCSHWTSTAMP
     - [arm64] net: mscc: ocelot: correctly report the timestamping RX filters in
       ethtool
     - tcp: correctly handle increased zerocopy args struct size
     - sched/scs: Reset task stack state in bringup_cpu()
     - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
     - ceph: properly handle statfs on multifs setups
     - smb3: do not error on fsync when readonly
     - [amd64] iommu/amd: Clarify AMD IOMMUv2 initialization messages
     - vhost/vsock: fix incorrect used length reported to the guest
     - tracing: Check pid filtering when creating events
     - xen: sync include/xen/interface/io/ring.h with Xen's newest version
     - xen/blkfront: read response from backend only once
     - xen/blkfront: don't take local copy of a request from the ring page
     - xen/blkfront: don't trust the backend response data blindly
     - xen/netfront: read response from backend only once
     - xen/netfront: don't read data from request on the ring page
     - xen/netfront: disentangle tx_skb_freelist
     - xen/netfront: don't trust the backend response data blindly
     - tty: hvc: replace BUG_ON() with negative return value
     - [s390x] mm: validate VMA in PGSTE manipulation functions
     - shm: extend forced shm destroy to support objects from several IPC nses
     - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP
     - drm/amdgpu/gfx9: switch to golden tsc registers for renoir+
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.84
     - NFSv42: Fix pagecache invalidation after COPY/CLONE
     - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
     - ovl: simplify file splice
     - ovl: fix deadlock in splice write
     - gfs2: release iopen glock early in evict
     - gfs2: Fix length of holes reported at end-of-file
     - [powerpc*] pseries/ddw: Revert "Extend upper limit for huge DMA window for
       persistent memory"
     - mac80211: do not access the IV when it was stripped
     - net/smc: Transfer remaining wait queue entries during fallback
     - [amd64,arm64] atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
       (CVE-2021-43975)
     - net: return correct error code
     - [x86] platform/x86: thinkpad_acpi: Add support for dual fan control
     - [x86] platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3
       deep
     - [s390x] setup: avoid using memblock_enforce_memory_limit
     - btrfs: check-integrity: fix a warning on write caching disabled disk
     - thermal: core: Reset previous low and high trip during thermal zone init
     - scsi: iscsi: Unblock session then wake up error handler
     - drm/amd/amdgpu: fix potential memleak
     - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
     - [arm64] ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array
       overflow in hns_dsaf_ge_srst_by_port()
     - ipv6: check return value of ipv6_skip_exthdr
     - net/smc: Avoid warning of possible recursive locking
     - ACPI: Add stubs for wakeup handler functions
     - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
     - kprobes: Limit max data_size of the kretprobe instances
     - rt2x00: do not mark device gone on EPROTO errors during start
     - ipmi: Move remove_work to dedicated workqueue
     - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
     - [s390x] pci: move pseudo-MMIO to prevent MIO overlap
     - fget: check that the fd still exists after getting a ref to it
     - ipv6: fix memory leak in fib6_rule_suppress
     - drm/amd/display: Allow DSC on supported MST branch devices
     - KVM: Disallow user memslot with size that exceeds "unsigned long"
     - [x86] KVM: nVMX: Flush current VPID (L1 vs. L2) for
       KVM_REQ_TLB_FLUSH_GUEST
     - [x86] KVM: x86: Use a stable condition around all VT-d PI paths
     - [arm64] KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and
       CPTR_EL2 to 1
     - [x86] KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
     - wireguard: allowedips: add missing __rcu annotation to satisfy sparse
     - wireguard: device: reset peer src endpoint when netns exits
     - wireguard: receive: use ring buffer for incoming handshakes
     - wireguard: receive: drop handshakes if queue lock is contended
     - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
     - [armhf] i2c: stm32f7: flush TX FIFO upon transfer errors
     - [armhf] i2c: stm32f7: recover the bus on access timeout
     - [armhf] i2c: stm32f7: stop dma transfer in case of NACK
     - tcp: fix page frag corruption on page fault
     - net: qlogic: qlcnic: Fix a NULL pointer dereference in
       qlcnic_83xx_add_rings()
     - net: mpls: Fix notifications when deleting a device
     - siphash: use _unaligned version by default
     - [arm64] ftrace: add missing BTIs
     - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
     - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
     - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
     - ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec
     - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no
       IRQ is available
     - [arm64,armhf] net: marvell: mvpp2: Fix the computation of shared CPUs
     - [arm64] dpaa2-eth: destroy workqueue at the end of remove function
     - net: annotate data-races on txq->xmit_lock_owner
     - ipv4: convert fib_num_tclassid_users to atomic_t
     - net/smc: fix wrong list_del in smc_lgr_cleanup_early
     - net/rds: correct socket tunable error in rds_tcp_tune()
     - net/smc: Keep smc_close_final rc during active close
     - [arm64] drm/msm/a6xx: Allocate enough space for GMU registers
     - [arm64] drm/msm: Do hw_init() before capturing GPU state
     - [amd64,arm64] atlantic: Increase delay for fw transactions
     - [amd64,arm64] atlatnic: enable Nbase-t speeds with base-t
     - [amd64,arm64] atlantic: Fix to display FW bundle version instead of FW mac
       version.
     - [amd64,arm64] atlantic: Add missing DIDs and fix 115c.
     - [amd64,arm64] Remove Half duplex mode speed capabilities.
     - [amd64,arm64] atlantic: Fix statistics logic for production hardware
     - [amd64,arm64] atlantic: Remove warn trace message.
     - [x86] KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
     - [x86] KVM: VMX: Set failure code in prepare_vmcs02()
     - [x86] entry: Use the correct fence macro after swapgs in kernel CR3
     - [x86] xen: Add xenpv_restore_regs_and_return_to_usermode()
     - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
     - [x86] pv: Switch SWAPGS to ALTERNATIVE
     - [x86] entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
     - vgacon: Propagate console boot parameters before calling `vc_resize'
     - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
     - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
     - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
     - [x86] tsc: Add a timer to make sure TSC_adjust is always checked
     - [x86] tsc: Disable clocksource watchdog for TSC on qualified platorms
     - [x86] 64/mm: Map all kernel memory into trampoline_pgd
     - [arm64] tty: serial: msm_serial: Deactivate RX DMA for polling support
     - [arm*] serial: pl011: Add ACPI SBSA UART match id
     - [arm64,armhf] serial: tegra: Change lower tolerance baud rate limit for
       tegra20 and tegra30
     - serial: core: fix transmit-buffer reset and memleak
     - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
     - serial: 8250_pci: rewrite pericom_do_set_divisor()
     - serial: 8250: Fix RTS modem control while in rs485 mode
     - iwlwifi: mvm: retry init flow if failed
     - ipmi: msghandler: Make symbol 'remove_work_wq' static
 .
   [ Salvatore Bonaccorso ]
   * integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after
     5.10.47.
   * Bump ABI to 10
   * Refresh "tools/perf: pmu-events: Fix reproducibility"
   * [rt] Update to 5.10.73-rt54
   * [rt] Refresh "tracing: Merge irqflags + preempt counter."
   * Refresh "Export symbols needed by Android drivers"
   * [rt] Refresh "printk: introduce kernel sync mode"
   * [rt] Refresh "printk: move console printing to kthreads"
   * [rt] Drop "rcutorture: Avoid problematic critical section nesting on RT"
   * [rt] Add new signing key for Luis Claudio R. Goncalves
   * [rt] Update to 5.10.83-rt58
 .
   [ Ben Hutchings ]
   * tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix
     reproducibility"
Checksums-Sha1:
 07e268dc40378b3244f224ccffa1aa09161e0e89 210302 linux_5.10.92-1~bpo10+1.dsc
 36052d7e88e3cf4d2e8c7d600c60c495a14b17fb 1472232 linux_5.10.92-1~bpo10+1.debian.tar.xz
 82d4fbddeecfcb45af246bbdde900abb339d9798 54695 linux_5.10.92-1~bpo10+1_source.buildinfo
Checksums-Sha256:
 535b02e57d028989f338d6882bcf6eb076744ce3ffed2f91fac185f5f2b020a3 210302 linux_5.10.92-1~bpo10+1.dsc
 84a18b5b6795511dd89027a9e245133d602d8933f1244bc554dc0821969962ec 1472232 linux_5.10.92-1~bpo10+1.debian.tar.xz
 2e63f32ec6cd60f15890dfa519d08cb340c431bc7e5528d8b233977f37820970 54695 linux_5.10.92-1~bpo10+1_source.buildinfo
Files:
 96ac7ec7730ac916d911267d7ef57370 210302 kernel optional linux_5.10.92-1~bpo10+1.dsc
 fe35e77901b543257df2945027c0d3ff 1472232 kernel optional linux_5.10.92-1~bpo10+1.debian.tar.xz
 c3625b0565c2f7a8eb79d50bb94662d4 54695 kernel optional linux_5.10.92-1~bpo10+1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAmH91V4ACgkQ57/I7JWG
EQk1sA/9GZh2teL4PrRGRiDSHVvydDCLglHCUHJOXQv+bIErkdnigFBC5LCeeKO/
rm3n8etwTgKGtTBDcYpJYHnzRk2S6GKj9GQFuslyts5TDtRCs2Zdjhox8TgF3w+K
RscKJE/b1vkVtTE09/yBVkZZ2ONBN1lbqBe3uHSz5j5SGLnpjvfqq01iM1h5qH75
/rxNVrsJbDgHeMnwdR/PLGCOZtJTJrZa3+DS1cDIaw2Uk+zMsdO17OkAHYMMElTy
SFJp8N2YKBmh59ESq5YpeypEENUPDffan8r9hkAh+5WEKdSh9LT5I/Mu4S86cLfW
4arW0mhO/GyTTY7g8CBRLFuU2wKisSSJyucx+VguIJlE/ovwkSLAD40+Cy1fyOmb
S336bTu++00eK2HS7TBnyYOKLIu7pLc3fvqnetoVFYDGpAVKemho9i5RoHUp4ky6
V09lyN2mLjGtQNn+ISh/PO8BmgWV8qDOIVxoeNS8Spmkmg844H0wz40bpB2wIJWV
NJwXHFjMRLt7zFDI39WhGeRtxZD7JFEGUQExRWCVbEq05dioYAOtTCsVyDw0djnf
HR7dSoEDuJUx5bjtngbSFj6hxhDBLEYdDOCDzucVgVhPXDRq9oIsCVuEpAYrYT09
yQ530XcdoH4M588jTu6MH/5tF/Nr+9mChh9s28gdHmjjmx1Yqk8=
=OVwG
-----END PGP SIGNATURE-----